Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: RWB29C7d6kMsONNPxAg9oOXdM+8BpGu02/2ZFfPGa4c=
Subject key identifier: 4A:CB:9E:CB:75:6D:38:9B:78:FA:6F:93:C8:73:1C:06:7D:04:0B:32
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 0194BCE093B189580F6CCC219D9D772CC040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: 1-vGsC17KAMvj9iPw5hzyT1K2O7M.roa (hash: crWYlz6And/WjwsRxsjTMdzzQyIY3MAqueK9xPOwRVQ=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: u0vy9fvLe5Mv0FFlGNrjcXLBw/B3D0EiH9bZYn5DLLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:b1:89:58:0f:6c:cc:21:9d:9d:77:2c:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=4acb9ecb756d389b78fa6f93c8731c067d040b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:bd:de:72:ff:9e:0a:64:a9:f1:46:99:3b:
cd:a6:cf:d7:0c:0a:f8:e1:46:78:6b:64:29:de:51:
a9:25:c1:a7:a5:58:98:11:59:73:0d:17:12:da:d8:
4b:6d:38:cc:b9:ed:28:6a:c3:c5:79:39:1a:e1:51:
d0:93:62:62:14:7a:63:58:ad:13:27:72:cc:36:91:
7d:29:cf:db:56:28:6d:21:61:92:c1:88:79:f4:e2:
34:49:77:f6:c5:21:c0:f0:41:b7:48:df:40:20:6c:
85:56:4f:22:be:cc:68:c2:74:ea:72:43:82:42:e9:
2c:2c:d6:58:95:7b:cc:ee:cf:93:b4:7f:a3:78:d6:
b8:44:18:17:c5:f3:3b:a2:d2:25:85:9e:74:ff:d3:
37:21:fb:23:76:9f:f3:e2:8a:d4:20:c5:df:37:28:
47:82:c1:d3:c6:d7:a1:b2:0c:1c:77:1e:62:f1:c3:
51:f3:ee:07:72:97:26:a7:05:5e:51:e8:52:b6:b6:
ea:1e:ff:24:f7:57:df:f9:87:88:73:64:0a:57:d1:
9e:a3:ff:14:75:32:33:0d:42:40:20:dd:bc:61:65:
5e:d7:06:0c:50:dd:6d:ef:b5:03:b8:1a:ac:55:a7:
f8:88:3c:e2:49:92:50:31:78:65:f6:45:a6:4b:ce:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CB:9E:CB:75:6D:38:9B:78:FA:6F:93:C8:73:1C:06:7D:04:0B:32
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:91:cd:38:fa:16:6e:66:ec:3e:b7:5f:26:5a:aa:68:58:
5f:d5:ee:10:04:fc:7e:73:ad:86:9a:aa:3b:87:a6:1c:d7:8d:
38:21:50:3b:c0:33:3b:87:1c:fb:1e:f3:83:28:b5:57:0c:06:
d5:2e:5a:c2:75:72:fc:0f:5c:e7:3e:ef:b6:d2:d3:0c:6d:ca:
b5:96:2d:de:be:dd:36:1d:08:f6:41:9d:02:f7:7f:bb:29:b4:
86:29:00:86:73:e2:e0:c8:93:d0:02:45:08:cf:fc:e8:f2:30:
41:a3:92:af:19:d7:a6:5c:77:a1:89:6a:c7:94:cc:4a:a0:90:
aa:fa:74:bd:2b:96:fa:06:d0:c2:8c:7a:45:c1:14:8f:1b:07:
ea:6e:ea:09:42:08:a1:d8:ce:4d:7a:c6:b5:38:75:11:1b:90:
3c:18:c1:7c:6e:e8:0a:36:52:be:c4:76:38:43:91:82:91:a5:
b0:4a:90:d5:7b:bb:52:35:7d:6f:cc:28:30:e8:ba:03:b8:04:
a4:65:3a:2e:f0:a6:9d:f1:23:1d:ef:15:f1:69:ca:da:4e:33:
3c:35:9c:41:be:0f:44:66:03:d2:6a:2b:6e:5e:08:a3:cd:91:
6a:75:31:48:31:12:a8:f7:c4:6f:25:7f:7d:2d:2d:47:e8:98:
79:87:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:00:38 2025 by rpki-client