Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File: pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier: xWNT96KIg8PpCWjBiBQPS+EQg/VUVoSu6E+K5TE9qZU=
Subject key identifier: 22:70:55:09:CC:4F:F8:CD:0E:6C:B3:22:C5:EC:A0:DE:C6:67:8E:48
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer: /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial: 0194BC04D76D0F595D259865EC146917F4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number: 04B3
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa (hash: LNpaqhIXeGRj9rxSqG8l9W+yrY/Iu+GRMv3w/Y4Inpo=)
2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: mb7pNC8MFIFCfv6l4yoeG0mPUR4unkOxupfx4YCbC8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d7:6d:0f:59:5d:25:98:65:ec:14:69:17:f4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=22705509cc4ff8cd0e6cb322c5eca0dec6678e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:20:76:f3:86:02:3a:4b:76:cf:00:0c:10:
b2:00:93:d7:35:89:cf:93:20:27:e3:54:5b:c5:7d:
18:ae:f1:a8:45:9c:6e:88:05:c2:b6:d8:93:10:82:
39:5f:39:ef:29:de:f6:d2:58:36:b4:c9:da:b4:ee:
b5:0c:aa:5d:eb:8a:5e:ee:00:c7:56:1b:54:9f:18:
14:9f:89:63:c0:49:8e:25:60:78:42:00:3d:9c:5a:
d8:a5:b3:2f:4f:5b:7c:6d:e2:50:89:7e:2c:ce:de:
2f:0e:1b:a6:87:8d:7b:2e:93:d6:85:e3:15:e9:33:
eb:1c:ec:3f:4f:7b:0a:84:16:30:c2:f6:ae:7c:53:
c8:79:8d:3a:75:ff:ad:39:05:fb:8b:16:6a:7c:ab:
9b:3f:b9:06:18:33:53:67:64:e5:90:f6:49:91:15:
7a:f4:b3:0e:d9:8d:37:32:80:f2:d7:6e:69:15:d9:
25:ec:33:43:aa:15:4b:97:87:7c:63:c2:06:35:37:
e2:7d:56:9c:f5:76:5f:27:ab:83:b2:cb:75:68:9a:
ab:3a:eb:39:fd:60:4e:50:53:f3:c1:27:d1:ca:ff:
59:4e:4f:61:04:d5:e9:48:6b:e7:b7:4d:2e:7d:e5:
46:f9:4e:71:d6:1d:3a:ba:12:30:5d:ba:58:0f:d6:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:70:55:09:CC:4F:F8:CD:0E:6C:B3:22:C5:EC:A0:DE:C6:67:8E:48
X509v3 Authority Key Identifier:
keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:b8:b1:96:30:05:a5:6b:fb:76:dd:56:d7:37:71:ae:37:2a:
ee:d3:03:2e:42:dd:ce:ab:13:b3:14:67:73:32:d9:8f:f4:4c:
94:1c:19:9f:90:79:0f:d0:4c:a8:15:e9:7f:5c:5a:ce:34:fe:
3e:70:a8:47:ae:e5:62:1a:70:b4:a3:9e:61:e0:1c:de:d9:c1:
15:24:83:c3:50:f8:d5:f5:47:0b:d4:4e:da:08:84:a8:81:62:
e2:48:17:92:1c:62:93:0b:a7:d9:41:52:2d:04:e9:83:5e:eb:
d5:6d:b6:a9:58:7c:77:a8:26:fc:d6:fa:46:a2:a6:ce:c0:24:
cd:bc:d8:6c:5b:45:88:15:fe:e6:cd:b3:0b:67:43:16:6c:78:
a6:ee:e2:e8:ec:a6:49:4d:f0:74:cb:e1:b8:ca:87:46:92:2c:
67:5c:8a:a0:6f:e7:dc:d0:fe:08:84:30:f1:4a:ec:ee:09:c1:
bd:3b:c5:9c:72:86:a4:b8:23:b6:b5:3d:f7:a0:6b:f5:f1:f2:
ec:e6:75:25:93:93:ec:64:bc:75:7a:bd:5c:06:f7:af:bd:da:
f0:ed:96:18:58:31:4b:7a:e0:09:4b:4b:1f:5a:95:f0:57:0a:
fa:9f:63:01:dc:3a:41:fc:b7:9b:2a:af:af:82:36:56:2f:e8:
81:d7:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:44 2025 by rpki-client