Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: 0MiEtYRJd4XkFOIkCG6OK7X/zFW6fHCpSv8XYcMF8A4=
Subject key identifier: 99:C8:34:6E:A2:5B:3A:CB:1E:0A:6E:47:0B:D1:E5:1D:6F:75:B6:32
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 0195E121E6F4C58EF54BD24BF94216844B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 14C7
Signing time: Sat 29 Mar 2025 09:00:50 +0000
Manifest this update: Sat 29 Mar 2025 09:00:50 +0000
Manifest next update: Sun 30 Mar 2025 09:00:50 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: nT1ADhUJOg5qvqa6ARWdo6N08LYM+J9K1dmhACXAp+M=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:21:e6:f4:c5:8e:f5:4b:d2:4b:f9:42:16:84:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Mar 29 09:00:50 2025 GMT
Not After : Mar 30 09:00:50 2025 GMT
Subject: CN=99c8346ea25b3acb1e0a6e470bd1e51d6f75b632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:f3:f0:10:88:71:47:28:04:7b:58:81:4f:
df:fa:a7:65:f9:09:46:6a:7b:e6:cd:ce:ac:95:2c:
95:d3:bd:d1:6a:ed:15:ae:5f:85:57:a5:14:de:2e:
51:97:b7:e8:78:0a:b1:ea:cf:3b:5a:81:6b:c1:20:
87:b3:b2:17:bd:41:89:dc:f6:e8:33:42:94:d0:4c:
b5:46:8c:d2:24:dd:dd:2d:1f:70:68:4e:4e:e5:13:
f7:be:3c:1d:08:39:ca:18:5e:32:07:56:aa:3c:99:
c5:4c:26:f3:5d:4b:4f:48:fa:af:6b:44:d1:02:27:
d8:9f:bb:8b:e4:df:33:00:e6:06:e5:6f:18:5a:e6:
8a:f8:66:b6:b1:fe:63:99:48:3a:cd:c5:5a:88:ef:
1a:a4:de:31:b0:ed:ad:14:8d:e0:b6:f8:34:aa:d0:
4b:c5:bf:e2:33:84:0c:37:0b:b6:7b:84:fe:e5:cd:
96:ee:48:0d:3d:a1:97:30:eb:f1:49:3b:fa:f9:8f:
31:66:13:aa:e8:bb:2e:c3:57:ee:f7:f9:63:e1:9c:
f0:bc:4e:a1:1c:31:6e:b9:c0:bd:6d:75:36:3c:d5:
09:4a:42:36:45:de:3f:a0:6f:d5:fb:f6:d1:f7:a7:
6c:5c:03:40:08:8f:0e:6e:07:44:b8:ad:65:17:6e:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:34:6E:A2:5B:3A:CB:1E:0A:6E:47:0B:D1:E5:1D:6F:75:B6:32
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8d:7d:45:89:90:7e:4f:ba:d8:d5:a0:0b:ee:59:0e:1e:bc:
97:f3:b8:2b:b2:f9:54:c7:a7:42:0c:27:a6:e7:39:06:4b:89:
19:f4:d1:fd:f8:83:36:be:f6:ed:22:aa:35:d1:27:b5:88:ee:
b1:38:62:1d:18:f6:47:58:42:b2:c5:e4:f1:af:56:78:87:49:
e6:61:df:cf:c9:90:c2:9a:09:20:97:52:5f:e1:d8:16:f6:1b:
71:57:dc:b0:0d:fe:2e:fd:10:c6:67:2a:38:5e:5a:8d:40:e6:
cd:00:f3:7e:3c:cd:9d:29:76:73:76:39:30:78:0b:7a:b7:a4:
97:73:4a:a6:4b:c2:39:a2:09:41:d0:0f:32:a7:dd:21:c8:e6:
df:f7:f2:bc:a7:3c:cd:65:2f:09:70:1b:bb:f6:ba:52:c7:6c:
92:57:8d:f3:55:76:f3:fc:36:c3:7c:fb:06:ed:cd:b7:77:7f:
a6:38:8f:ed:b8:dd:26:3a:77:8e:49:a0:9c:f7:f5:56:99:58:
54:e6:78:ad:48:2b:87:02:0a:e1:36:14:4b:ca:4f:9e:51:4b:
6c:c0:4d:e2:d6:f0:79:fe:8a:bc:0b:2f:63:af:bc:69:7c:d0:
03:cc:48:da:d6:ce:04:15:ac:e2:9e:5f:19:ba:36:b8:f6:21:
d5:a5:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:32:47 2025 by rpki-client