Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d8b1a-29a2-478f-a0b3-551c78a052e5/1/iO1rBL2D2tccKZx5WzwQZrtvPFo.mft
File: iO1rBL2D2tccKZx5WzwQZrtvPFo.mft (raw, json)
Hash identifier: mKv9viSI/DokCvnoneyB6VxnLR/gktWAPHIpbYV4u5o=
Subject key identifier: 9C:CC:AA:AF:67:A4:8B:96:56:7B:37:FE:70:19:B8:CF:B3:59:4D:E5
Authority key identifier: 88:ED:6B:04:BD:83:DA:D7:1C:29:9C:79:5B:3C:10:66:BB:6F:3C:5A
Certificate issuer: /CN=88ed6b04bd83dad71c299c795b3c1066bb6f3c5a
Certificate serial: 01823DE399CAB9DCAB44FA8A9EB1C3F67AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO1rBL2D2tccKZx5WzwQZrtvPFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d8b1a-29a2-478f-a0b3-551c78a052e5/1/iO1rBL2D2tccKZx5WzwQZrtvPFo.mft
Manifest number: 0542
Signing time: Wed 27 Jul 2022 04:21:42 +0000
Manifest this update: Wed 27 Jul 2022 04:21:42 +0000
Manifest next update: Thu 28 Jul 2022 04:21:42 +0000
Files and hashes: 1: 3vApDDW55s6JvdhCq1GnhQQhOnc.roa (hash: BbDaNhAJ///0sOpoAvssped2Tu8d95VsMJlm9IvFqXs=)
2: iO1rBL2D2tccKZx5WzwQZrtvPFo.crl (hash: MFJWE6lG7lftDY74EN6An0Zattr66C2V0mFYyB4S8/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3d:e3:99:ca:b9:dc:ab:44:fa:8a:9e:b1:c3:f6:7a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed6b04bd83dad71c299c795b3c1066bb6f3c5a
Validity
Not Before: Jul 27 04:21:42 2022 GMT
Not After : Jul 28 04:21:42 2022 GMT
Subject: CN=9cccaaaf67a48b96567b37fe7019b8cfb3594de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:34:d4:6c:90:16:eb:e8:1a:ef:df:87:40:
a9:69:0f:22:be:40:2e:3b:de:84:b9:0e:ac:1f:bf:
8f:ba:c9:22:1a:80:fd:cd:5d:96:0e:6e:56:d2:64:
24:65:5d:de:ea:38:4f:38:f4:33:0c:97:c1:e0:5c:
e4:07:71:f3:76:03:1d:d8:89:36:47:94:3f:80:f8:
f4:de:b8:a9:b8:40:b3:a6:5c:de:00:c8:8b:61:81:
a3:da:5b:2a:3c:51:61:f3:01:9b:73:27:41:4d:14:
d1:b4:c8:7a:0a:61:98:a1:c9:ad:73:9b:f8:48:83:
e9:c2:b1:94:a2:b3:ed:55:dc:47:3a:d3:38:19:a9:
fb:18:e6:be:c9:e0:ef:ef:37:93:12:5c:0c:6a:bc:
d8:03:0c:0a:a2:35:e9:31:81:ad:37:dc:e5:47:27:
94:b6:f0:f9:f9:4e:12:e7:8e:2a:c4:8f:03:8e:7b:
a6:89:29:81:60:e3:c6:da:fe:75:2f:21:26:21:dd:
04:7f:3a:b4:bf:aa:34:35:45:c0:52:7e:67:93:19:
4c:23:cc:69:36:f1:bb:45:00:17:f6:0d:8b:a8:43:
15:75:25:fe:46:9e:2d:a0:29:64:31:90:96:d5:95:
f9:4b:ef:50:59:74:38:be:06:98:63:ec:7d:91:45:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CC:AA:AF:67:A4:8B:96:56:7B:37:FE:70:19:B8:CF:B3:59:4D:E5
X509v3 Authority Key Identifier:
keyid:88:ED:6B:04:BD:83:DA:D7:1C:29:9C:79:5B:3C:10:66:BB:6F:3C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO1rBL2D2tccKZx5WzwQZrtvPFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d8b1a-29a2-478f-a0b3-551c78a052e5/1/iO1rBL2D2tccKZx5WzwQZrtvPFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d8b1a-29a2-478f-a0b3-551c78a052e5/1/iO1rBL2D2tccKZx5WzwQZrtvPFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:25:c6:30:a8:88:00:97:64:e4:14:e2:fc:78:ee:25:4e:9d:
b9:4e:20:2e:8a:ff:b2:59:02:d0:eb:25:80:5a:93:6e:f2:2d:
a3:0f:ff:33:66:02:57:5e:53:ca:6f:80:c0:a6:15:b2:3b:4f:
0d:ae:ec:c5:e8:95:a8:66:c4:4c:fc:05:bc:9b:1e:1a:a8:ce:
ad:93:4c:d9:10:38:34:06:9a:a6:f3:05:3b:c4:6e:c3:68:25:
a6:9e:d7:45:2d:ef:65:e8:22:3e:56:f9:46:ca:68:48:db:8e:
4f:93:36:0f:0e:7e:a1:36:b5:18:cf:ef:05:ce:80:b1:ef:8b:
e3:dd:09:33:68:8a:55:1c:65:64:90:25:00:cd:34:11:d4:de:
0b:22:41:19:c5:8a:67:03:d6:12:c6:62:03:5c:5d:c4:39:b7:
e4:bf:c8:a7:cf:b0:96:62:de:6b:e4:1c:6b:c1:89:c5:29:1c:
16:26:8e:92:24:03:09:90:37:33:95:df:4e:2a:ce:f0:22:5f:
91:02:7c:d4:69:4f:f6:78:dd:97:97:2b:9f:cb:41:a7:2c:da:
6b:74:90:86:8e:3d:30:f3:3a:4d:bb:9e:d7:8a:21:8b:0d:77:
94:22:1b:99:a1:23:cc:7a:22:b2:b3:cd:90:49:7b:bd:88:e7:
e2:7e:b1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:58 2025 by rpki-client