Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: S6KoQ2VV/glTgFla5q5u+MM66UGGkUWJXQULug01heo=
Subject key identifier: F7:AF:A4:01:42:58:40:84:35:68:B2:C5:EB:A0:F2:55:C3:4C:02:A8
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 0194BCE0ACB99A2A36FE668A6084D033B2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 074B
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=)
2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: zsthtg5VBZipgn09OLDz78ao6T13UUNTi8Sk9o1+KvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ac:b9:9a:2a:36:fe:66:8a:60:84:d0:33:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=f7afa401425840843568b2c5eba0f255c34c02a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:51:d9:48:d9:fc:c6:f9:5a:a9:40:9e:a4:
fb:bf:da:df:f7:80:51:ed:b1:81:8b:5b:10:08:43:
3b:18:74:84:00:31:6e:e1:48:69:d8:92:74:69:fb:
2d:09:3d:63:d5:b8:f6:c9:02:9e:42:1c:79:7c:82:
a0:b4:d5:98:bf:52:98:05:02:72:b2:5f:98:28:72:
b6:bc:e9:6b:75:ba:ce:5c:d4:88:e2:7d:f6:bf:fd:
11:56:62:9e:7d:6e:ca:48:14:ae:8b:6f:58:c8:e7:
b0:4b:42:f6:be:b1:1f:17:0a:9f:54:f3:7d:3b:3b:
e3:0d:72:b9:3d:f7:8e:50:a6:13:61:dd:f5:e1:c9:
18:b1:94:7c:99:43:77:be:e9:10:1d:b7:b2:f3:ff:
f3:c8:84:3a:78:6f:5c:cb:2b:36:25:ea:23:b2:07:
17:bf:d9:a5:b5:f5:02:ea:d7:f7:52:3d:31:ce:ac:
0c:8c:34:8b:f6:6d:83:7f:87:0b:85:89:ef:f4:a4:
4d:d7:85:16:74:f1:6a:23:fe:9f:a3:81:29:7c:d8:
1c:88:62:1d:f6:69:a6:fe:46:6a:1a:88:a4:43:1d:
8a:82:85:19:3f:1d:91:e6:7f:b9:10:e9:7a:c3:c9:
67:71:c4:05:62:cf:4c:a4:9d:d7:e8:fe:78:5a:47:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:A4:01:42:58:40:84:35:68:B2:C5:EB:A0:F2:55:C3:4C:02:A8
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b1:58:e9:60:99:c3:20:97:a6:50:50:c8:7c:be:59:d1:ec:
19:ec:04:cb:74:7e:a9:03:ab:5d:5c:16:58:23:2e:23:d8:b0:
4d:ba:98:82:bf:96:85:a2:d7:72:35:f2:97:07:4f:41:62:6b:
a9:50:19:88:a4:9e:f6:fa:95:2f:e4:0d:84:b1:b4:b6:55:00:
ec:2d:b6:4f:17:6d:a1:e1:5f:25:20:97:b4:43:1a:75:e8:96:
52:f7:b3:3f:d3:6c:95:55:84:11:5d:fd:00:d1:17:17:16:17:
ab:fc:2a:e9:08:2e:15:af:04:a7:4b:3b:2a:7c:07:e3:4c:bc:
d4:5e:2f:b2:c7:00:68:19:e4:9c:17:31:88:4e:f3:68:44:c8:
75:21:2d:68:c3:f6:43:07:3a:a3:55:f0:ba:fb:6e:b8:a7:f4:
5c:a2:ef:b0:af:1b:e5:a5:15:0a:b1:f2:96:6b:4c:0e:0f:8e:
ca:0d:3c:4c:1d:52:9e:fb:76:5d:25:de:74:af:7d:05:fd:ad:
48:e3:03:f5:76:dd:f6:b7:59:d8:ad:62:1b:5a:43:8d:0d:23:
a1:03:f3:56:56:66:32:89:1b:bf:5b:98:24:24:b4:84:a1:41:
cb:67:08:8b:de:0a:ef:6b:f4:b3:a3:81:de:4d:b9:78:0b:a3:
c8:56:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:35 2025 by rpki-client