Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
File: rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft (raw, json)
Hash identifier: XkUyZmKe4xhz6KDaLCa02D+qeXYAmXxu1uXEHb+0zrc=
Subject key identifier: C7:2C:1F:5C:13:7F:56:6E:DD:9E:46:04:F9:89:17:2F:E5:9A:93:42
Authority key identifier: AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
Certificate issuer: /CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Certificate serial: 0195225F3465F083B97A39DADA939DCBD306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
Manifest number: 1339
Signing time: Thu 20 Feb 2025 08:00:19 +0000
Manifest this update: Thu 20 Feb 2025 08:00:19 +0000
Manifest next update: Fri 21 Feb 2025 08:00:19 +0000
Files and hashes: 1: nKkoxtAcsP_tHlqE57CDenLXG04.roa (hash: ZhFG6u5NdQDnITb4OAUdu1m1nUTdZyt00LAJ5rE5RT4=)
2: rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl (hash: QOPeftvogVwGIJ3LJKs+mZNL6gQxSXCVTLHX4uqsn74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:5f:34:65:f0:83:b9:7a:39:da:da:93:9d:cb:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Validity
Not Before: Feb 20 08:00:19 2025 GMT
Not After : Feb 21 08:00:19 2025 GMT
Subject: CN=c72c1f5c137f566edd9e4604f989172fe59a9342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:bd:dc:fc:0e:d1:91:a9:44:d2:ad:02:7b:
9c:12:4a:50:bb:50:c0:d7:84:f8:05:8f:8b:70:3c:
ad:a5:42:87:5a:fb:58:7f:15:09:74:da:f9:f0:65:
71:80:eb:21:0d:62:8a:6e:df:88:d9:50:52:7f:69:
88:f2:0c:20:4f:22:d8:cf:54:51:4d:1a:4b:42:2e:
08:94:61:d1:12:80:18:0f:e4:15:04:fa:fd:5a:84:
72:50:d6:2d:1c:ea:22:5c:fe:25:7d:b1:b6:53:a8:
44:2b:bf:bb:a8:0d:12:ce:0c:c0:e3:41:e0:f7:f4:
12:9c:e6:e7:95:fd:1f:b9:69:44:20:8b:5f:7e:09:
fe:9f:cc:18:51:6d:06:01:2b:89:77:19:58:2e:1a:
76:6c:46:23:74:af:1b:5f:48:11:e3:d7:c2:52:35:
85:22:38:57:42:1b:7f:7d:fa:17:53:51:aa:96:2b:
92:93:5c:90:90:e0:37:c1:1b:70:9c:a6:b1:98:9e:
26:8d:25:3b:c4:1b:1b:b6:a0:61:8f:d0:f3:5c:50:
dd:ab:b0:c0:58:3a:f7:67:37:db:31:77:79:b3:8d:
5f:e6:c8:54:df:42:8e:cd:9c:25:1f:af:27:c9:60:
ea:e5:90:bc:42:86:05:48:72:82:91:1a:7a:53:b5:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2C:1F:5C:13:7F:56:6E:DD:9E:46:04:F9:89:17:2F:E5:9A:93:42
X509v3 Authority Key Identifier:
keyid:AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:60:e4:52:f3:f3:d8:dc:e8:20:95:8e:93:18:72:2e:e8:c2:
37:78:26:10:d8:e3:b5:a1:2a:22:d0:de:5b:31:fd:97:93:91:
45:75:98:e0:b6:a2:a0:e8:05:b9:dc:0a:a5:1b:33:6b:b7:89:
fb:ac:8e:3c:27:7b:09:3f:55:e1:c8:76:a7:29:38:00:36:01:
fe:a3:f1:f7:a9:1e:ee:ff:c0:e2:bd:71:68:75:c3:78:32:4e:
16:eb:bd:34:2d:29:80:e6:2e:61:da:c7:9a:22:2d:79:80:d1:
4e:65:d8:f4:67:8d:be:eb:0f:c4:03:0a:95:58:8f:d3:90:f6:
f5:dc:19:aa:5c:eb:24:0b:6d:0a:bb:4a:3d:80:cb:09:2a:45:
95:01:8e:ac:d2:21:d0:41:97:be:ac:86:d9:d6:a7:1e:84:37:
21:97:ae:77:2d:60:ee:9a:41:51:ad:5a:90:3d:a4:03:38:73:
32:f3:bd:da:3f:a0:22:45:2d:d4:6d:91:91:71:36:46:e7:d8:
66:88:7a:1f:91:a9:18:13:aa:0a:16:6c:a4:32:e7:fb:2e:ce:
2b:89:97:a9:88:f2:7e:a6:25:63:ce:62:0e:8a:b9:aa:3f:8d:
18:3e:5b:b6:d2:d4:b3:ed:95:be:b4:4a:28:3c:d6:73:d6:a9:
6c:48:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:52:18 2025 by rpki-client