Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: 7JJA6EjBS+A8tryL7vEeuZzHBtC1IImfMXucT4KX4m4=
Subject key identifier: 67:89:3D:FF:39:F8:F2:48:A3:42:19:32:62:78:DD:9E:DF:88:80:19
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 0194BC728601DC265FC3B2362A819D72B4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 0C0B
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: hi3FrnF-3jLI3lIxcnrMYtC-4ow.roa (hash: Hon+3addqQMzwZi2hE3IgLssZw3bA0MMDqOLsP3ZK0E=)
2: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: hq2/UeZV1kDpEzhBwzLrTPdNvehrqFjTAQNKsg3z3zo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:01:dc:26:5f:c3:b2:36:2a:81:9d:72:b4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=67893dff39f8f248a34219326278dd9edf888019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:1a:5c:25:1e:c6:91:27:c0:df:3e:a1:20:
bb:ab:6e:bd:63:c9:39:ca:77:fe:a9:14:4d:37:12:
53:64:21:2d:01:d5:16:dc:8a:92:79:64:31:43:1a:
70:41:eb:c1:61:cb:8d:a0:9e:59:51:1d:60:bf:fa:
a9:22:8f:92:8e:85:73:11:8d:11:b0:4f:c1:70:61:
48:b6:5a:c9:84:d4:8c:d0:a0:70:ae:6c:e8:d7:51:
9a:f4:f7:29:66:2c:c9:aa:5c:c0:5c:97:08:58:c1:
4e:16:3d:69:8b:86:9f:d5:ca:3b:b4:78:0f:84:d7:
58:2e:86:7f:01:5e:3a:5f:18:2c:f1:a3:cb:0f:27:
a5:03:86:75:20:6d:27:3c:3e:54:01:db:25:25:0b:
5e:3c:2d:08:6d:f1:06:b8:74:3e:b7:51:bb:f2:d2:
ad:b9:3b:c2:6b:70:3f:21:72:55:27:f7:8c:d3:fc:
c7:39:5f:16:a9:0a:ff:0a:a3:e6:36:75:bb:92:b1:
a2:3b:25:87:30:95:a1:87:40:a2:7e:21:db:a2:f6:
e0:16:3b:0c:25:93:c1:e2:5b:dc:fc:58:aa:be:75:
b8:72:c0:47:80:bc:7d:97:fa:83:58:99:d5:68:88:
bd:88:ac:12:4d:47:b4:29:c0:a0:fc:19:ea:f2:20:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:89:3D:FF:39:F8:F2:48:A3:42:19:32:62:78:DD:9E:DF:88:80:19
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0d:0e:89:4b:d7:34:8b:18:27:d6:76:7d:f2:8d:b1:00:04:
09:d7:84:6b:9e:69:e6:8f:52:78:3e:ea:48:a9:ea:74:f5:de:
01:3f:70:4c:a8:d7:57:8b:53:e4:d9:75:7a:df:c1:e8:0d:95:
78:cc:34:cd:d4:05:1d:ad:57:e6:7e:d7:f2:51:fa:3b:d3:b6:
d8:cc:c2:31:71:a9:ad:91:22:7a:5a:4a:7d:1d:b6:77:a7:b9:
a9:06:dc:a7:d1:e2:ae:e7:2b:05:56:98:1f:b7:16:21:c4:83:
b2:e9:7a:a8:be:c6:fb:63:1e:77:19:f5:cb:21:b1:6f:5b:2a:
a3:77:d5:39:e3:25:a8:7e:02:69:16:ec:6a:9e:44:39:88:7c:
d3:ee:d0:e4:05:04:ac:51:64:16:57:c9:7f:b4:af:d5:1a:0b:
7f:03:5c:ac:bd:d4:aa:c2:8d:cf:8d:1c:63:0e:68:03:65:84:
85:8d:00:eb:fe:a8:db:c5:67:cc:52:06:c5:71:42:34:91:4a:
1d:b0:87:d0:94:2f:cc:b8:6f:0b:ff:67:27:54:1a:c0:e7:49:
c1:c0:a0:09:54:f8:4e:e1:a3:9a:24:ce:4d:50:06:14:b7:6a:
f9:a6:71:0c:db:ed:e7:08:1f:d6:3c:fb:90:d3:4b:f9:82:be:
0f:ad:fd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:39:52 2025 by rpki-client