Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: xK+ph+NyZmjwUb+u4/UNVmJ2NhY1f8mc7kqUYspnB20=
Subject key identifier: D0:84:43:96:4C:FD:4F:90:C7:1A:EC:B2:C4:F6:F4:0F:68:3A:ED:89
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 0194BC3C4B72681FEF2F3C54EC5609FB489B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: yMXoBOYAfITcZJh4wERzMR2vQnXLZNkB9Qc2SiNrBKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:72:68:1f:ef:2f:3c:54:ec:56:09:fb:48:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=d08443964cfd4f90c71aecb2c4f6f40f683aed89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:89:44:06:f6:51:0b:c5:d3:a6:eb:92:07:
f3:de:06:75:3b:34:82:ec:26:99:b3:c2:48:f5:b8:
59:37:f8:2d:58:bf:d5:50:0c:ef:db:cd:ea:07:aa:
84:28:4e:e0:fc:0a:ff:ed:ce:11:25:fc:96:cd:81:
f9:c4:65:55:84:4c:c7:f9:fb:a5:28:7d:d6:99:14:
b0:38:a1:2c:71:f7:8a:5d:b3:8f:e7:7b:dc:5e:0f:
eb:f0:c5:6b:e8:4d:df:24:e9:94:6a:7d:9e:64:44:
5d:d8:37:59:40:fe:5b:16:b5:95:54:70:20:5a:c4:
9f:aa:2e:09:06:3e:7a:6f:2f:d3:97:1d:54:e4:a8:
b7:6d:8a:21:a2:ce:60:46:d3:62:44:d0:a2:e6:80:
5e:39:18:b5:23:16:1a:dc:ac:8b:93:a0:05:1d:c5:
10:29:3c:72:1c:98:21:fc:35:c7:a9:95:ac:87:9d:
d1:56:35:20:f8:b1:e0:ad:3b:2b:fc:59:42:dd:11:
9d:ef:ab:94:2b:fc:94:9f:23:e6:7b:b8:fd:e5:1e:
df:e6:a8:11:9e:3a:a4:38:6e:3c:b8:eb:41:70:9d:
ad:25:c6:4f:54:4c:e5:09:1b:87:57:50:9a:9c:48:
7f:b0:4e:b1:85:17:44:14:ed:2e:26:13:4d:b4:09:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:43:96:4C:FD:4F:90:C7:1A:EC:B2:C4:F6:F4:0F:68:3A:ED:89
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2e:3c:f8:3a:a9:68:95:5e:58:75:89:71:04:2b:34:cf:f9:
86:38:6c:35:6c:ba:88:6f:2e:cb:a6:f9:34:a9:ce:38:df:1e:
75:24:31:71:28:e8:73:43:e0:bb:ca:a1:24:78:0b:b1:60:87:
3f:f3:91:07:a2:6b:78:83:b5:05:2b:17:dc:e5:61:d9:b5:18:
1b:af:ff:6c:a1:ac:b2:01:74:44:7f:e4:63:96:fc:59:ce:f5:
df:db:23:bd:5c:85:94:0c:89:74:fb:3f:f6:bf:38:55:98:c2:
7b:a7:b8:7c:17:14:d1:be:03:eb:93:cf:9a:ee:e3:67:53:11:
2b:6f:87:b2:c7:84:b7:ea:42:9b:13:6a:ab:68:52:7d:a5:af:
8c:89:37:d2:2d:eb:9b:56:c4:7c:13:04:e6:af:a2:3d:76:29:
dc:30:a5:d0:d4:36:03:8b:77:e1:21:a8:64:0f:ae:d9:1b:45:
ac:c6:ce:e7:d2:f3:b9:41:82:a7:c0:1e:7a:e8:b1:b7:a9:8c:
09:2d:62:55:9c:b0:b7:be:4c:91:91:73:02:09:71:b5:6c:df:
ff:9d:c5:8a:8b:82:e2:c7:75:9c:f2:12:5b:c0:44:35:ca:a0:
c9:2a:7e:44:3a:da:af:b5:e0:4d:a2:cd:19:d8:35:4f:41:e7:
9b:f4:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:54 2025 by rpki-client