Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: uKqV8EyCFx82gShP/1tPAurCUuvHViCxRkUPzD+LREA=
Subject key identifier: 70:1F:4E:F7:86:55:AF:15:56:8F:A2:9E:21:48:D1:38:DF:61:9A:DE
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 0194BC3BF60FEA83C430368712C6D7C39ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: C5
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: VeKplUS8AppZEEqcBUDlUiRNx5LZMM0EYl+LwNEtqs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f6:0f:ea:83:c4:30:36:87:12:c6:d7:c3:9e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=701f4ef78655af15568fa29e2148d138df619ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:33:f3:65:f1:96:3b:b9:0b:92:e0:42:ae:
4d:c7:70:bf:5c:03:45:c4:ce:33:e1:76:ee:04:cf:
72:57:e9:7b:06:ab:92:32:33:eb:6a:f4:a5:f8:85:
f7:25:ec:f6:80:e3:d9:0a:75:ef:69:1e:f0:70:90:
3a:46:9b:9e:61:29:e0:65:2a:f6:e4:af:7b:bb:37:
a8:48:35:3f:17:ff:53:d9:32:d3:af:60:a3:bc:2f:
cd:4a:b1:35:33:49:29:ca:6b:f8:b8:3e:18:04:a1:
58:5a:5f:06:78:d5:10:e7:41:51:5a:51:71:0d:b4:
af:63:57:61:5d:32:9d:dd:02:f5:d7:35:80:ef:a6:
99:0d:e6:3e:7e:32:9a:e2:b6:2b:cf:24:6d:02:f6:
bb:5c:c6:fb:94:87:08:5d:57:fc:8c:68:35:83:f1:
47:2c:2b:d4:c8:fd:ae:17:6b:47:b0:c9:6e:5d:3a:
57:7e:e8:4d:1b:cf:22:23:84:1c:e4:5d:9e:2e:e0:
b3:0d:31:dc:f2:47:88:e6:bc:ea:21:39:10:e5:3d:
c1:5f:59:49:24:2a:74:92:b3:25:38:c1:d5:d1:bf:
c6:20:7a:c8:b1:1e:80:36:8e:f8:82:e9:dc:c4:9e:
de:e0:89:58:95:20:d0:f7:03:d6:cc:08:86:47:a1:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:4E:F7:86:55:AF:15:56:8F:A2:9E:21:48:D1:38:DF:61:9A:DE
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:85:90:2a:25:63:d8:50:5d:1c:08:f0:80:33:2a:ca:1b:be:
06:a5:3b:df:4c:69:5e:12:c6:3c:4e:c3:9b:d3:95:b3:f5:a2:
63:d6:41:26:df:be:db:ca:4e:43:3a:6c:e9:e5:2e:58:ff:62:
e2:f5:bc:fb:ac:02:91:47:60:67:18:20:c5:bc:f6:d7:72:b2:
5c:fd:8a:3a:7a:dc:4d:b2:63:37:80:76:dc:ca:4c:9d:50:35:
aa:d8:a4:e6:46:65:85:54:75:9b:b4:6f:f5:76:22:b0:56:55:
88:a6:bd:3b:f6:6b:e7:c5:40:c2:d5:67:14:a3:0c:e2:32:c4:
91:f4:b3:92:00:9c:1f:d2:92:d6:b0:dd:e9:64:fd:5a:bd:4a:
dd:82:29:2d:cd:71:4c:a9:7b:c9:57:7f:63:05:7a:7f:9d:7e:
a2:57:23:39:d8:6c:d5:88:db:3e:01:a1:f3:60:91:8f:a1:7e:
52:42:b1:fb:08:fa:a6:96:1f:17:98:1e:75:7b:a8:c7:54:d5:
22:1f:fc:03:1b:4b:20:fc:1c:37:8d:b2:f1:8b:5e:ba:22:49:
d2:c8:90:9f:a5:99:7a:80:6b:60:31:cc:30:76:ee:11:1a:e7:
bc:4c:18:e4:1b:71:ef:9d:ab:01:24:d2:47:0d:1b:a8:b8:d2:
d8:4c:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:58 2025 by rpki-client