Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: n9boBjmNv5km48suP0q9kLW2urqgoDblbAKjBWbxY04=
Subject key identifier: 05:B8:29:E6:2B:0A:E6:8F:EB:38:2B:E6:56:43:F9:AC:34:61:51:D6
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 0194BCA993D9DF62BC874830842172DA1CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: E3D+YrVkyN3TIrxq+TVrTvYRMFFWzMkvf2L4lWXx85I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:93:d9:df:62:bc:87:48:30:84:21:72:da:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=05b829e62b0ae68feb382be65643f9ac346151d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:fe:f1:60:6a:c0:d8:fb:86:1f:38:15:fa:
00:ea:6d:78:d6:5c:6d:e9:1a:79:2a:91:87:ec:69:
3f:4f:13:bf:11:05:84:d9:61:f6:2a:f1:b9:de:9b:
8f:cb:1d:9c:35:9d:d4:92:15:b6:a6:02:01:71:fe:
55:8d:ae:1c:72:85:73:e7:59:78:92:99:e0:b3:be:
83:f9:16:0c:82:6a:35:08:62:d9:4f:19:37:66:b4:
a7:2b:1b:79:68:28:24:a7:a4:75:66:e2:20:ca:36:
f6:58:3d:c9:21:8b:3f:ff:8a:ce:a3:06:ab:87:d2:
75:da:21:90:d9:fc:27:3e:d4:91:b9:1a:27:a7:cf:
3a:b6:51:89:34:ea:16:66:ba:34:51:90:0e:b8:ff:
41:2b:06:82:f0:52:da:0d:ca:4b:75:9f:81:d2:bc:
98:d7:98:52:1f:ad:d6:e8:8d:8e:28:e3:bc:e9:f7:
be:35:73:ad:91:81:05:99:76:57:f7:fd:b3:18:a5:
15:cc:80:09:82:09:48:e8:cf:f1:87:61:f7:50:c3:
50:a3:4d:95:9b:5c:68:d8:63:e1:44:36:24:d3:b1:
80:c7:d8:1d:ac:69:08:48:dd:11:f1:d3:c9:94:d8:
f1:a8:81:7d:2d:9f:a4:09:57:8b:cc:47:4e:38:fb:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B8:29:E6:2B:0A:E6:8F:EB:38:2B:E6:56:43:F9:AC:34:61:51:D6
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ce:92:ae:7c:ca:66:db:2f:95:d8:be:5f:f4:1c:41:44:16:
d5:10:9d:0e:27:eb:04:b5:b7:79:58:44:bd:cf:6f:9b:62:71:
5d:14:67:62:5d:ac:5f:f3:80:db:c8:3d:37:c5:35:70:f7:55:
2b:7e:d3:80:56:00:ca:e0:f9:dc:0b:a6:82:07:3b:42:73:ea:
21:f4:c2:02:10:98:67:49:72:f4:40:fe:96:03:74:5f:d9:36:
84:80:68:9c:32:c6:81:33:01:04:06:fe:c7:a3:87:8f:31:58:
22:07:d8:f8:7c:e7:d5:19:b4:85:a8:a9:1b:4d:57:c5:12:46:
52:4a:65:b5:25:6e:ac:a6:2e:12:c5:79:33:47:ba:b3:74:d0:
f3:bd:d9:b9:9a:ae:dc:8c:c8:4b:48:7e:3c:f3:0f:c3:07:03:
67:95:1a:f7:44:ef:5a:71:6a:40:29:80:9e:eb:a5:6c:2c:41:
3b:aa:51:5f:a3:fa:6d:52:62:98:76:cf:f0:21:97:a4:45:9e:
2c:0a:e9:92:32:8a:32:5b:75:34:0f:a2:6c:f2:60:db:81:19:
ce:81:70:b8:0f:79:3d:db:c3:fb:ca:f8:ea:1b:84:96:8c:7e:
3b:9d:28:1f:be:aa:80:0f:2d:a7:91:7a:f7:7c:d4:42:96:91:
c9:7e:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:06 2025 by rpki-client