Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.mft
File: IRtX4m8cWgBN-7D-00c22pCIrjw.mft (raw, json)
Hash identifier: P+ifQ4Ch8aFvfJ5lvBgg1y5N78aqcM1Ehq/Z8ffpCFM=
Subject key identifier: 74:3E:AB:F1:07:8A:44:C3:57:62:24:6E:25:30:33:3C:82:DA:A9:30
Authority key identifier: 21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
Certificate issuer: /CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Certificate serial: 01909B71BC41D4ECAC47504B3DEA5C94C887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.mft
Manifest number: 11E9
Signing time: Wed 10 Jul 2024 07:00:40 +0000
Manifest this update: Wed 10 Jul 2024 07:00:40 +0000
Manifest next update: Thu 11 Jul 2024 07:00:40 +0000
Files and hashes: 1: IRtX4m8cWgBN-7D-00c22pCIrjw.crl (hash: SmFcMqeN/vgCV87uIHq3B1qWCmnIC0VtQYnsmHpsako=)
2: QolFqAuannDI-xpcpFmcLmWidd4.roa (hash: jJfETHRxX53fHKUVfFLRUUIiYKbD0xS6cyr1vRFy7fs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:71:bc:41:d4:ec:ac:47:50:4b:3d:ea:5c:94:c8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Validity
Not Before: Jul 10 07:00:40 2024 GMT
Not After : Jul 11 07:00:40 2024 GMT
Subject: CN=743eabf1078a44c35762246e2530333c82daa930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:98:3f:f5:69:b2:15:91:65:8d:7d:f9:1a:
de:8c:6b:00:b4:2e:96:79:d9:7e:cf:e3:e6:92:66:
2b:d0:7f:d4:fc:c8:d2:0d:94:c2:01:e0:6f:99:c5:
83:a8:41:d3:90:52:e9:54:38:60:f2:4f:6a:8e:02:
f7:72:cc:20:06:da:ca:ac:7f:c7:19:4e:76:10:8a:
02:f6:20:cf:ae:34:b6:6b:51:c3:03:16:c9:11:f2:
0b:2e:e4:3d:94:86:61:6e:b6:79:4d:12:67:92:04:
64:12:31:08:54:f2:31:f3:c8:ac:2d:e0:2c:da:74:
9b:c4:cb:c5:aa:ad:be:4a:aa:1f:48:d5:ab:f0:6e:
0e:99:14:b2:2b:b8:09:f9:de:75:5c:19:b7:04:16:
02:85:51:aa:00:74:0e:43:53:16:61:61:11:fb:4b:
be:9c:8a:4a:b9:97:bf:0c:f7:8a:1c:bd:35:b6:3a:
be:e6:9b:c0:3f:b3:15:0f:99:52:66:2e:d6:e4:fd:
6d:82:0b:8e:8e:1b:99:3c:94:c0:ba:70:89:9b:6e:
24:b0:08:f9:65:e2:12:bf:cc:a7:bf:74:29:85:d2:
00:c6:f2:81:1e:13:83:45:d2:e5:0d:73:f2:6f:b2:
5a:b6:b1:20:73:6d:86:25:d7:70:c3:85:2e:05:36:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:AB:F1:07:8A:44:C3:57:62:24:6E:25:30:33:3C:82:DA:A9:30
X509v3 Authority Key Identifier:
keyid:21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7a:ff:ec:e8:a0:8b:53:7c:6b:81:4d:5b:f4:8e:ac:55:37:
b9:80:3e:3b:b5:7f:34:e2:2b:2f:ec:c4:4b:1f:b9:97:ef:af:
8a:30:59:dd:f7:a4:15:e7:9c:d9:05:02:ee:fd:fb:62:7f:94:
f7:58:34:69:1e:15:42:da:3a:26:b3:9b:2f:aa:22:ec:69:5c:
a8:ee:14:37:99:6b:b4:5b:9c:89:ef:9b:50:05:69:68:8f:81:
03:fe:15:c9:ec:c1:dd:af:f4:59:4a:13:e3:a9:89:7b:b3:73:
a5:e9:5c:ea:0f:1a:5e:d7:1e:69:b9:b3:98:bb:ee:01:93:a6:
8d:a3:19:02:c6:3e:b5:71:da:db:f1:be:fa:26:c9:29:eb:9e:
5d:e9:6f:d3:bd:db:79:66:ee:45:d1:fc:97:47:96:d3:2b:6f:
b3:33:5d:12:f1:05:05:d7:d4:1f:14:c7:bc:f7:cb:1c:6b:a9:
0f:16:0b:58:e6:41:0c:9e:57:6c:3d:f2:ec:2d:c0:ad:b0:84:
64:96:88:a2:0d:75:83:15:b8:cc:c5:d5:d9:0b:e4:46:03:2e:
6d:1c:e5:d2:8a:ff:eb:09:59:5a:43:5a:7c:ba:e3:15:55:43:
0d:67:9e:b0:c2:e3:95:a7:ca:51:46:89:60:d4:a6:d4:85:cb:
c6:48:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:48 2025 by rpki-client