Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier: lIlXynSYLcjwrqnD6hJK+97EUOrynwDySXOqebX/0kk=
Subject key identifier: 54:AF:24:28:4C:FC:EF:BF:7F:72:B6:7E:F9:38:80:90:82:13:61:64
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial: 0194BD17961179C7AEAE7AFECD33C676201C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number: 02A3
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: mWEvhv8LiXLu7H0KdgJuI69jgJQOfuTMNGGjTjBSHtc=)
2: uJrupPlV0TuAxsM7Yezc0lvFtvQ.roa (hash: zjqfplB2jtSi/5nKhDu31J1mMkLaG/4MZV1txaGrR6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:11:79:c7:ae:ae:7a:fe:cd:33:c6:76:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=54af24284cfcefbf7f72b67ef938809082136164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:bf:30:8d:a5:01:be:21:a5:f8:cd:29:2b:
96:0e:1b:28:16:e3:a9:66:11:bd:fa:96:b7:eb:34:
a4:d8:f0:3c:09:df:9d:af:ae:da:6d:bb:c1:36:16:
2f:69:4d:de:79:86:47:ba:5e:79:28:8a:1b:30:d8:
10:d7:73:6e:ad:97:79:59:d5:8b:91:4f:5e:4c:2a:
75:d7:a4:f8:55:a9:8f:b7:12:b1:9e:3e:d4:ca:ad:
da:42:27:c4:8a:12:0f:f2:3b:80:71:31:71:6d:f2:
5f:6d:ee:2d:1c:97:de:2a:de:c4:ab:af:2a:d3:d2:
15:d0:71:dd:b7:65:a3:79:68:6a:c1:22:f1:61:b1:
00:ff:a3:19:7d:2c:6a:6f:e9:e9:70:7e:1b:b9:90:
fa:57:1d:2f:87:58:5b:e9:c6:a3:94:d2:82:ee:dc:
1f:93:79:a8:7e:ec:3a:ea:7e:97:14:51:29:06:8a:
f9:f7:94:c3:c3:a7:7d:db:6a:95:69:25:db:33:07:
aa:3d:f5:09:88:f7:41:00:7f:db:56:08:ed:ee:f7:
98:00:ce:0c:6b:4d:0b:d0:37:4d:15:fb:b1:03:12:
61:5e:89:ef:0f:78:92:9e:68:fb:be:ac:64:75:51:
53:0d:10:14:37:a2:c5:91:99:56:5e:98:81:b9:bc:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:24:28:4C:FC:EF:BF:7F:72:B6:7E:F9:38:80:90:82:13:61:64
X509v3 Authority Key Identifier:
keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1e:c1:0d:b0:b0:85:a1:40:74:7b:6b:4b:af:a5:05:7d:1d:
79:85:70:1e:dd:c4:bd:73:db:a2:f7:0d:76:af:c9:1a:b0:17:
46:f0:55:ed:14:82:91:cf:f1:2e:f0:1f:65:48:ae:e4:e9:15:
36:d5:f7:d3:c4:d5:2e:55:56:63:94:08:dd:cc:b3:3d:06:ab:
f6:14:44:91:a6:6e:4e:88:a3:0b:9d:90:a3:93:44:83:f8:f7:
d3:f3:18:36:73:c2:3c:b0:57:fb:e5:b8:9f:93:2f:09:0d:8c:
03:e0:d8:94:86:f0:35:e8:09:99:25:f2:f1:b9:47:b1:e2:a2:
6d:b2:ab:e0:b9:f9:f0:43:90:5b:84:51:d0:f2:49:91:9e:3b:
c2:4e:66:3d:5a:db:84:b1:42:61:08:bd:d1:1d:e5:6a:2a:38:
32:db:a0:54:63:7e:e1:f6:2a:70:d9:15:7d:86:84:eb:e9:34:
bf:12:d3:d3:4b:74:98:97:39:1b:ed:74:cd:a7:6c:58:8f:8a:
21:3c:1f:c3:75:53:e9:26:6c:e2:9d:5a:ff:c5:f0:33:41:73:
fa:a9:3f:e8:94:a0:85:2a:81:23:b6:b1:6e:95:2c:62:24:4a:
73:c7:3b:47:db:17:58:b8:f3:95:d8:90:ee:d9:9e:af:83:b9:
e4:3b:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:44:11 2025 by rpki-client