Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File: 1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier: ONIXXQ0p132K4mBr4TS1FKnd4IQSQuG+V1zH6wKMaDo=
Subject key identifier: 03:75:29:DB:9B:A5:26:D0:D9:05:CC:73:E0:97:CE:03:DD:46:70:22
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer: /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial: 0195E1222312C19FBD7DA5C17687EFBCDC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 09:01:05 +0000
Manifest this update: Sat 29 Mar 2025 09:01:05 +0000
Manifest next update: Sun 30 Mar 2025 09:01:05 +0000
Files and hashes: 1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: 00gEFE6efz4Tmv+JrcBEhyKW22ev/yQ5aY31EqcB1ts=)
2: 65gUyds3oCUaNZo7VomV4lVYduk.roa (hash: 8+W1K2P2HsFJ7cNqOL/cIv584zWJzkLDjqA3phgWH8k=)
3: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (hash: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=)
4: u_9bExtD3dKmpG7MbV9XCNNSbhc.roa (hash: A6Ah4cscvQSZmmj47ZDhKi6/GjDHBt3LAd3FqHRi8Dg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:23:12:c1:9f:bd:7d:a5:c1:76:87:ef:bc:dc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Validity
Not Before: Mar 29 09:01:05 2025 GMT
Not After : Mar 30 09:01:05 2025 GMT
Subject: CN=037529db9ba526d0d905cc73e097ce03dd467022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:2c:32:8e:4a:0c:e6:c8:56:f7:81:2b:de:
b5:06:d0:77:64:56:14:bb:4d:c4:4a:83:de:79:9f:
0c:30:0d:72:39:73:fd:23:cf:1a:69:62:cf:fd:d3:
d2:27:71:58:94:23:b8:0f:51:ba:f3:86:3a:fb:ad:
ef:29:5d:9a:48:f0:20:e1:71:53:33:fa:b0:b9:ac:
ea:1a:be:ad:9e:10:05:9d:b5:94:5b:91:96:28:73:
3f:70:ce:c0:ab:2d:3a:48:97:de:81:09:53:2c:f5:
37:29:9d:4a:6e:5e:b8:24:d4:ff:72:72:95:59:96:
23:e6:bc:91:e1:2d:7d:7a:5d:47:15:6d:99:de:c9:
45:55:fa:8c:fb:da:50:3d:ef:41:ee:55:b4:56:62:
8a:3c:b0:90:df:58:7d:63:a6:f4:45:64:79:2e:bc:
2d:05:b7:be:2b:cb:ce:e0:ef:30:b6:7b:05:77:45:
62:b6:24:02:41:63:1a:8a:7b:ac:cc:25:38:e7:fc:
2a:3e:6a:d0:69:d4:a2:05:fe:4e:2f:6c:3f:53:98:
ef:dc:17:ff:3d:56:57:12:2c:a0:06:76:0c:4f:f0:
4e:a7:e3:96:2b:b3:fd:f3:50:8b:35:32:9b:87:bf:
44:13:1a:69:6c:c2:7d:e2:5f:31:65:2a:9a:03:83:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:29:DB:9B:A5:26:D0:D9:05:CC:73:E0:97:CE:03:DD:46:70:22
X509v3 Authority Key Identifier:
keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9b:93:5a:1d:e7:0c:78:6c:f2:ed:3c:8d:e5:66:3f:1d:90:
ad:7a:76:96:b7:b5:92:12:a3:e6:0b:97:e9:02:5e:77:79:a7:
2c:60:cb:8a:4b:8b:7f:5b:1f:d2:7f:44:ec:dc:75:57:a4:e1:
05:89:23:a2:f2:2a:43:7a:66:2e:b7:fd:9d:7c:4d:30:2b:b9:
4a:9c:e8:4f:8e:39:43:ca:11:ba:47:82:73:8d:d1:e8:6a:2b:
d8:61:45:72:9f:cf:b0:68:9b:cf:a0:ff:59:fc:03:e7:ed:f6:
dc:62:7f:e0:80:74:4f:55:e5:f9:9f:40:09:39:c6:51:6c:af:
07:5d:67:4a:2f:aa:8f:55:c2:d1:a9:b8:a9:67:35:9d:99:8c:
5c:71:7f:7d:9e:ca:41:44:e6:0e:e0:08:26:96:56:00:e8:08:
6b:a9:2f:88:f4:c0:ce:59:f2:28:2b:ab:22:b6:b5:35:da:ef:
e1:a9:e2:49:7e:cb:d3:d1:48:99:10:ad:76:7a:5c:93:6d:45:
5b:26:e4:ce:46:fe:e7:76:7f:bb:2a:71:91:bb:00:f7:1e:9e:
2a:34:19:c3:c5:ba:80:15:a1:2c:c3:5e:7f:2e:f1:cf:67:49:
cd:55:ec:b4:e0:41:b3:de:4d:ad:51:2b:87:41:21:42:89:81:
26:f8:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:39 2025 by rpki-client