Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: YSX8slbqYS1JMWMgHz2/1xfUajNMJd/VPFpKjSt2gls=
Subject key identifier: E1:CF:47:17:CB:B2:49:B9:73:C1:0C:E9:19:BA:18:21:D6:CC:6E:A6
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 0195DFD88DC28E40746F8E0FA6A507D50996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 073A
Signing time: Sat 29 Mar 2025 03:01:05 +0000
Manifest this update: Sat 29 Mar 2025 03:01:05 +0000
Manifest next update: Sun 30 Mar 2025 03:01:05 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: wbhSXHxOY3PGKleGhu3ZJoaRBzsabuS0ejgbsuWY6oY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:8d:c2:8e:40:74:6f:8e:0f:a6:a5:07:d5:09:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Mar 29 03:01:05 2025 GMT
Not After : Mar 30 03:01:05 2025 GMT
Subject: CN=e1cf4717cbb249b973c10ce919ba1821d6cc6ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:fc:3b:69:e8:2a:75:df:78:ca:39:2c:2a:
9c:8c:9f:cb:0b:21:ae:87:4b:d7:33:f7:03:90:9f:
9c:9c:21:6a:d3:c7:31:61:c3:25:f6:0b:96:ae:e1:
39:57:b6:8d:9a:a6:d1:d4:c1:71:1a:61:15:47:92:
3b:13:70:91:27:4c:d0:7a:34:dd:04:91:36:52:8d:
57:25:0e:73:cc:5d:37:47:e5:88:40:0b:89:71:a3:
2c:b6:fd:19:06:68:03:f8:56:4e:fb:0f:84:e6:40:
39:c3:ec:4b:72:69:1e:3d:f4:a2:e9:1d:3a:35:26:
c2:c7:4b:13:6a:ff:06:fc:03:35:eb:ce:f0:77:82:
62:bb:ab:fa:73:c1:eb:3a:ea:5b:07:9b:6c:5d:1d:
74:7a:9e:c6:e7:af:4f:32:ee:4f:27:bc:a7:99:46:
aa:98:47:bb:7b:3a:3d:5b:65:41:92:b9:ef:12:8f:
79:8e:cc:d1:6d:6a:90:e9:d6:b3:2f:d7:6b:40:f7:
7c:48:01:4e:0b:a5:bb:9a:7d:6e:c4:05:10:87:f3:
f4:4a:77:a3:18:43:46:c8:32:7b:8d:3a:c1:13:95:
b2:41:cd:fe:7f:56:5f:05:e7:90:2c:d5:0c:18:c5:
e0:88:99:46:5d:1b:e4:2a:05:35:1a:d5:c7:21:fd:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:47:17:CB:B2:49:B9:73:C1:0C:E9:19:BA:18:21:D6:CC:6E:A6
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:dd:4c:63:e7:27:e6:e9:94:57:c3:b7:c7:1f:1a:51:b0:a7:
b9:05:2c:a8:aa:58:17:26:36:37:cc:dc:38:dc:c6:a4:29:97:
a2:df:72:34:d9:4c:3b:d3:41:2f:e9:eb:7c:e4:72:7b:f1:01:
f7:89:12:d3:05:5f:fe:75:88:f3:1e:9d:8b:08:fa:80:0e:a0:
06:0c:1f:dd:fb:ec:89:d9:ee:b7:5c:ec:2c:03:42:11:45:dd:
2c:3d:b9:56:f8:08:6e:34:96:1b:25:41:05:2b:18:f0:ac:80:
5a:37:86:ff:21:5e:f5:4c:72:2a:31:a1:f4:8b:7d:04:80:3b:
bb:62:16:dd:3b:2f:fe:2c:88:ef:7f:8f:59:6f:fa:f5:b0:c8:
27:47:0e:36:22:f2:6c:3e:3a:63:79:87:e7:2e:cb:49:1f:72:
2f:29:d9:41:97:13:96:37:a8:63:58:1c:2c:26:1b:6f:02:06:
f4:01:f5:20:e3:ba:a4:b8:3d:11:78:7b:da:eb:a6:7f:f0:eb:
eb:dc:37:db:39:79:16:5c:02:74:07:55:1f:ff:44:9b:89:6a:
42:4e:7b:ae:e4:48:f2:de:76:fb:9e:a5:42:ce:33:a9:b9:46:
e8:e1:dd:77:b2:63:82:56:71:0f:01:be:3e:6e:e2:63:26:7f:
1c:4f:b3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:52:25 2025 by rpki-client