Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/iANpwB4PYlcHEPe3AjApKCUPZdo.mft
File: iANpwB4PYlcHEPe3AjApKCUPZdo.mft (raw, json)
Hash identifier: GNI6Rjq428E+d+N7NsbIok4G2dP9QcgG36t/Q3pdiY0=
Subject key identifier: BC:97:44:C8:50:B3:39:3A:24:9C:3E:C7:6A:8E:CF:FF:33:C6:AA:F5
Authority key identifier: 88:03:69:C0:1E:0F:62:57:07:10:F7:B7:02:30:29:28:25:0F:65:DA
Certificate issuer: /CN=880369c01e0f62570710f7b702302928250f65da
Certificate serial: 018BD2DBBA86A9FA52D2A79D10AE35A9DDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iANpwB4PYlcHEPe3AjApKCUPZdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/iANpwB4PYlcHEPe3AjApKCUPZdo.mft
Manifest number: 085F
Signing time: Wed 15 Nov 2023 12:01:37 +0000
Manifest this update: Wed 15 Nov 2023 12:01:37 +0000
Manifest next update: Thu 16 Nov 2023 12:01:37 +0000
Files and hashes: 1: iANpwB4PYlcHEPe3AjApKCUPZdo.crl (hash: s1X+V+3igzkyMGXRaUnQXoIqJG+td2YU3ih3ya0BrbU=)
2: zkNW0URVJ1aN-UU4AiWDz-00TmE.roa (hash: L2ROP8Eqer0sKf/AsTcoUZSxV5UgN+HwyIShrR6PV+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:db:ba:86:a9:fa:52:d2:a7:9d:10:ae:35:a9:dd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880369c01e0f62570710f7b702302928250f65da
Validity
Not Before: Nov 15 12:01:37 2023 GMT
Not After : Nov 16 12:01:37 2023 GMT
Subject: CN=bc9744c850b3393a249c3ec76a8ecfff33c6aaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:d1:94:32:c4:56:f0:6e:17:f2:26:cb:fd:
0d:95:82:2d:6e:89:3e:0c:99:e4:96:f7:1c:2f:7e:
2c:cc:5a:04:2f:2e:03:79:53:be:a1:86:ec:c0:56:
a5:95:2e:3c:a6:f6:4f:4b:18:7f:61:44:56:ff:66:
9d:7d:72:65:98:7a:f7:6e:14:fb:4b:8f:1a:3d:bd:
9f:ed:2b:47:48:6a:63:fa:c4:53:ed:64:de:c6:af:
7d:43:0a:89:cf:fc:73:42:6f:38:17:86:8e:2b:d4:
66:c1:d6:2a:2a:4b:56:cc:eb:b7:8d:08:ee:14:94:
a7:c2:4d:40:51:f0:e4:fa:16:f3:41:e0:f9:3c:03:
2e:88:17:9b:c0:b4:bb:35:68:a6:a5:92:8e:00:63:
67:6c:cb:2d:ac:d6:71:f4:fc:d2:3b:d3:fe:32:ef:
eb:13:a7:75:13:e8:0f:b7:2a:85:0d:99:a6:c8:1c:
b5:b5:d8:39:8a:d6:70:24:c9:90:39:e6:b4:6f:ef:
13:23:7d:fa:08:96:f1:50:79:08:bd:a5:50:77:62:
11:2e:77:85:ad:ca:46:5c:c8:e4:f0:ac:ee:5f:16:
f8:3a:bd:5d:7d:4d:16:af:e2:22:68:2d:a6:63:31:
26:74:25:82:c7:2c:68:9b:72:81:cf:af:fb:c6:39:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:97:44:C8:50:B3:39:3A:24:9C:3E:C7:6A:8E:CF:FF:33:C6:AA:F5
X509v3 Authority Key Identifier:
keyid:88:03:69:C0:1E:0F:62:57:07:10:F7:B7:02:30:29:28:25:0F:65:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iANpwB4PYlcHEPe3AjApKCUPZdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/iANpwB4PYlcHEPe3AjApKCUPZdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/iANpwB4PYlcHEPe3AjApKCUPZdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5e:42:c8:39:21:bd:ed:34:8e:5e:71:61:96:9f:0b:a2:1c:
56:45:b1:3a:7e:a7:18:6d:6e:2c:5d:36:7a:a9:2b:41:70:e0:
97:12:0e:e4:9b:87:1c:d0:9f:b9:01:fe:18:45:12:ca:6a:fd:
a7:81:45:fb:2f:de:85:d0:cb:34:78:63:6b:ab:06:ae:a5:2a:
1a:0a:cf:33:71:d9:bc:b7:a0:80:9b:98:7b:da:38:e2:2d:b9:
78:09:4c:fe:dc:5b:35:67:d0:a4:0b:f5:d6:10:35:db:34:c0:
a1:92:df:78:16:3d:bc:f4:a1:ea:f2:06:10:fb:3d:f8:11:09:
64:d8:e1:bd:2b:d3:8d:55:a8:60:af:e5:dd:27:b4:53:d5:a6:
15:84:27:61:d2:8b:6d:84:7e:ea:ab:47:37:aa:16:bc:61:9c:
a6:cd:98:45:f6:15:b6:31:a9:cf:40:db:98:01:9c:7c:2b:13:
67:f9:a4:8a:0f:8f:f7:a2:b4:a0:fc:65:58:46:80:f1:0d:4b:
a4:a7:7d:2e:a2:4b:e9:03:65:32:e7:72:d0:1c:1f:7f:c4:07:
44:6c:06:6b:af:38:87:c7:8c:35:bb:98:74:dd:bc:64:37:3e:
fd:95:29:76:fb:da:8f:1d:a2:6a:42:1c:aa:82:9b:e4:5c:c0:
7f:5f:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:29 2025 by rpki-client