Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: QAWCm3KUCKn0hMvUCNLZnfaV5wYWI45mFq+k4UohiRw=
Subject key identifier: A3:F8:EC:27:E0:9B:B2:22:26:22:6B:51:63:99:C2:23:F7:D2:FB:27
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 0194BC3C47578751AB74F0CA900F96E86753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: 5PQu+LwOf2idHOW+yFcO+69EZhMdD4DrMg9yPa0jEz0=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:47:57:87:51:ab:74:f0:ca:90:0f:96:e8:67:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=a3f8ec27e09bb22226226b516399c223f7d2fb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:4b:b2:a4:23:a1:43:b3:71:7e:f6:86:52:
48:e6:89:c2:d8:ee:d0:ff:1c:55:05:20:9a:18:72:
c8:43:24:24:87:7b:db:83:62:c5:11:2a:15:24:40:
2b:32:b1:5c:bd:3b:59:7b:1c:8c:d3:38:c8:3d:76:
fb:dd:a6:75:8d:a5:e0:2c:f5:78:6e:81:e3:a5:d7:
d5:cc:a3:88:22:7e:43:4b:6a:b0:fe:da:0e:e2:f7:
1c:2e:ad:05:58:d3:b7:f6:53:bd:51:e5:92:57:c2:
67:f8:38:b4:a9:57:96:f9:9c:7f:e7:1d:9d:3e:e4:
fd:e9:b3:0e:3e:00:8c:c5:82:f6:06:25:39:78:c8:
02:6d:7a:17:31:0e:3c:78:62:9c:b9:6d:26:99:db:
d5:01:dc:eb:e1:aa:f0:41:1c:d7:c6:50:56:0b:73:
6f:e5:05:5f:65:bc:02:2d:e0:20:6c:d3:8e:37:79:
b9:f0:96:a2:a1:70:d5:4e:b9:91:02:4f:f9:5e:c3:
5a:0f:35:d0:9e:3c:f2:44:5f:c3:55:20:c9:8a:b9:
09:e7:1d:9a:36:bb:5f:7f:d9:60:a2:89:4f:03:75:
8a:77:8e:a2:9b:e7:09:0f:a1:20:ce:18:ab:35:b0:
1f:fa:a5:4b:dc:1c:5b:96:32:70:a8:97:8e:5a:b5:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:EC:27:E0:9B:B2:22:26:22:6B:51:63:99:C2:23:F7:D2:FB:27
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:8a:c6:f4:88:26:20:d9:0c:11:22:be:a6:2c:56:5d:80:
ce:05:9b:76:3a:90:f1:bf:12:7a:2d:56:50:09:58:90:53:82:
52:0c:24:f6:5e:f7:ae:c8:4f:f8:2f:c4:62:8b:43:1a:aa:7e:
d4:b8:02:00:d8:ac:ec:3a:57:c7:ee:48:57:c5:4a:96:92:c7:
c8:81:27:97:66:77:67:cd:2b:75:8a:0b:9e:a6:6d:66:00:ee:
db:92:f2:58:38:c1:ea:ef:c8:6f:62:ca:67:cd:29:67:1c:af:
58:59:65:97:73:99:cd:ef:f5:0b:b8:77:60:60:f9:55:b4:32:
80:48:40:ad:05:49:0d:42:7d:98:d5:8c:7a:33:b0:ca:5b:c7:
7f:61:25:fb:d6:b3:33:36:8c:95:b8:9e:55:3f:6f:72:67:fe:
31:b1:5c:5e:05:7f:49:a0:e2:0c:0b:c6:ce:72:b4:9d:12:ec:
f3:05:be:33:15:81:ca:5b:29:32:7f:30:a9:d1:c4:13:58:55:
93:2d:23:cc:5e:a2:af:2c:0b:cb:d4:86:58:1d:18:6b:71:90:
ad:0e:82:55:b1:e8:65:84:76:e4:87:98:a0:a4:bb:6c:44:8d:
58:7f:fc:36:e4:b5:a0:de:d7:9a:8a:18:ae:1c:a8:92:dd:f9:
c6:d1:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:56 2025 by rpki-client