Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: +xOW0AJLpS+nRlt1fSstF4oVlo4XDIeYMEU6KKxHVmA=
Subject key identifier: 40:6B:8F:EB:6F:12:81:74:EB:D9:F7:FA:4A:44:4E:B7:09:CA:9D:7C
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 0195E07DA5C06C7BE6EE39016491053AB776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 08CF
Signing time: Sat 29 Mar 2025 06:01:25 +0000
Manifest this update: Sat 29 Mar 2025 06:01:25 +0000
Manifest next update: Sun 30 Mar 2025 06:01:25 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: pWrz0fCviRTLDuSKowy6k3iCvui8AUaPSq6rQxLWYvY=)
2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:a5:c0:6c:7b:e6:ee:39:01:64:91:05:3a:b7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: Mar 29 06:01:25 2025 GMT
Not After : Mar 30 06:01:25 2025 GMT
Subject: CN=406b8feb6f128174ebd9f7fa4a444eb709ca9d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:34:c2:97:2f:d3:45:22:51:1f:6b:f0:6a:
e4:35:36:c6:0e:f0:ac:bf:73:0e:00:1e:65:02:8a:
4c:45:ae:cb:f2:02:28:79:33:b2:76:54:5c:3a:81:
86:96:dd:ff:d1:6d:fd:4a:08:49:3c:64:7e:a8:a7:
6e:f6:55:d8:fd:3d:26:6e:a8:67:58:34:62:8d:de:
ee:bf:ec:52:64:1b:39:9c:0a:84:bb:9a:6d:ec:60:
16:aa:19:4a:e2:b7:59:d0:f0:8f:a4:65:50:54:5f:
f6:37:a5:5f:a0:41:96:80:00:00:85:2e:81:27:ba:
ea:3a:c8:67:05:a4:ee:27:43:9f:61:d3:43:52:0e:
3f:cb:77:16:cb:8f:c6:89:c4:f3:bb:c4:87:83:16:
a1:65:3f:38:0f:88:ef:e1:15:40:c7:a8:05:79:d3:
01:0a:49:7b:23:2d:cb:a8:ed:93:8e:b2:f6:dc:9e:
9a:76:07:b9:3e:37:af:d1:33:bb:eb:b9:fa:50:0e:
b0:44:5d:8f:8f:5c:65:c9:48:7d:14:2e:b3:6c:91:
4c:ce:dc:90:af:c9:15:0b:fd:49:f8:f8:09:60:a9:
d7:c5:cd:d1:2e:96:a7:36:61:c8:fe:97:f4:b4:ef:
68:7c:41:23:ba:eb:fd:0f:86:ad:59:e5:3b:36:b2:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6B:8F:EB:6F:12:81:74:EB:D9:F7:FA:4A:44:4E:B7:09:CA:9D:7C
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:ef:02:78:80:1e:b3:28:42:59:25:1f:8d:66:e8:56:32:
b3:98:1d:f1:fd:97:0d:f7:83:6f:97:1e:5b:9d:c7:95:53:a3:
ab:cf:3c:fc:d7:49:60:58:c9:d3:d4:f6:72:13:55:3d:e8:18:
be:21:6f:84:90:05:a0:70:6c:45:ec:16:42:14:3b:5d:b3:50:
4e:6e:6c:eb:63:ed:cd:05:36:58:95:28:df:77:de:7d:96:d2:
a6:97:a3:30:83:bb:e4:ee:a8:ed:1e:6a:0d:76:84:0a:c1:e7:
40:89:bd:a1:1f:72:da:b8:bd:4b:0f:57:2b:33:04:ce:c1:71:
7f:ff:37:a9:af:0c:f3:54:26:e6:f4:fa:3f:be:b6:20:4d:87:
11:cd:5b:9d:9d:d8:8c:10:69:b4:a5:d7:3e:41:b9:3a:6d:44:
34:c4:70:d9:28:6d:30:48:29:76:e2:ad:02:18:88:85:7e:38:
b0:26:4a:d4:81:a8:96:1e:10:0a:f7:3a:bf:1b:bb:8a:9b:d0:
cd:46:3f:03:47:40:85:6a:d3:fd:04:20:af:71:4c:cb:fb:39:
ad:c5:7e:1d:36:15:73:a1:72:21:48:4b:60:be:b0:09:8c:c6:
8a:b8:e3:22:0c:3a:80:d5:16:3d:75:cd:17:9f:6b:35:b9:60:
86:74:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:31:18 2025 by rpki-client