Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
File: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft (raw, json)
Hash identifier: SG1WndAAtX2e95bQZVR4O3ZTQ7M+y1fm3jqLioTU9hg=
Subject key identifier: 7A:A7:FE:9A:84:60:5D:75:AA:45:C7:24:B0:66:52:C7:E3:02:E7:CE
Authority key identifier: 88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
Certificate issuer: /CN=88727fad5b5c06852e1dafa071ce4767a799e050
Certificate serial: 0194BD4E6894F6C190ACF9CD3702F3CB4E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl (hash: IwUyrrFCxTwElI3AVCSs0hM5rUB47/LsWB8jfYqX97s=)
2: y26WpZEldCdiwpqodYBCZ3hzMbM.roa (hash: Q1+h8XgN41jDqcPqF4sdoSdNWkaGt5GnKBqYH1YkYlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:94:f6:c1:90:ac:f9:cd:37:02:f3:cb:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88727fad5b5c06852e1dafa071ce4767a799e050
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=7aa7fe9a84605d75aa45c724b06652c7e302e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:b2:af:59:5c:8d:9f:04:e7:90:1f:74:a1:
b4:5b:4a:86:31:29:f1:a8:07:b9:7c:db:e1:49:4c:
54:64:6f:98:cb:78:00:6a:12:60:4f:d9:d5:e9:c1:
4a:ab:69:b4:d5:9b:4f:24:44:bf:8f:26:ec:6c:5a:
09:9d:34:21:72:08:2a:90:02:d6:d6:24:20:6b:0d:
05:43:b8:8b:ea:22:9f:3a:6a:0e:58:80:6d:cf:a6:
96:65:ea:11:40:97:cd:43:75:cc:66:11:8c:57:56:
1e:cf:db:40:1d:af:30:15:6c:0d:03:06:e6:79:94:
cf:32:14:26:51:a7:42:10:38:b4:2d:35:e0:1f:5c:
7c:81:eb:06:00:97:76:0b:e9:e9:19:1a:5b:7b:19:
e3:18:86:36:25:d9:a0:02:cb:67:18:bd:bb:57:93:
50:ef:51:62:de:ae:5e:3f:0d:dd:73:e2:b0:02:73:
94:f7:27:c1:2f:c5:b2:e5:03:7e:b5:d1:15:99:1d:
fe:18:ea:87:9c:95:2e:74:65:60:b6:d3:49:4f:45:
1a:b0:b7:1c:e1:1b:6c:7b:cd:b6:f2:81:c8:54:e3:
21:5b:c1:2b:5a:77:5c:21:4f:c4:3e:4d:29:3b:12:
59:70:69:0b:ff:0f:75:57:4d:a2:06:0f:34:e8:89:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A7:FE:9A:84:60:5D:75:AA:45:C7:24:B0:66:52:C7:E3:02:E7:CE
X509v3 Authority Key Identifier:
keyid:88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fe:a1:42:5c:3f:49:f1:79:03:f3:53:e6:a6:2f:b5:56:dc:
98:26:3c:18:f4:a6:31:76:c1:98:11:e8:9f:82:ee:73:f5:77:
25:17:2b:83:49:b0:00:72:85:73:6e:0a:b9:93:c1:df:22:9f:
b6:0d:c5:44:2a:42:2b:8b:4b:ae:c1:27:09:ba:35:a2:90:77:
80:b4:b9:5b:23:16:3e:1e:32:69:ec:84:99:18:7c:05:3b:d0:
a5:d7:f3:94:c5:53:e4:46:4f:12:74:00:cd:9c:f1:24:41:1c:
9e:46:2e:99:3a:73:f6:08:9c:c7:e7:cb:23:7b:b7:ee:69:de:
b1:9e:76:02:8d:dc:8d:94:00:1a:b6:4a:54:d7:75:c0:2c:9e:
2d:d0:83:b3:96:9a:8b:fa:e4:09:35:0f:1c:ba:02:b8:d6:64:
42:f7:22:5d:37:fd:23:31:ab:db:0f:dd:9f:d9:b1:b0:23:d3:
b8:07:28:59:30:c3:1a:f4:f0:56:b2:3a:b2:87:65:9f:66:99:
e3:ec:6e:80:7b:ac:bd:27:ab:64:69:dd:38:08:9d:28:11:e6:
0f:9e:4b:a3:d3:9e:7d:36:91:80:ee:aa:8b:ab:43:89:e7:4a:
3b:53:ad:15:e2:74:ff:58:f4:5f:73:fb:8e:68:97:92:ca:92:
96:cf:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:17:36 2025 by rpki-client