Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: h+GiJHI0XUF8Jt5qYCJIhBpvnJMB+wt/xMKz0mtSeNA=
Subject key identifier: 2E:6D:70:88:99:6D:00:48:27:C9:29:ED:C3:50:3F:CA:C5:F0:D3:4F
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 0194BD852D99F389CB30102C20E05A6502E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0AA7
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: s5P0RxC+CUz+mflQxnga+FTdpeZF7N1I9wgN9Sb61hA=)
2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2d:99:f3:89:cb:30:10:2c:20:e0:5a:65:02:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=2e6d7088996d004827c929edc3503fcac5f0d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:a8:d2:d8:e2:2d:96:cd:18:9c:92:e4:06:
76:e8:6f:78:72:e5:ef:98:44:b6:68:54:46:da:97:
66:24:bf:b3:ed:86:b6:14:04:fb:59:d9:41:12:7a:
65:e3:d9:96:96:f9:a2:db:83:f8:75:19:8d:3f:58:
88:9b:3a:1d:31:9b:56:5c:03:be:0b:3f:76:cd:36:
a4:af:0e:48:14:8b:fb:33:16:dc:d7:dc:24:61:25:
b6:d3:f4:fe:6d:03:04:ba:5a:b1:9a:a3:a9:5a:f7:
92:e8:f2:b4:6d:45:8d:e7:c9:aa:c5:0f:f6:e6:4d:
d3:d7:92:0a:08:54:be:c2:68:62:c0:99:0a:14:f3:
b4:cf:60:96:27:a0:14:7d:96:8d:46:b8:f5:ea:60:
0d:38:19:a9:65:d4:45:3f:8b:b4:4f:6c:dd:c0:8c:
c8:57:b5:2a:40:48:fa:e0:cc:e9:4b:ed:13:d3:7d:
cb:62:cd:51:25:0d:d8:70:e5:05:13:e0:bf:5d:c6:
a2:4b:22:4a:98:93:ed:9e:6e:e5:7f:dc:de:6d:40:
bc:d3:2a:2f:98:fa:e2:91:85:7b:ee:f5:73:e9:99:
fd:6b:d8:5e:2a:4e:cc:2d:26:b1:80:63:b8:96:3f:
99:9f:53:0e:9c:72:49:13:8c:fa:60:cc:cd:a7:cd:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:70:88:99:6D:00:48:27:C9:29:ED:C3:50:3F:CA:C5:F0:D3:4F
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:fb:ee:00:04:cf:f2:b0:d5:a5:4e:71:c6:e6:4b:37:c9:68:
10:f7:84:18:96:3d:73:ba:71:cd:d7:3c:dc:47:e8:8d:8f:c9:
c1:ce:dc:dd:f4:fa:01:f8:1b:ac:db:4a:b4:c8:73:ec:ed:6d:
15:37:60:a7:0d:c5:f0:af:9e:f9:ff:3a:06:1b:c5:c6:b0:fe:
58:3e:99:0a:59:f2:fa:49:68:94:a4:cf:8e:40:52:da:fe:3e:
bb:61:65:9a:75:d2:2a:d8:c5:9a:cf:c8:c0:95:27:05:be:49:
1e:c5:01:d4:44:4e:42:8a:a6:fa:76:20:32:1b:be:48:12:db:
45:64:ac:5b:67:27:6f:84:db:5a:03:53:d4:e7:f8:55:b7:8d:
c1:36:0f:f7:f6:9c:ee:fe:ae:22:c2:53:70:17:82:24:22:db:
a2:c4:1f:88:23:af:db:64:91:fd:2c:f1:cf:76:7a:aa:cb:b8:
3e:36:6b:3d:10:00:e6:2e:49:23:13:ba:cb:31:c7:8c:cc:f5:
be:54:6b:74:e9:cb:9c:2c:c5:52:84:ba:3d:13:84:35:96:b8:
1f:72:7b:d2:70:61:27:a9:74:1c:e5:2f:f4:5b:bf:16:63:23:
e0:e6:1c:38:d9:fc:7e:07:96:55:d6:52:a9:35:5d:6d:66:3a:
8d:44:86:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:49:11 2025 by rpki-client