Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: 0fEhq9MXmcok8bVmK289VQtKwIM0W+urL6kkJvU3lQs=
Subject key identifier: 8A:1B:0B:33:3B:04:9B:41:CB:94:4C:27:FB:68:00:FB:ED:9E:45:16
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 0194BC3BD1DD47641DA403E6E047987F6740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0C93
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: EO6bhHURTQK194n419mhjfuC8ZlrlVxcRCnDUP59r4U=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:dd:47:64:1d:a4:03:e6:e0:47:98:7f:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=8a1b0b333b049b41cb944c27fb6800fbed9e4516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:6b:cb:46:68:70:55:c3:bd:e5:55:7e:c6:
f5:e6:05:76:35:05:6f:25:83:70:54:51:62:ba:d5:
21:1c:ec:d3:5a:a5:2a:19:3a:1d:51:cf:04:e6:25:
af:50:8e:cf:3a:7c:12:bb:89:2a:af:18:5d:41:d8:
c7:95:b0:0e:64:4c:e4:2b:b7:38:81:94:48:86:b9:
47:ff:d7:04:3a:ff:27:e3:6c:3d:c6:c2:e8:eb:c6:
ef:c4:dd:5e:93:f1:3e:81:d5:bb:be:8f:3b:18:7f:
1b:dc:7a:1d:d9:93:08:c6:c5:e1:d9:f0:39:02:6e:
be:49:27:7d:e7:3d:a0:ed:25:48:50:77:48:8c:f4:
58:18:1b:f2:0c:36:6b:6e:0c:5b:b3:36:6b:c6:ce:
c9:1c:ac:a2:3e:70:ef:9e:02:dc:90:9a:21:3f:87:
d6:59:8a:63:88:4b:b6:12:64:2f:67:6b:00:18:29:
73:c9:76:f3:5d:b1:86:59:ac:5b:e6:c9:c1:e8:ee:
c9:33:65:fb:3e:16:e7:59:39:6c:61:e0:81:26:17:
52:36:9d:be:fa:5d:9d:7a:ec:85:5a:01:6d:53:11:
de:d0:13:b3:f2:a1:b2:6a:30:50:a4:5e:29:4e:af:
a1:97:ba:19:69:4f:d3:0b:a8:b8:61:57:f5:52:de:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1B:0B:33:3B:04:9B:41:CB:94:4C:27:FB:68:00:FB:ED:9E:45:16
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3a:61:72:a7:e7:09:67:df:ba:4f:ee:32:72:d9:24:e1:3d:
03:9e:32:45:96:a2:2c:da:b7:e8:d0:ad:6a:cf:91:d8:79:93:
e9:d5:5e:64:32:4e:9d:42:ed:88:e1:43:56:05:37:cc:d8:c1:
03:20:56:60:8b:99:ba:42:6e:35:bd:05:3a:4a:8b:8e:78:ea:
20:f7:95:4d:07:b2:36:eb:1a:3c:a1:72:57:fb:f9:ad:f0:2a:
81:af:f3:45:bc:99:af:8d:e7:1b:29:9f:96:63:eb:4f:b0:23:
ee:e7:75:5b:e1:1f:9c:65:2a:c3:ae:67:dd:6a:ec:6b:94:5c:
02:07:42:70:aa:50:cf:78:02:aa:64:d3:b4:06:36:63:df:08:
d5:b5:38:2c:62:8a:b5:4d:84:7f:57:ea:00:48:63:7e:ca:64:
d9:70:8b:b1:24:fd:fb:d9:28:17:8a:a0:e4:4c:83:1c:18:6d:
eb:8d:ec:97:7f:a8:2b:e2:c8:52:70:47:38:14:0e:23:a6:f9:
60:49:1f:ff:c6:fd:50:88:33:b3:e8:24:53:52:b1:27:6f:76:
f7:6d:97:ff:3a:f3:54:c1:2b:97:6f:e5:3b:f9:4d:f6:ce:78:
9e:d8:d9:78:91:a0:62:98:2a:1f:56:b3:3b:92:e2:06:16:38:
aa:0e:85:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:07 2025 by rpki-client