Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: YA4oHOrktlQ3YxUxkNYhv1ttDl4ya31ETXPUOKgckyE=
Subject key identifier: F1:98:B5:12:B9:11:56:51:9A:E4:56:32:4E:57:04:46:0C:AE:60:A4
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 0194BD175904A193FB9D2A686A2EFF656FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: f2TgAOlxOnqaHpTQvPUWmzvoTkUx5FIXT+WCqyVoLQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:59:04:a1:93:fb:9d:2a:68:6a:2e:ff:65:6f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=f198b512b91156519ae456324e5704460cae60a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:53:a9:bf:9c:d9:c2:18:a5:d3:ad:10:ca:
c9:24:64:83:81:49:25:ec:12:c9:99:53:8d:4d:68:
3f:be:d7:c0:ef:14:fb:df:5e:61:79:5c:9c:b3:10:
79:8e:9e:c6:0a:84:00:a6:36:d2:8f:41:2b:fb:15:
45:c0:fb:3a:3f:1d:48:41:80:b5:13:3c:95:89:65:
71:a7:60:24:47:8d:58:6b:15:ab:72:65:3f:aa:b6:
c0:e1:6a:08:20:20:8a:41:c6:63:34:f6:3e:2d:cf:
31:17:72:ee:c0:a1:ef:a4:fb:1f:21:33:3f:6a:11:
ee:16:e1:bc:6c:f7:14:b9:57:99:da:b6:03:ca:d8:
5d:fb:9f:02:07:96:11:20:0d:09:ca:13:6b:ce:54:
cb:2d:1b:1b:00:85:f3:df:60:0e:5d:76:ab:97:5a:
4f:36:2c:53:6b:cf:80:22:73:71:0d:97:90:9d:25:
b7:7f:91:7c:6e:5b:f7:53:1a:db:b7:e7:8a:ee:8a:
e8:be:d3:5f:d0:a1:09:f6:f3:be:87:1a:3b:ea:76:
4c:85:b7:9f:81:fe:83:c2:a7:17:09:24:e2:ec:75:
75:ba:78:8d:b2:c4:81:6d:e8:bf:62:c7:1d:76:e5:
89:39:96:a9:a6:f9:78:18:e9:cb:42:b5:d8:3e:1d:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:B5:12:B9:11:56:51:9A:E4:56:32:4E:57:04:46:0C:AE:60:A4
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:28:9b:7d:2c:26:68:fe:6a:c0:4d:a1:28:07:b4:d1:e4:9b:
b2:1e:8f:7c:0d:91:2e:1c:59:d7:36:c1:fb:ec:2a:dd:1a:e2:
2c:f4:aa:7e:85:ef:02:b8:81:bb:40:28:51:22:f8:28:7d:55:
44:26:7c:c9:c1:8f:9a:47:b6:b1:ae:d5:c8:2d:83:91:72:9a:
52:38:1b:41:0c:91:d6:d6:0c:27:a0:91:55:de:0f:7c:63:63:
2f:37:a4:2c:bf:8e:67:66:e2:67:1e:24:c8:22:8e:e2:90:1a:
f6:f6:2b:34:37:96:43:7f:01:c7:e2:c5:88:80:9a:76:56:a9:
36:c1:a5:36:9b:2a:13:50:e4:12:d2:47:dd:54:af:93:0f:28:
e1:7d:99:7f:5f:70:26:a5:b8:5d:41:08:97:c6:05:d1:78:b6:
0b:a4:1c:71:da:8d:9e:ac:58:16:4c:42:45:9c:a5:1c:26:7e:
66:69:2b:50:f7:87:e9:4e:56:7f:f0:63:0a:1e:f2:88:d2:c2:
83:aa:ce:6c:5a:29:d9:7d:2d:c6:a7:f8:24:26:81:90:b0:2d:
c4:85:31:72:d6:80:8e:8d:3f:ba:e5:a1:5f:78:cd:a0:9c:4f:
20:d1:1e:91:81:6b:19:a4:e0:91:47:08:44:a2:7a:a0:14:93:
f3:d6:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:48 2025 by rpki-client