Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/IQAdNNfPrdIoiaflDbcx2KkHHCU.mft
File: IQAdNNfPrdIoiaflDbcx2KkHHCU.mft (raw, json)
Hash identifier: gslRyw9nWYsbxzNpKcFXNnu72dJIj4So7vSpsKqi27o=
Subject key identifier: 84:01:5F:43:41:C6:9B:5E:F3:11:1C:1A:F5:5F:4E:10:74:53:18:07
Authority key identifier: 21:00:1D:34:D7:CF:AD:D2:28:89:A7:E5:0D:B7:31:D8:A9:07:1C:25
Certificate issuer: /CN=21001d34d7cfadd22889a7e50db731d8a9071c25
Certificate serial: 01852949E110DDAC2CF7E6BEC5A3E2B98E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQAdNNfPrdIoiaflDbcx2KkHHCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/IQAdNNfPrdIoiaflDbcx2KkHHCU.mft
Manifest number: 0BD4
Signing time: Mon 19 Dec 2022 07:29:45 +0000
Manifest this update: Mon 19 Dec 2022 07:29:45 +0000
Manifest next update: Tue 20 Dec 2022 07:29:45 +0000
Files and hashes: 1: 3KB45vexJwMwVAQOF8-5OBrTvfQ.roa (hash: +u8+66yTH39pi2viZh9QjTMaFE2muo/iycEdgJ9RNQw=)
2: IQAdNNfPrdIoiaflDbcx2KkHHCU.crl (hash: lq8UAdZ1zaXGYe9+cw++6414/bbR36YVYD3UHi0dJG8=)
3: JioSZcogLBvnPm_i10GpZ6DFfe0.roa (hash: okwU3DuRLl0CqMjCKzOSSowupf9RgDTRhQ+79P+x4cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:49:e1:10:dd:ac:2c:f7:e6:be:c5:a3:e2:b9:8e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21001d34d7cfadd22889a7e50db731d8a9071c25
Validity
Not Before: Dec 19 07:29:45 2022 GMT
Not After : Dec 20 07:29:45 2022 GMT
Subject: CN=84015f4341c69b5ef3111c1af55f4e1074531807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:1a:a6:21:42:cf:bd:f1:0d:69:a7:27:09:
66:14:1b:61:40:9b:0f:2a:7f:5c:38:f0:98:1e:37:
2c:07:02:43:10:9a:d7:eb:3c:8d:83:02:83:d0:85:
35:cf:1f:cc:ea:c6:ef:b0:9c:d6:34:a4:09:e4:80:
d6:31:a6:c0:31:39:04:eb:bb:94:df:25:2f:39:a7:
35:33:a2:a4:a4:00:8d:42:8b:e2:49:d7:78:07:ea:
ff:19:39:44:03:e4:75:d0:46:fe:fa:4d:85:84:6d:
c0:88:a8:74:7a:d7:07:1d:ee:07:27:70:a5:63:ec:
eb:8e:c9:af:cb:46:36:a0:e0:ed:5c:37:f9:8c:ad:
38:31:29:01:94:c9:7f:24:06:60:f9:fd:64:39:55:
4a:a1:76:63:5e:e0:22:c8:3d:01:e8:0a:aa:da:80:
b9:c3:f1:20:ea:b7:ca:5d:84:aa:b8:3b:49:78:6c:
53:95:43:73:38:46:4b:61:e5:e8:8c:5d:64:c6:54:
38:be:f0:4c:d8:10:93:a2:db:1b:dd:e0:ca:e5:b4:
b7:39:e3:f6:64:14:d8:8a:c0:9f:33:83:5d:60:78:
d2:ef:1f:3d:75:ec:ca:53:50:1d:89:2d:42:3f:4d:
22:b7:2d:3b:55:a8:ed:d3:29:54:d9:f0:69:4e:f0:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:01:5F:43:41:C6:9B:5E:F3:11:1C:1A:F5:5F:4E:10:74:53:18:07
X509v3 Authority Key Identifier:
keyid:21:00:1D:34:D7:CF:AD:D2:28:89:A7:E5:0D:B7:31:D8:A9:07:1C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQAdNNfPrdIoiaflDbcx2KkHHCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/IQAdNNfPrdIoiaflDbcx2KkHHCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/IQAdNNfPrdIoiaflDbcx2KkHHCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:da:c9:1d:4e:25:e8:3c:91:78:82:f1:2d:aa:a3:b8:51:48:
27:e9:e9:f9:28:df:22:e3:d1:f6:ad:8a:6b:73:13:34:01:ff:
10:11:6d:b4:49:a5:63:8b:2a:52:b0:e5:8b:b1:60:e6:4f:43:
9c:38:6e:29:f5:ef:43:ed:25:c4:cd:b0:1b:6c:07:ad:f0:3b:
0a:49:4d:be:8d:e6:50:e5:8f:ea:ae:4f:de:82:1d:49:2a:1d:
51:72:ff:a5:73:70:4e:c4:6f:c6:71:82:f6:6b:77:f6:63:b3:
48:63:dd:a4:ae:81:d2:2b:75:38:80:cc:49:25:42:ba:55:d8:
62:a5:72:30:ee:9f:28:7b:0a:1d:90:60:a2:b2:d5:98:a7:94:
32:81:a7:4d:13:32:67:54:5f:bd:5a:66:09:23:c4:c1:a8:f8:
52:20:e1:86:f6:ec:28:97:2d:ea:94:0a:8f:8f:44:3d:f1:48:
12:0a:3d:e1:e1:21:76:5e:69:ce:ab:20:b6:bf:4c:df:2a:0e:
e7:2f:e9:d7:1c:96:ad:94:b3:2c:cb:16:bf:21:10:7d:cd:b3:
4c:28:b2:35:27:e6:b0:dc:05:bc:94:b9:f4:d4:9b:5b:80:e9:
4e:1e:10:23:76:87:9d:b3:f2:63:30:94:7d:f6:c1:01:d4:e0:
07:2a:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:59 2025 by rpki-client