Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: 9MNLQbNMvfSZCaZlnzcQV0lZyPYr27hM1CXQX4R8zx8=
Subject key identifier: 75:75:30:44:E5:98:2C:42:D9:10:6B:C7:0D:36:DA:87:46:51:35:3E
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 0194BD17A2EE27A7DDF45145CEF94CD3F829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: xYGrzyuESpDdNmAiLd4OADvJxEt8Tk52CqandA4VAD0=)
2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a2:ee:27:a7:dd:f4:51:45:ce:f9:4c:d3:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=75753044e5982c42d9106bc70d36da874651353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:9d:99:9f:78:01:13:c3:d7:ab:dc:e5:c9:
42:b0:07:98:23:8c:f6:69:8c:8c:57:24:5d:57:d9:
9e:81:d9:bf:9f:e5:ea:e8:ce:8d:a3:88:13:84:59:
15:7d:bd:28:ab:54:b9:e4:44:6f:07:96:16:73:d4:
d2:2f:d9:3d:28:62:52:ce:9a:c9:75:bd:2f:aa:39:
c8:5e:56:ef:74:e0:44:9e:18:ef:2e:b7:79:14:b3:
5e:4f:ce:25:2a:16:23:0b:d3:5b:f7:0c:25:97:6e:
8d:f2:8e:20:ab:46:5e:ed:57:99:c7:73:a7:77:bf:
09:2f:42:7d:c6:7b:71:0d:0a:3d:7f:fd:1b:9c:83:
d7:f2:bb:0a:be:b1:14:44:7e:72:ec:6c:b8:34:f4:
5b:77:a0:a8:9d:20:73:42:e5:cb:44:87:17:93:ff:
77:a4:11:fd:cc:09:3f:65:f4:39:ab:a0:05:d0:90:
73:5f:51:10:ab:e3:84:24:48:de:ab:d7:c0:ea:0d:
ec:a9:14:7c:a3:72:06:7b:72:91:93:5d:59:72:24:
b5:cd:ee:d2:bf:ef:db:f8:c3:d4:6a:ea:6d:d1:08:
01:44:c8:0f:39:cb:f4:1d:e2:a6:60:04:3a:f8:6e:
90:95:72:27:6c:09:3a:40:29:26:34:c0:63:f6:4b:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:30:44:E5:98:2C:42:D9:10:6B:C7:0D:36:DA:87:46:51:35:3E
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:22:27:97:95:cf:80:ad:d0:fe:b6:4c:36:33:bd:ff:b8:ff:
0a:72:91:7a:29:68:b0:12:ef:4f:d7:e9:2f:d0:6f:2d:39:6b:
fc:9a:c4:79:13:08:56:bd:71:e6:25:4e:9f:16:75:5e:f9:80:
a8:50:25:0d:b2:3b:9f:f1:16:75:7f:6f:01:fe:f2:fe:e6:8a:
2b:db:50:f2:ff:7f:b1:89:4a:a1:ae:85:f5:98:e6:b1:0e:b9:
60:37:64:29:48:0b:7b:92:fe:1b:a5:ee:c1:8c:32:8f:74:a4:
52:30:98:67:01:f2:08:c2:ce:7c:e1:25:7a:db:03:46:b8:5f:
90:cf:f0:01:9b:0a:bc:92:fb:34:75:2c:b2:45:9f:66:93:52:
85:1a:ad:3b:8f:b9:a5:2a:f7:b0:25:43:cd:32:52:f2:20:f7:
ad:e6:d9:78:80:95:b9:e6:ee:4a:fd:2e:ec:99:95:60:b9:96:
e6:10:7f:f8:63:bf:c0:60:60:20:33:d4:9f:5f:c2:76:dc:fe:
87:95:00:4e:de:74:55:c9:0f:fd:2c:48:a8:11:5a:25:89:04:
8d:3c:60:19:41:d5:33:10:43:a3:0f:20:67:a5:9e:94:13:0e:
50:ba:85:ae:d8:4e:3c:5e:ae:b6:98:5f:75:30:02:25:7b:97:
d3:01:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:37 2025 by rpki-client