Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier: a5T56i5EEACnbOkLtOa/pPLYoS6yWvWdS7Cnyd5HatU=
Subject key identifier: B3:D6:C9:F5:55:14:D8:0A:65:C8:2A:F6:D8:97:06:10:F8:2D:31:25
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 0194BCE094C7CF2B25246477EFB93D649761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number: 0E26
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: HFW5Gc/rUveNUgxYtoMn0Oa2gCDi8d05rM6IQB/HHT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:94:c7:cf:2b:25:24:64:77:ef:b9:3d:64:97:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=b3d6c9f55514d80a65c82af6d8970610f82d3125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:5d:62:44:bb:2f:e1:f6:3c:89:83:e8:de:
cb:c0:96:d1:a3:c9:2f:8e:fd:20:3d:48:65:38:6b:
fc:c2:65:52:26:83:a3:77:b3:96:7b:e4:2f:26:1a:
17:6c:3c:75:7c:b8:44:b5:da:c1:8d:96:67:86:77:
38:aa:44:d4:d5:9d:0a:90:fc:a8:91:7e:99:97:a6:
7e:41:33:77:49:b5:69:51:08:53:3a:7b:ae:90:1c:
ab:6b:ce:dd:77:19:4f:6d:8e:69:1b:c9:1c:bd:3c:
c0:79:8b:d4:27:63:08:fa:38:9b:60:f5:8f:61:38:
95:b8:b0:f6:64:dc:d7:53:f8:7a:d9:c3:5f:8f:7e:
07:c6:53:01:95:0f:22:38:38:84:fc:19:e5:bb:11:
d6:02:b9:55:18:01:bb:9b:16:0c:92:06:c8:5c:73:
e6:92:f9:88:ef:7c:3c:62:ae:cc:81:ce:29:f2:d9:
1f:6c:91:f0:83:fc:37:bb:35:9b:6e:d7:b6:89:20:
f9:6c:6e:a3:d0:14:e9:a2:fe:b0:92:12:37:e9:58:
4c:10:8a:ef:44:5f:15:85:88:c9:b4:86:a0:59:da:
e4:e6:94:1a:cf:fa:be:c1:dd:d0:ef:0f:af:af:78:
f1:ad:d8:56:d5:c1:89:24:23:c4:0f:7a:55:a5:ab:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:C9:F5:55:14:D8:0A:65:C8:2A:F6:D8:97:06:10:F8:2D:31:25
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:55:6e:12:9b:86:ba:0a:d7:78:a3:72:fa:9b:fe:53:38:ac:
7d:68:23:c6:a5:eb:4d:fe:ed:5b:e1:94:18:fb:fc:d7:ed:c7:
2d:9c:8c:52:d6:99:5f:e5:23:a5:11:5d:1b:ca:0e:8f:db:a5:
64:3c:fb:43:21:b7:ef:6c:e2:b2:6c:a6:be:9b:07:a5:6d:3f:
ae:94:e2:18:03:da:c8:ed:86:73:3c:27:cd:87:22:7a:98:c8:
ec:8d:5b:f6:0e:af:21:62:61:92:ef:3f:9d:9e:64:b5:51:a6:
77:8a:af:99:ac:64:2d:96:4e:28:3c:fb:f3:55:2e:74:33:11:
84:6b:d5:70:20:89:09:f2:d0:be:a5:0c:b5:13:ad:de:b1:29:
57:61:5f:a6:81:67:39:44:c3:85:d2:f7:60:37:ed:fa:71:4b:
f6:93:95:10:c3:3c:f6:f6:ae:25:34:58:23:cd:fb:c5:ec:6e:
a7:6c:39:16:93:be:f9:56:9d:dc:cf:f1:57:45:5d:03:a2:ec:
b9:9b:ae:92:8d:6d:c7:13:0a:36:41:2a:e9:11:ed:eb:d7:09:
89:c9:d8:0f:81:a2:ce:b0:d1:05:28:05:a4:86:59:35:4f:7e:
db:c0:82:19:29:21:27:19:7e:d3:ea:f6:3c:47:1b:98:a5:34:
61:d3:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:37 2025 by rpki-client