Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: fOnvnYz65w8SPSuGJt5NOewsjP9t5SJ0/8VuTsULB4g=
Subject key identifier: 17:AA:43:AD:35:92:2A:13:C3:BC:3B:68:20:1F:56:BE:14:C4:D6:54
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 0194BC04FF075A7A037B5D6A7CBA634C11E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: FE
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: lg/i6nS23em8Pj2+8cY9KRN8F8jAuD2cgycOG8IYq/Q=)
2: W8kldn3kdGYqCFVL9Vj-_yMc_YQ.roa (hash: GEboFATMOMt3GSxR34v0QsuLahbz9VbOcfy1sr+D47k=)
3: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:07:5a:7a:03:7b:5d:6a:7c:ba:63:4c:11:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=17aa43ad35922a13c3bc3b68201f56be14c4d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:3c:84:87:61:3a:f3:61:67:32:8b:be:aa:
ae:7f:8c:4c:be:36:c8:ab:80:67:3f:e6:42:67:65:
b1:c9:24:cc:b9:ed:4a:98:64:12:b8:02:1d:51:67:
b0:fe:77:3d:a2:29:39:26:5c:a3:14:e7:6f:c4:09:
60:c2:bc:04:4b:ca:fb:c6:36:61:1a:95:b9:51:75:
91:5e:16:61:f1:c8:23:46:97:4d:7f:df:5e:88:ed:
2f:65:a0:84:4d:91:74:d0:68:21:2c:bb:cd:ba:7f:
01:74:2c:1a:01:f0:88:fc:63:b5:ac:9c:d0:77:39:
c2:ec:bd:34:87:32:12:f5:1c:5c:d8:ab:df:a9:f4:
6a:c1:da:6d:26:3b:74:f4:99:31:90:84:0f:29:56:
26:11:44:28:66:3e:2e:f8:f8:af:e3:59:e3:ed:77:
33:c2:b8:67:e4:f5:67:2b:68:5c:38:20:b2:b8:53:
c2:25:a1:e4:61:58:9f:fb:76:e6:de:25:2f:0e:4e:
6b:87:d8:4f:d1:a0:a6:b0:ee:01:76:64:2b:19:77:
60:17:87:3f:e6:a2:cd:59:99:a3:15:46:0d:9f:19:
ee:2a:37:7f:da:0a:cf:3d:01:8b:4f:61:81:97:3e:
ea:b8:0e:24:51:a1:10:d0:97:38:31:fe:31:24:98:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:43:AD:35:92:2A:13:C3:BC:3B:68:20:1F:56:BE:14:C4:D6:54
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:45:8c:87:d1:e9:d9:53:25:cc:20:01:f6:9e:0e:64:b4:16:
85:f0:a7:c2:97:d2:af:aa:84:7f:cc:de:01:ce:54:3d:95:6a:
9d:89:af:dd:fc:80:11:2d:f6:39:78:ff:3f:9e:2f:21:55:97:
ea:12:1a:10:88:f1:d3:c9:de:bb:39:26:c2:7d:c8:66:26:34:
ce:4f:8c:bb:52:28:a1:d3:b1:d9:d4:cd:8a:1e:94:35:9b:ce:
21:fa:be:e4:a1:15:33:c5:d9:ff:83:2f:ec:ba:b7:27:b8:86:
f4:a9:f2:a6:2c:87:91:27:bf:ad:d7:c7:e6:83:55:bf:a1:b4:
be:9a:4c:cd:20:35:bd:7d:0e:02:bd:ac:a7:67:a7:81:b8:95:
1b:72:13:1a:45:95:5b:c8:4f:06:21:f0:6d:e7:0a:7f:bc:27:
4a:79:eb:2e:41:d5:48:43:00:26:54:f8:e0:11:65:54:ae:b2:
d5:3c:39:79:b5:93:92:8c:e3:63:e0:ba:3c:4f:d9:3d:79:c0:
93:df:fe:5c:6c:a1:c2:62:05:1f:2e:d5:3c:2a:06:17:11:2d:
ef:7c:d3:23:87:ae:56:8f:9c:c4:08:e2:9e:4f:5a:c8:56:3b:
ca:0c:b1:b7:37:01:5e:c9:0c:d5:8d:ef:63:ad:f0:d7:22:fb:
43:cd:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:32 2025 by rpki-client