Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: i9k3Ty9H9ikkkSy4aR/R8Tl6gbO0OadnTBGTCTlVkYI=
Subject key identifier: E7:4A:1F:A9:E1:F0:32:F4:35:E7:06:93:FE:B8:24:25:E3:C8:94:ED
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 0194BBCE89B22C8FBCB9B8534FB32E30840F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: 5wR9N1I2aeBW7m28X3ViKGDNpj26Dr9Qwg/vy/vA8HQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:b2:2c:8f:bc:b9:b8:53:4f:b3:2e:30:84:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=e74a1fa9e1f032f435e70693feb82425e3c894ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:77:0a:84:f8:cf:95:f2:b2:95:3a:95:28:
ee:b8:4b:04:81:01:e4:c5:16:bd:45:7c:74:b8:ac:
09:0a:66:56:e1:38:ec:15:70:75:d6:fa:e1:c0:04:
47:1e:ec:b5:53:88:37:78:11:72:df:45:cd:92:76:
45:66:92:ea:6e:3f:ef:6f:33:6b:01:c7:aa:7f:26:
90:70:a3:2b:50:f5:36:20:7f:00:b6:98:63:4a:a4:
dd:d3:d5:ea:17:9b:9b:e5:0e:45:35:9c:e4:d0:ce:
cc:96:c4:dd:70:cc:13:8e:de:ec:4c:7a:65:c8:c3:
79:0e:74:e9:48:e6:42:10:6e:d3:dc:37:75:31:33:
de:01:46:71:b9:bd:33:06:33:88:81:e6:1a:a4:06:
cc:c7:0c:52:48:61:21:57:6d:ce:6d:e4:8c:a7:cd:
27:2e:25:89:eb:11:b6:92:7c:c5:63:c0:5c:10:e1:
8b:11:b1:be:95:9d:a5:0d:a6:dc:9d:e5:7f:fd:d7:
4b:44:9c:33:6d:fd:17:09:29:6c:0c:d7:76:d6:65:
61:92:ec:02:3e:5e:86:b0:5b:f5:fd:92:17:b1:e2:
bc:2c:04:f5:6c:6b:36:cc:a5:f4:4f:c0:91:5e:7a:
bb:c0:0a:30:b7:45:73:7e:86:c0:0c:ac:db:04:48:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4A:1F:A9:E1:F0:32:F4:35:E7:06:93:FE:B8:24:25:E3:C8:94:ED
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:32:c9:e5:24:6f:39:d5:d5:fe:7d:e5:0a:87:a7:5e:aa:47:
d3:5a:04:97:99:dd:f2:0c:aa:9f:03:66:d9:91:cb:0d:32:05:
1d:c7:5b:c9:08:fc:c6:7a:e9:95:c8:b9:ed:42:b7:7a:ff:46:
ea:be:89:62:a1:60:50:69:38:2c:61:3f:71:90:3d:89:07:36:
d0:3c:fd:24:59:90:95:e1:0b:0c:9d:23:12:49:42:2d:7a:93:
cd:26:64:a9:bc:fb:b7:d3:73:c3:ca:39:50:10:7f:9a:14:a8:
05:de:11:b2:fd:ca:54:6f:f7:0f:69:83:4e:f9:e0:95:be:37:
50:27:41:14:d6:6a:0a:ab:06:ff:a3:ca:0b:16:c7:c6:b3:5d:
3f:0f:d1:22:62:aa:88:7d:1c:7a:26:52:6f:31:c5:04:fb:fd:
c9:24:01:49:2b:2f:2e:72:dc:8a:42:b3:5c:1c:90:57:b0:30:
2f:49:3a:0b:a5:91:38:1f:67:6a:5a:f2:33:fc:3e:5a:a6:0b:
ca:18:fc:46:e9:51:09:80:a8:c6:89:fe:31:66:4e:c8:57:e0:
cd:bb:bc:64:36:58:84:5e:6c:6e:2f:4f:d1:13:59:af:39:08:
d4:3e:71:1c:ff:fd:fd:d4:ee:77:34:c3:9d:72:5d:ef:be:e6:
27:ca:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:52 2025 by rpki-client