Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: ru1uU4RW27PwWUaFeFWPMMx8v4uq2vky/yzN79KayWM=
Subject key identifier: C2:75:3F:96:EC:4C:C7:7F:E5:B3:76:CB:15:47:6B:41:68:0B:DE:82
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 0194BCA9911D4EBBEF0F74053B94156A5F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0773
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: pVopNjFbEm2ZdjN1ff2zdmHeIGdUG70pV57ycZ1otWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:1d:4e:bb:ef:0f:74:05:3b:94:15:6a:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=c2753f96ec4cc77fe5b376cb15476b41680bde82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:b2:0b:5f:ed:4d:ae:61:41:36:d6:ed:d1:
eb:0d:5d:f7:b0:3f:35:19:5d:07:7e:04:a0:3a:a4:
87:5f:0a:48:e9:f6:8e:80:ff:7a:7c:93:dd:f4:61:
33:b5:b9:68:eb:1f:3a:17:ee:ee:98:79:1f:c9:dd:
86:a0:e7:42:06:e1:dc:4a:5a:0d:51:82:82:6f:b3:
d9:d3:95:97:74:6b:a2:9c:bd:89:45:1b:ab:28:52:
5c:f3:98:d8:5a:11:88:79:f8:ce:cf:22:d5:25:65:
24:a9:9d:c8:4a:06:c7:87:00:96:92:51:a7:69:9c:
f8:b1:a0:8c:03:8c:b8:d9:71:27:5c:31:d2:37:55:
75:cb:0e:0e:79:0f:06:fa:34:67:25:45:06:f2:12:
93:70:80:26:f4:b2:95:54:ba:a2:1b:22:ef:56:af:
06:93:84:67:ca:3c:93:ad:57:c9:0c:dd:03:4e:4a:
fc:9c:57:03:4c:0b:54:8a:77:b3:31:e6:36:c2:c6:
4f:b5:23:f9:5c:df:94:64:53:11:9a:14:af:64:b7:
92:4a:15:75:ae:d0:d6:89:88:e0:9f:92:a4:70:4d:
d8:e6:f0:83:01:9b:66:99:31:f0:67:78:a5:bf:83:
3f:70:68:21:6e:99:fa:99:d2:e2:f5:b2:8a:e9:a1:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:3F:96:EC:4C:C7:7F:E5:B3:76:CB:15:47:6B:41:68:0B:DE:82
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:a9:d4:07:1f:56:c2:ce:5b:75:0c:19:ad:c9:a8:c8:d8:
cf:fc:d7:a9:10:6d:c6:89:37:9b:9d:0f:92:e9:5f:66:ba:fa:
4f:c6:40:43:86:42:83:a3:3c:37:e7:ca:e9:e6:96:4c:32:ac:
6b:fd:a4:7f:bc:ea:b5:a6:63:5b:df:76:2d:f8:eb:49:54:ad:
38:dd:02:4c:c5:d1:aa:77:4c:19:e5:f9:46:76:a6:74:f3:e6:
fb:d7:c0:ac:37:3a:25:87:09:e2:ab:b6:93:89:c9:d4:7e:2e:
d0:24:0a:cc:55:a6:9b:92:54:8e:a4:dd:56:0d:e2:aa:4a:bf:
85:a7:19:de:25:8c:f8:bd:31:87:89:94:cd:b1:f6:8b:3c:d3:
44:cf:32:62:dd:8d:5c:5d:ed:e2:85:db:f7:44:42:da:4f:2f:
58:5b:ea:2b:84:94:0c:1c:72:97:d2:f8:43:d3:e0:44:b7:73:
9e:77:3d:08:bf:3a:ce:18:8d:d4:32:fe:01:fb:3b:95:9c:cb:
a4:94:8a:25:2f:dc:20:9c:1d:f2:77:9c:53:06:72:b1:45:12:
5c:89:ff:f5:89:33:18:4c:df:cb:25:53:a0:ab:cc:6d:c1:12:
06:bd:16:ee:d7:a6:25:f9:eb:69:46:0e:81:e9:c2:3a:92:ec:
34:d6:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:52 2025 by rpki-client