Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: 6vNKe2k0DIFDxMOw1JlIUuLhvAmBf13TKNS+e/Y2K80=
Subject key identifier: 19:8C:29:0E:26:BA:6A:BA:06:19:B9:8B:31:6C:2A:F4:56:7A:5D:57
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 0195E07D9946F91298FAF2F7D93DC3EC8F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 0645
Signing time: Sat 29 Mar 2025 06:01:22 +0000
Manifest this update: Sat 29 Mar 2025 06:01:22 +0000
Manifest next update: Sun 30 Mar 2025 06:01:22 +0000
Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: xHff9MYB41RDcE6wc8fl3Glt56y15GdzbFKNTxxwc+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:99:46:f9:12:98:fa:f2:f7:d9:3d:c3:ec:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Mar 29 06:01:22 2025 GMT
Not After : Mar 30 06:01:22 2025 GMT
Subject: CN=198c290e26ba6aba0619b98b316c2af4567a5d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:22:5a:d9:4c:06:4f:61:9f:98:4f:8e:9e:
c6:ab:c8:21:53:fd:86:50:9b:18:83:3a:d7:26:f9:
e1:65:5d:c6:26:4b:9f:a2:01:61:30:be:63:73:4b:
ec:be:fd:e7:39:9e:0c:ae:63:6a:05:f0:5c:e8:48:
59:42:61:96:50:82:b8:48:0f:98:8f:0c:db:4c:33:
42:c1:c9:e1:14:eb:93:eb:83:7a:c6:d1:db:b7:86:
a0:63:91:8f:79:d2:d2:64:3b:29:77:8e:10:05:7a:
f0:f2:7c:8f:26:dd:5e:90:ac:ba:5c:34:da:8e:41:
ff:3c:7f:cb:a3:08:82:89:43:d5:b0:fd:b5:73:32:
91:6a:a3:8f:68:4d:d0:28:97:43:7a:a7:d8:31:05:
30:91:7a:d1:00:62:b4:82:79:af:a8:67:d6:5d:36:
5c:45:8f:7c:0e:9a:cd:67:ff:b0:64:6b:2c:a7:4a:
06:39:d5:5a:21:ef:f7:fc:99:17:d9:2d:c9:02:6f:
6a:96:9a:b0:43:1a:61:64:f1:0b:2c:7c:0c:46:49:
af:9c:90:2c:8d:fa:e2:bd:53:20:78:aa:d3:70:0a:
24:77:e6:37:ad:fe:e1:c8:e8:2a:83:b6:4f:f3:2d:
fc:f7:3e:7e:7b:c0:2c:27:ac:bd:b2:ea:f5:a4:e3:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:29:0E:26:BA:6A:BA:06:19:B9:8B:31:6C:2A:F4:56:7A:5D:57
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8c:dd:78:54:05:e2:41:6e:31:36:54:21:56:12:0c:bc:d1:
ff:29:4a:58:d7:65:36:5f:20:a1:ed:5c:65:b0:89:07:1c:69:
64:c5:b2:a5:05:3d:d6:c7:1b:91:25:f6:5f:ad:46:89:9c:91:
5c:f8:44:8c:f9:b3:99:b1:01:09:2a:65:b8:fa:a7:46:28:e7:
f5:72:69:41:4a:a3:98:28:0b:fc:b4:a4:12:f3:1d:45:c6:2d:
73:ca:98:a4:f1:e1:df:ec:6d:75:fd:db:11:3f:bf:10:4a:21:
11:57:b7:14:29:7a:aa:d0:08:e4:f6:0f:49:f0:50:b5:43:bd:
7f:d1:24:c9:4c:e7:90:fe:90:4c:1c:36:43:e2:f5:a4:92:94:
b9:02:8a:4a:b9:f4:b6:02:3d:63:d8:22:75:13:08:11:35:0e:
b1:f0:3f:0f:c8:ab:c0:81:da:dd:fc:b6:68:eb:e2:63:01:fe:
6f:13:af:49:e9:9b:1e:01:26:18:c1:26:2d:66:5e:38:01:d4:
b3:43:44:a2:7d:dd:20:6e:e1:35:05:d6:61:9d:28:21:dd:ff:
26:ef:bf:ab:ec:c9:36:bd:78:76:3c:e8:a3:2c:9f:4f:ab:4c:
d6:ed:ba:a6:b4:26:9b:0d:26:66:9c:66:c3:88:38:83:6a:ae:
bf:8c:a0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:01:43 2025 by rpki-client