Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: 7lbKNtieotc1VgRuo60pDTXljrRMW6iOmYFW+V/gtKU=
Subject key identifier: 0D:99:58:91:A5:22:5B:9D:C7:26:07:9C:B0:5B:AC:77:15:16:04:DF
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 0194BCA972E05C670F2017C2D82B3F80582C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: rAiqIFfYNjdbRBf5lLKI0wYjfUXcwn8KucjsEfriRvw=)
2: ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa (hash: qyBeXguoUs9hwnrHmonqUvuWFW9pHnQHNdEGLzV2NBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:72:e0:5c:67:0f:20:17:c2:d8:2b:3f:80:58:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=0d995891a5225b9dc726079cb05bac77151604df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:08:7c:0a:5f:30:e4:89:20:8d:0b:d8:55:
02:78:b2:16:b8:9b:e4:81:07:8d:e4:fa:29:e5:06:
f8:40:63:3c:29:3a:37:67:99:8d:5e:b9:12:e3:8d:
8a:96:cb:ba:8a:6a:48:9c:f4:ae:5f:22:d2:52:b6:
fb:31:ce:eb:36:f0:73:8c:db:6e:4b:f6:92:f2:b6:
0c:03:00:e3:da:8f:59:77:08:4c:df:7f:a0:26:79:
20:20:b9:27:60:01:07:03:a6:b1:5f:10:42:47:f6:
83:c0:d5:f0:98:74:a7:7c:3b:0f:6d:00:93:87:b5:
b8:f6:65:cc:bf:a3:31:42:53:9b:bc:73:28:2b:d3:
bf:65:d2:cb:17:a5:94:a9:15:54:85:72:c5:4a:b8:
da:5c:dc:64:b3:fb:af:1c:74:2e:b5:bd:8c:e0:34:
0e:56:65:7a:7d:da:32:ce:90:ff:82:a5:ed:ef:52:
74:98:31:42:37:5d:2e:21:b7:8d:4f:82:af:71:7f:
cd:2e:21:f6:44:f2:5f:26:2a:bb:07:5e:79:c5:f0:
b3:81:ee:79:1d:44:12:4e:9e:15:69:3c:c9:f9:b5:
d2:55:c7:05:bd:c8:96:a6:ee:43:85:d0:05:73:51:
f4:df:7a:34:24:ee:41:0b:ee:e9:bc:1c:33:cc:5d:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:58:91:A5:22:5B:9D:C7:26:07:9C:B0:5B:AC:77:15:16:04:DF
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:2e:48:27:80:66:79:de:cb:3f:d5:1b:b7:a4:a4:f0:de:
1e:98:09:74:e2:a3:7e:47:2e:d1:95:67:a6:1b:e2:5a:c3:7b:
72:56:25:78:ce:f0:ff:82:11:7b:3d:3b:e3:64:73:df:df:d0:
36:5f:78:66:5f:8b:51:e5:52:55:33:59:f3:8b:03:c9:58:de:
df:12:e8:db:55:df:55:c2:4a:7b:81:05:7c:58:23:47:8c:6d:
03:79:21:59:0a:15:96:17:e0:a3:55:26:b7:a7:c7:21:bc:60:
6f:d7:e2:41:5d:10:ce:42:69:46:00:3a:fe:76:61:a5:f7:5d:
0a:97:f5:8c:4f:9c:3b:35:f5:9b:09:54:7b:1c:64:4c:dd:da:
dd:af:bc:d8:a8:f7:4b:18:1e:e8:52:28:89:50:5d:03:6a:1b:
17:ea:da:c8:86:3a:e0:0f:10:72:ee:d9:d2:ce:29:3e:c8:7b:
ed:39:07:0e:94:59:2b:d9:62:37:af:1e:6c:83:0d:04:cb:ee:
61:26:6f:0a:2a:f7:e4:c3:74:74:18:d6:0d:8a:4e:a8:6a:d7:
e5:6d:95:ba:69:37:7d:5d:29:31:91:af:dd:78:af:74:d4:f4:
3c:86:80:f0:2d:29:11:ea:01:86:a9:bf:03:c7:b3:49:81:f9:
a1:cf:5c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:35 2025 by rpki-client