Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: 0u0vUDQE8j/qRsw4wMtrRx381+auvORp3wNV4SUNzvw=
Subject key identifier: 04:19:E6:ED:48:C7:09:23:9A:20:43:82:04:0C:6E:A6:36:CF:A4:69
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 0194BC3BF9647852EA087BB88ECCB5A08FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: jkXuOwB8qmLJkGLxO4KPVP7qN1GjJOc6C3iTDOoZ2Js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:64:78:52:ea:08:7b:b8:8e:cc:b5:a0:8f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=0419e6ed48c709239a204382040c6ea636cfa469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:f4:42:05:40:0e:60:06:e8:3e:0e:a2:00:
99:2f:ea:63:0a:51:88:5f:6b:61:f0:87:76:4e:e7:
df:3c:f4:92:5e:b4:a1:56:0f:b4:89:6c:69:e7:ad:
f8:84:a5:26:df:9c:73:0f:f8:61:50:3b:fe:b2:6e:
6f:89:f4:c0:17:f1:cc:ff:08:60:44:4f:72:77:36:
14:70:fb:7f:38:51:19:ba:08:c3:17:08:ce:9a:fc:
2a:4c:df:4d:6a:3f:97:d8:08:20:50:d9:ab:a7:da:
48:fe:ce:dc:01:12:d1:a5:ac:e5:b9:69:94:81:25:
91:61:61:3b:b0:00:75:da:67:ff:58:a6:83:0b:9b:
7a:62:4a:95:a5:71:8c:ed:fc:59:c9:38:73:4b:72:
11:9a:67:c2:77:5a:b4:f9:d1:b4:e4:20:a2:26:9a:
d2:3c:24:ca:92:30:31:2a:03:31:4a:64:1d:10:cb:
20:98:25:64:e3:0e:d3:44:22:b9:c0:0f:6b:bf:08:
70:4e:16:c7:6b:60:6d:e8:19:53:63:90:34:00:8b:
0f:83:ce:0d:90:89:ec:14:9d:46:bc:d3:78:90:f6:
8d:2f:e8:af:8c:18:b6:b2:e4:61:4a:73:b4:d3:46:
df:76:60:a4:59:09:dc:2d:61:0f:d2:1a:c2:14:52:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:E6:ED:48:C7:09:23:9A:20:43:82:04:0C:6E:A6:36:CF:A4:69
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9b:1e:d8:c3:bf:28:2e:a8:22:20:38:97:bf:e6:56:93:de:
78:04:20:c6:2e:f6:3d:41:6b:0f:1e:ea:03:ce:04:39:80:0d:
e8:9d:47:35:a2:41:6e:b4:dc:20:12:3c:23:4e:b2:f7:f8:33:
2b:5e:d4:3e:f9:42:a8:a0:ac:37:96:69:f9:64:96:56:34:b1:
7e:a3:5e:33:eb:2c:cc:4c:79:06:7e:eb:1e:3a:ec:a0:e5:07:
a9:1a:c4:ee:35:47:b9:b0:12:ca:90:9e:4e:0d:0f:44:9d:ea:
16:ca:78:93:d4:49:11:a9:1e:f7:21:0d:c0:e8:e0:6f:16:c8:
47:2c:18:62:87:7a:95:f0:97:c6:8e:fe:2d:3a:5d:6e:26:6e:
9f:92:f3:84:2d:b7:fa:2b:77:a1:40:18:52:7b:21:f4:95:bc:
3f:8c:a0:f6:85:03:1f:80:62:37:85:5e:d0:79:c9:9b:a0:a5:
3c:02:a9:5a:51:d6:af:b7:46:9c:e4:2f:d4:75:25:2a:41:ad:
20:e3:b4:45:d2:ff:be:02:41:52:d1:7f:79:14:e3:35:29:8b:
a0:6d:1b:02:2d:3b:7b:99:ac:dd:c1:1d:b4:51:02:3d:d2:fd:
2a:43:c9:38:01:0f:4d:32:f1:92:79:c7:d7:3c:bc:ec:8f:fa:
b8:6e:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:29 2025 by rpki-client