Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
File: I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json)
Hash identifier: rHCsFl2HVIceeyzVzlg1gkPLp34OTpRG3Lz6UKmdxWc=
Subject key identifier: B8:EC:82:A8:E1:F9:9A:3D:3F:43:2F:21:E4:48:F3:EA:6E:B1:38:98
Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Certificate serial: 0194BBCE5875D8D530C4988F5D3F8CD05D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: eyrMeeJiA5e745T9uV1LaJPzwmKW/l9lcIzq/BbhKiI=)
2: LposyqjV73-zT4I-NkDoALIwk_k.roa (hash: OHnWiOPJ0+vl8RYqLw+3oMseEcMGYzbghowhWqyDjck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:58:75:d8:d5:30:c4:98:8f:5d:3f:8c:d0:5d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=b8ec82a8e1f99a3d3f432f21e448f3ea6eb13898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:59:e3:60:bf:80:f1:bf:d2:f0:39:89:b2:
b7:28:29:33:e2:e6:3e:32:49:5d:78:b1:2c:90:51:
3e:00:75:a0:52:79:69:45:49:7f:e6:30:5b:29:fa:
77:81:e9:09:76:cf:37:18:f2:9f:6f:b0:8c:94:52:
e1:1c:a0:fa:20:c4:5e:17:99:18:7f:cc:b8:4c:de:
29:d1:ad:1e:c8:5c:87:10:f9:08:ff:ab:20:b6:c0:
a6:1a:9e:c3:ed:3e:ed:65:19:99:4b:4c:cf:a1:c9:
1b:79:3b:ae:3a:8f:d9:86:4b:d6:d2:0a:b4:6b:51:
a8:41:7b:70:fb:ca:91:31:cc:63:fe:09:11:2a:23:
f3:51:d9:69:e0:0c:3f:c1:f2:2e:b6:e8:03:6e:7d:
ea:09:4f:b3:31:80:c5:cd:7d:d5:24:9c:73:c1:6f:
1a:30:90:c8:d8:93:8c:40:5c:19:ac:c6:17:0f:11:
3c:15:3a:fa:b9:8b:c6:9a:26:be:ec:6f:c3:7f:19:
55:a3:42:18:fc:62:c9:d4:88:27:8e:4c:d8:1c:cd:
d2:79:40:e6:16:b7:94:ca:e2:34:0a:1f:be:2c:72:
d7:d1:50:2a:09:aa:d4:f3:ea:72:a8:a5:70:e9:ef:
10:0e:d7:a0:af:eb:7c:6b:e7:9b:c2:49:ba:78:8b:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EC:82:A8:E1:F9:9A:3D:3F:43:2F:21:E4:48:F3:EA:6E:B1:38:98
X509v3 Authority Key Identifier:
keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8b:5c:b3:d9:69:a8:d2:73:18:b3:0d:ed:45:1f:18:be:90:
1a:75:27:45:68:5b:0e:11:23:78:81:7a:1f:fa:07:34:56:83:
49:43:44:74:2b:52:02:c5:66:6a:b7:85:0b:c4:c3:32:d3:04:
4c:07:16:56:8b:68:a9:ea:19:02:6a:3a:db:28:ff:a3:3e:05:
a1:dd:98:2f:10:64:14:27:a7:f7:21:57:cb:bc:a7:fa:e4:04:
af:c8:1e:e1:10:32:d9:92:96:47:f7:04:12:74:38:1b:e6:40:
b8:69:d9:fc:a5:78:16:14:a7:75:b4:93:b3:84:84:f5:5b:d2:
4d:1a:1e:41:90:df:eb:af:e8:6e:64:86:9e:50:84:78:e8:cc:
72:e1:52:af:f2:35:af:42:c7:42:25:b2:22:18:4b:c0:14:c3:
b1:ef:b9:72:b8:6d:9c:00:0d:0d:5e:c6:d9:4c:1d:d9:40:62:
46:0c:22:84:0d:12:88:75:f1:2c:0b:19:67:d0:de:96:47:57:
86:3e:99:13:70:cd:a7:3b:7a:53:10:c3:19:cd:d5:8c:eb:38:
b5:e5:96:97:17:1f:35:71:c9:e0:08:10:e1:ca:41:82:92:74:
f1:e5:78:69:03:e6:92:89:e9:7e:fc:da:89:2b:1a:b2:f3:22:
bc:d3:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:48 2025 by rpki-client