Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
File: imcGszlg4dFf0XcKKY4KVVpBqAk.mft (raw, json)
Hash identifier: ROAieLKLPG3oWdROv2nL+WCaeOMp+FxFo+nA49vRdrI=
Subject key identifier: A5:4E:E0:C7:3F:03:3C:9C:AB:02:B6:CB:D0:51:4C:A0:F9:D1:32:78
Authority key identifier: 8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
Certificate issuer: /CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Certificate serial: 01934715EFCF3236A52F12F42EBC5EE20960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
Manifest number: 136A
Signing time: Wed 20 Nov 2024 01:00:40 +0000
Manifest this update: Wed 20 Nov 2024 01:00:40 +0000
Manifest next update: Thu 21 Nov 2024 01:00:40 +0000
Files and hashes: 1: bAttX97RzMOQ1qZ4HNmPUlpQfng.roa (hash: YLRYjqt74FnjIduetj4BOJ/FB85gxZ+gkeFk/pa5oN0=)
2: imcGszlg4dFf0XcKKY4KVVpBqAk.crl (hash: UMFdYP0ONHXDZQuvr9ntsjYAZ8sgpvr/AQYAnXAyo8g=)
3: wzni65xEvs8kN0nfJW4ufeW5IzY.roa (hash: Px/XjVWCTyQqtwE/6XTDh7kpdoG4oYdOrz9Fyz3Z/ns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:15:ef:cf:32:36:a5:2f:12:f4:2e:bc:5e:e2:09:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Validity
Not Before: Nov 20 01:00:40 2024 GMT
Not After : Nov 21 01:00:40 2024 GMT
Subject: CN=a54ee0c73f033c9cab02b6cbd0514ca0f9d13278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:5d:54:34:ef:88:ea:b1:bb:a0:60:1b:ca:
99:f1:a3:ca:bd:89:fb:ca:5d:57:7d:ab:ae:b1:38:
23:55:45:92:3e:03:fe:1d:11:96:f1:87:e9:df:c5:
38:54:e8:6f:dd:d4:fe:04:2a:4c:62:1b:80:50:64:
3b:5f:c8:4c:57:5e:0c:ad:38:e2:05:9d:6d:c7:68:
81:3a:94:59:01:4f:c8:3e:c5:8d:d2:67:1c:6c:29:
a0:d8:b7:58:7c:60:a1:1a:34:e0:31:97:8d:02:cb:
24:41:ce:ad:fd:4f:59:b4:fc:c5:75:47:73:a8:74:
15:ff:7c:25:d9:d6:2e:0e:fc:6c:e1:88:89:12:d1:
d4:3b:8c:dd:69:61:32:16:2d:05:6c:a2:11:b7:9c:
ab:12:dc:ca:53:56:ba:4a:65:89:ea:4f:af:9c:05:
ba:9a:99:80:e3:65:80:9b:19:13:87:9e:4b:a0:d1:
81:ad:40:89:3d:ca:fb:11:9c:c6:48:97:cf:76:80:
b5:5d:1d:d9:0f:e4:24:69:ae:e9:85:de:96:99:b2:
94:85:7d:d7:ea:5a:97:45:5b:da:0a:bb:46:fa:ef:
0e:23:56:0a:db:bd:2f:41:c4:b1:d2:8b:33:dc:a6:
d9:ba:bf:d5:e6:26:41:88:ca:e7:12:3f:bb:9b:2b:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4E:E0:C7:3F:03:3C:9C:AB:02:B6:CB:D0:51:4C:A0:F9:D1:32:78
X509v3 Authority Key Identifier:
keyid:8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5a:96:be:ef:26:29:99:d9:80:67:3b:40:19:d9:a7:56:74:
60:2a:ec:22:af:b9:f1:a5:3e:25:9d:a8:4f:45:4d:ca:dc:72:
97:6b:ef:c1:1a:82:72:75:21:74:66:3d:6d:ac:e9:c4:1f:96:
ca:16:e9:31:b1:18:18:2f:30:11:f6:f9:0b:d6:77:f7:fa:09:
0d:a4:e6:0f:3f:64:46:0e:aa:11:4c:18:87:92:d0:7c:c4:31:
05:b5:8b:01:97:c1:0b:7c:03:3b:02:06:e6:d0:49:95:9e:d2:
8f:49:70:e6:71:fe:a8:83:02:da:08:2b:24:8f:4c:10:71:7c:
70:93:d3:0e:7e:55:fe:c0:55:26:47:8c:98:4b:85:6a:ac:8e:
c0:9c:18:a5:f5:03:bd:d0:d1:6e:eb:92:4a:6d:4d:25:d9:9c:
58:8f:24:b2:d2:ae:3a:c3:5b:d9:8c:74:61:64:56:19:86:47:
8a:38:0e:8e:fa:21:64:cf:77:5f:9f:2d:2e:25:43:e2:04:21:
f4:52:21:21:68:e6:75:98:20:a5:7d:c7:0e:c3:89:2a:68:46:
04:53:13:75:e6:e0:a4:06:aa:32:3c:cd:96:db:2b:40:b9:f0:
a6:2d:aa:fe:f7:e1:97:68:89:23:db:b9:40:4b:59:46:ee:5d:
b2:ab:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:32:03 2025 by rpki-client