Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: isE0naJyUF9iDZRTDP1oPTb6WF+vfKCdK7nxIjYCVs8=
Subject key identifier: EC:AF:67:E8:B9:92:D4:5D:70:6C:BE:95:03:90:D9:6D:85:9B:59:71
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 0194BC04D7994C51439FA26CF9ABBC808709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 0F36
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: XVdNt4gpemcEgzqM1mfH6OLMeCCGTRbG/zf0FZvvh/Y=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d7:99:4c:51:43:9f:a2:6c:f9:ab:bc:80:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=ecaf67e8b992d45d706cbe950390d96d859b5971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:6f:71:1a:20:4c:d5:f8:fc:db:f5:39:e6:
27:a6:a5:98:e0:a1:38:48:65:83:b7:40:af:c6:99:
9e:f1:a1:ff:f9:a3:8c:97:d2:92:f6:ef:0b:e6:8b:
c4:4d:01:4d:0a:d9:ef:76:dd:9f:91:b9:d2:a0:3c:
f4:14:e5:75:8b:fe:e9:f1:98:4b:9d:d2:c9:ea:cd:
6a:5b:a1:c2:7b:32:a9:d0:8e:97:36:ac:5c:fc:d2:
69:42:18:d9:f0:8b:f1:7e:5a:bd:6b:97:56:b0:58:
8d:c7:6f:1b:bb:8a:9f:1d:e8:3b:5e:31:38:60:0e:
8c:e6:19:92:1d:ff:43:88:e3:73:35:9e:b1:0e:02:
b5:5e:8c:1d:f6:d8:78:5d:94:99:ca:d6:e1:31:8f:
1f:10:f5:03:27:a0:35:d4:40:9e:ad:d1:15:0e:4b:
b8:c7:05:af:d9:4d:f1:26:6d:37:e8:3d:f0:d5:1f:
c8:9e:ab:4d:e5:9e:05:09:01:ae:c7:d0:8d:18:9d:
db:f1:1d:29:f1:dd:9a:ef:19:91:f4:b1:01:aa:8b:
9e:26:5e:e2:21:ac:4b:7f:e7:a6:70:0e:ff:be:45:
9c:0a:a9:22:a3:ff:da:3c:f6:64:d6:54:91:57:1f:
a1:4a:ac:74:9e:fc:b3:09:51:63:20:6d:71:7f:ed:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:67:E8:B9:92:D4:5D:70:6C:BE:95:03:90:D9:6D:85:9B:59:71
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:79:28:05:dd:e1:0c:2a:7a:69:ba:70:89:f8:99:e0:b6:2e:
05:a3:ef:9a:29:73:54:be:ce:a6:52:b9:74:69:a7:f1:81:6d:
34:e9:21:ca:78:52:6d:22:da:cb:1a:83:12:38:57:a4:8f:2f:
09:a9:15:fa:bb:82:be:ea:7f:be:2d:14:08:38:9b:5e:00:6e:
66:1a:00:74:4d:d7:14:55:3a:6d:b7:07:1b:a2:91:77:8b:35:
fa:2d:35:27:ed:64:4a:10:3a:68:f1:16:75:7f:65:3d:bd:f1:
44:b3:2d:60:91:02:b6:e5:e3:85:b0:21:6b:bc:28:f4:d2:f4:
15:20:ac:77:47:11:70:36:20:68:e6:d0:eb:09:3f:1a:de:4b:
ec:e3:e9:bd:5b:0c:b1:82:80:c1:d5:24:80:48:2a:f5:4a:b0:
e7:33:60:bb:cb:e6:1f:e5:e7:90:35:05:55:b8:3f:73:d6:c0:
0e:72:3e:6f:b4:d0:25:74:5c:a8:07:9c:e2:db:46:c5:e4:44:
95:88:d0:e5:3f:8e:c2:4b:97:14:22:63:91:40:8b:df:bb:a3:
60:87:78:d4:41:4a:54:27:3c:06:d4:a5:ae:5f:0e:74:9d:5c:
60:36:76:5e:26:76:df:19:af:7f:f3:a2:14:a1:81:e7:02:10:
8d:19:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:54 2025 by rpki-client