Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: iABZs8NDB4VwITx0SzVMowpyrqLq+qK3p8Oah8SPrG4=
Subject key identifier: 6B:D6:86:86:75:88:23:DC:DA:17:5B:75:7B:37:0A:E0:EA:D8:15:35
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 0194BBCE2799FFF58E5D5EF5B96A27494CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: P3Lc3It+EeZQqOWic1XDu0j4X3bYdrsek6jNycBnf0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:27:99:ff:f5:8e:5d:5e:f5:b9:6a:27:49:4c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=6bd68686758823dcda175b757b370ae0ead81535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:e6:b0:75:6d:a0:40:75:3e:5d:1b:6c:df:
e3:e2:fe:92:9c:a1:9c:03:2b:9d:bb:47:eb:b4:e8:
ee:d4:1d:9e:86:e2:fb:4e:95:9b:7b:59:e7:80:6e:
bb:77:de:64:00:80:ae:02:ff:d6:49:b0:50:7b:1b:
ff:36:ec:41:66:f7:20:aa:4a:f4:fb:a8:b8:f8:0e:
98:f4:2e:44:db:14:13:bc:b8:5f:30:d8:7b:a9:50:
84:26:fc:fd:64:58:9f:22:3b:51:86:8c:6b:c2:e5:
ff:a8:82:2e:d7:9c:6c:11:f7:b0:6c:c0:87:4d:d2:
c3:e9:cb:e1:f4:e9:74:d3:56:9f:19:4f:d8:d1:75:
b2:2c:41:c0:1f:6a:44:f0:43:5f:2e:1b:44:17:53:
33:66:1f:95:f3:c7:96:16:4a:f4:85:1e:b4:96:2e:
78:79:d5:08:22:7a:2d:c8:ea:f7:5b:98:b6:b0:ee:
dd:82:37:c8:03:4b:60:e3:f1:c0:80:7a:87:07:de:
18:61:47:fa:d0:aa:07:ae:ec:f6:cd:db:11:b9:1d:
1c:24:54:62:0a:51:71:cb:26:d6:ac:d0:66:6d:d6:
ed:dd:b0:0b:92:f6:76:4a:1a:b2:52:5b:d3:85:2f:
b5:81:ef:aa:60:21:97:e4:eb:e4:43:84:b0:ed:04:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:86:86:75:88:23:DC:DA:17:5B:75:7B:37:0A:E0:EA:D8:15:35
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ec:2d:1f:aa:66:48:28:b3:27:0d:b2:39:f4:05:2b:93:f1:
85:f0:6a:c7:5e:65:5f:26:25:5c:6d:d8:be:24:66:db:e3:bd:
fc:51:85:17:8c:22:9b:cd:e5:2d:b8:e1:fc:23:6b:32:81:f2:
9a:c0:e4:28:4d:6d:79:11:14:02:51:30:f9:6b:56:13:31:38:
57:ae:69:b6:e4:c8:5b:09:9b:d5:6d:8c:a1:94:9a:7e:1d:33:
aa:dd:c0:32:88:f3:4c:f6:cc:00:43:87:b1:28:4f:87:6f:2c:
b6:49:54:12:38:23:74:0c:73:03:9b:fb:51:53:c2:96:fd:fe:
de:cb:99:e4:ad:d8:1d:c9:e7:51:70:5b:08:ad:18:41:bd:19:
7b:d4:21:b3:db:8d:30:80:33:48:90:14:08:c2:46:2e:30:70:
17:8f:3d:81:56:53:ea:e8:5c:78:a1:9f:9b:68:db:60:f5:9c:
e8:9d:b3:ff:ac:dc:10:96:33:4e:fe:cd:72:15:f4:37:1b:13:
f6:2f:6c:78:d0:44:c4:33:5c:be:83:ca:61:41:9c:59:c2:86:
ed:c1:ad:88:22:ae:c2:60:02:3f:10:78:d1:a1:fa:db:84:62:
e3:3a:fa:4e:31:a4:97:51:6c:9e:3b:d5:82:fa:a9:e7:22:44:
c6:f7:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:54 2025 by rpki-client