Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: mRH138sX2NfSstoZdEBQTAZLMT5+/+nw2xD0AucIq2U=
Subject key identifier: E0:AF:21:4C:8C:70:EA:05:84:AD:4C:69:21:F3:23:5C:3D:8A:B0:A4
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0194BCE0C4A73C96B3C2727C2EA9ACC80010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 09A6
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: DatoPeiFRWmQbOfHAbyPsjD9npRuOT4QOx3OJspw/sY=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c4:a7:3c:96:b3:c2:72:7c:2e:a9:ac:c8:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=e0af214c8c70ea0584ad4c6921f3235c3d8ab0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:38:30:09:e1:dc:81:62:76:64:f4:85:40:
08:7f:5d:bd:ca:9d:b2:2b:31:bd:9d:e2:92:6a:9a:
b3:56:4e:e0:f0:d0:4b:13:75:1e:b6:0b:6c:2b:9f:
f1:07:5e:6e:b8:9c:cf:69:c8:15:b2:62:68:b5:b9:
43:2b:a9:60:b8:e0:88:1c:16:6d:83:4f:c4:a3:cb:
17:02:99:37:fa:ad:49:c1:43:00:f8:6d:ec:cc:6b:
5d:e5:f6:94:d0:a2:cf:ff:0f:3f:f5:23:76:2e:d6:
78:3a:e5:1f:ac:7c:2e:ac:b5:1f:1d:6d:5c:4d:10:
af:f2:e6:04:c3:0b:9f:d9:c4:c9:d8:d1:cf:00:14:
9b:81:3f:5b:dc:5e:ed:b0:e9:b8:71:cb:f8:98:c2:
af:2d:da:4b:20:52:b8:50:a3:8d:b6:0b:df:b4:bd:
d9:4a:7a:0e:50:9c:b5:e5:6f:9e:4c:e0:82:a7:29:
d6:1c:dd:4e:7e:09:a1:06:f2:42:f7:60:5b:9b:12:
02:c7:e4:93:17:34:d7:b3:e3:9e:50:19:34:53:09:
fe:d3:bd:f9:8e:bb:16:02:bc:4d:eb:7f:d1:89:74:
30:33:9f:49:7c:88:3e:f0:b0:ea:01:e4:4b:1d:89:
9e:8a:53:36:0e:38:02:c7:36:11:b2:ca:fa:67:e5:
54:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:21:4C:8C:70:EA:05:84:AD:4C:69:21:F3:23:5C:3D:8A:B0:A4
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:71:8a:05:db:5d:9b:a2:41:80:08:ce:41:d8:10:2b:c1:44:
34:33:6d:10:80:63:c0:31:c8:a7:48:3f:cf:4d:5b:45:7a:53:
ce:1b:7e:c9:89:45:5a:81:b1:0c:a4:c1:ff:b9:14:e8:80:ee:
88:a9:c8:4f:1c:4e:5a:e8:71:ee:36:e7:4f:67:e7:16:11:bf:
7a:d5:a4:03:95:ba:57:86:ab:09:77:83:55:74:69:80:b2:03:
fe:9e:97:c9:46:a4:48:d2:38:f4:42:68:6d:dc:96:3c:4f:7e:
ef:ad:cd:7c:5e:c1:f8:2a:41:f3:b4:f2:2c:0d:34:c4:a0:e7:
87:ab:01:6f:31:cb:87:e9:08:93:1f:93:b7:05:1d:a2:1a:fd:
a8:30:d8:68:6d:db:2b:98:bf:68:8a:25:77:ff:1c:9e:80:c6:
95:25:b7:d3:b7:d9:08:4d:df:24:ae:30:8f:0e:93:17:f1:f5:
be:11:eb:95:0f:de:62:25:a3:a2:b5:7e:89:d8:7e:ab:0a:64:
07:0b:58:78:48:4e:d9:1c:30:fc:36:fe:f5:28:df:ce:e9:a6:
2c:78:64:8f:0a:d4:57:16:e1:74:4c:77:7b:7f:cc:7c:ec:49:
c1:4f:68:0f:74:fa:e8:1d:55:75:67:80:98:aa:ab:20:9f:65:
12:f1:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:59 2025 by rpki-client