Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dcbba6-19e0-45cd-b44d-3d33d374d01f/1/iY304RUUvsxHKnV-A2s4CH0BZe0.mft
File: iY304RUUvsxHKnV-A2s4CH0BZe0.mft (raw, json)
Hash identifier: M7rHsm0RXwJ1i9CIHDQBBTHdsigWZ9irwJaqPkrUf2k=
Subject key identifier: 39:22:B1:EC:A2:A9:9E:22:AA:E0:7A:F5:9A:98:DC:48:93:44:DC:1F
Authority key identifier: 89:8D:F4:E1:15:14:BE:CC:47:2A:75:7E:03:6B:38:08:7D:01:65:ED
Certificate issuer: /CN=898df4e11514becc472a757e036b38087d0165ed
Certificate serial: 018C81852061B6F3EA7C481A4A70C49E5C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iY304RUUvsxHKnV-A2s4CH0BZe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dcbba6-19e0-45cd-b44d-3d33d374d01f/1/iY304RUUvsxHKnV-A2s4CH0BZe0.mft
Manifest number: 0F6C
Signing time: Tue 19 Dec 2023 10:00:34 +0000
Manifest this update: Tue 19 Dec 2023 10:00:34 +0000
Manifest next update: Wed 20 Dec 2023 10:00:34 +0000
Files and hashes: 1: QhGwMDwYTSAujE5_XyX-bgJqps8.roa (hash: j9xPLchxipXHbvr640eZhdyK4jnO4UPIf191WHHdjwk=)
2: iY304RUUvsxHKnV-A2s4CH0BZe0.crl (hash: uYDqOLTZUcqw8sYSrKcTF8KTOayLlOK5INxsxs46C90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:85:20:61:b6:f3:ea:7c:48:1a:4a:70:c4:9e:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898df4e11514becc472a757e036b38087d0165ed
Validity
Not Before: Dec 19 10:00:34 2023 GMT
Not After : Dec 20 10:00:34 2023 GMT
Subject: CN=3922b1eca2a99e22aae07af59a98dc489344dc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:3d:ac:18:2c:54:ca:b2:8e:a3:14:60:45:
71:97:5d:53:03:cf:1b:c2:39:fd:0d:6b:41:28:25:
90:1c:99:13:9a:65:39:38:69:ca:95:87:30:14:5b:
7e:8f:8c:b4:6b:3d:45:ed:75:f6:0a:86:64:ba:41:
f1:4f:0f:0b:69:27:68:ce:28:26:81:77:90:1d:ba:
70:21:ef:f1:aa:8f:f2:60:72:4c:4b:0b:be:8f:75:
6e:c2:b8:99:df:69:38:82:21:14:95:a7:d3:b4:d7:
4d:f3:17:fa:3e:18:db:0b:fd:ad:f5:f2:19:22:89:
df:01:4a:d7:b6:69:ae:4e:5d:d4:4e:e9:45:cc:06:
f4:7c:a9:5e:61:02:90:9b:cd:2a:45:8a:3b:9d:5d:
d2:2b:e9:5e:d2:9e:9f:d9:88:d1:06:96:86:95:a2:
e1:2f:d7:9c:ce:66:06:fa:d6:b8:6a:96:e7:b4:c4:
55:4e:01:84:19:c8:bf:56:ac:a7:13:87:37:d4:2a:
01:bf:59:b7:3f:bd:b2:74:f7:e6:9e:a1:95:2b:c9:
ed:af:85:75:38:df:0b:67:07:d6:9a:32:8b:81:1a:
f2:ff:f8:de:11:23:5c:28:3f:e6:7e:c7:45:50:d3:
7c:2e:32:74:a1:71:81:e6:3d:a1:f9:ac:3d:27:3c:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:B1:EC:A2:A9:9E:22:AA:E0:7A:F5:9A:98:DC:48:93:44:DC:1F
X509v3 Authority Key Identifier:
keyid:89:8D:F4:E1:15:14:BE:CC:47:2A:75:7E:03:6B:38:08:7D:01:65:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iY304RUUvsxHKnV-A2s4CH0BZe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dcbba6-19e0-45cd-b44d-3d33d374d01f/1/iY304RUUvsxHKnV-A2s4CH0BZe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dcbba6-19e0-45cd-b44d-3d33d374d01f/1/iY304RUUvsxHKnV-A2s4CH0BZe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7f:34:6f:e3:82:21:95:1b:a1:a2:71:38:b4:03:b8:21:d2:
32:d5:3e:ac:69:19:ee:ab:4a:f4:d4:db:5e:b1:4a:06:9a:49:
90:1c:63:44:36:6e:12:1f:c7:46:e3:ee:4d:02:f0:9c:09:20:
e0:fa:51:03:00:02:2f:29:0a:46:98:38:42:92:38:cc:fb:d1:
ca:e4:58:62:26:a8:33:66:15:85:54:1a:c1:cd:fc:bb:2d:9e:
f6:85:83:40:a5:0e:48:a5:a2:0d:37:b9:ff:b0:d3:0f:69:35:
9b:08:bd:10:76:7e:79:8b:e5:63:7b:70:00:cb:28:26:7e:1e:
d8:d4:9d:ce:70:1a:15:13:23:b5:b4:d8:36:99:9e:01:f0:59:
7e:1b:e0:a9:a5:80:91:b7:74:d4:b4:07:5d:95:f8:1b:fb:1a:
23:49:a4:38:6f:82:95:86:29:9d:70:ea:f4:e1:1a:0f:6d:31:
ad:bc:e9:9e:3a:c2:91:f1:c0:05:2a:26:11:3a:d2:fc:fd:ae:
0c:bc:29:68:d6:79:2d:1d:1a:4b:b2:ac:3f:f9:88:8d:c7:95:
c3:56:a2:01:57:4c:1d:55:65:97:af:1e:d0:58:93:2f:c1:40:
98:a3:98:ce:f7:55:39:2c:98:58:fa:a2:c4:e8:e4:82:53:ca:
97:ad:e2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:33 2025 by rpki-client