Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: HBTsiM00YOeRJ7o/demOS/mAun/pp+j+UwtZc4XUKm4=
Subject key identifier: D1:B6:27:07:15:B5:20:72:31:B6:87:BD:FB:81:9E:4C:EA:C7:17:A8
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0194BC3C4C42FC418B4FCB025B036EE2DF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 08DF
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: Rfn5KGmg19Z0F8wKmvMWtTsq2anuW81aR5PINADeaZY=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:42:fc:41:8b:4f:cb:02:5b:03:6e:e2:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=d1b6270715b5207231b687bdfb819e4ceac717a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:e9:55:45:09:f1:30:d2:b3:5f:f8:b1:e0:
38:b1:0f:a6:2d:39:1e:cc:39:e8:0a:77:13:e1:7c:
84:2f:41:45:92:b2:e8:81:98:f1:0e:1b:66:4d:9d:
dc:fe:fa:a7:90:6a:c7:67:5b:ca:be:97:1a:5f:6c:
29:2c:dc:fc:08:70:62:52:65:71:76:41:18:a7:cb:
dd:15:1d:f5:5e:95:b5:2f:76:a1:5b:60:9a:46:88:
7b:94:fa:66:c5:fe:7d:2f:44:c5:46:57:eb:48:e4:
9f:4c:8c:82:3b:37:95:bd:8c:38:0f:15:b5:12:c9:
bb:ae:61:28:cf:23:91:53:4b:8f:d6:40:9b:0f:b4:
80:69:af:fb:35:f8:9b:a2:04:6a:79:2d:7c:59:49:
50:e2:31:f8:43:88:bf:8a:2a:05:5c:49:b4:ca:5d:
7f:30:5e:0b:59:de:89:e9:3c:d7:4f:ad:d8:f9:4b:
be:62:e1:5d:5f:3e:08:ac:f9:11:a3:99:21:d3:c6:
f2:e9:f6:4c:54:46:77:9b:d0:1d:83:49:24:c2:79:
ab:ee:8a:db:ca:89:2c:9b:a3:e0:c7:94:f2:e0:55:
5c:dd:8b:de:d6:60:6d:97:c2:a6:a0:24:c3:8e:1f:
f0:be:e3:6c:3a:73:d0:9f:9c:0d:48:ea:64:bb:29:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B6:27:07:15:B5:20:72:31:B6:87:BD:FB:81:9E:4C:EA:C7:17:A8
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:44:ff:36:c7:35:6a:1b:46:f9:04:af:18:60:d7:5d:38:55:
f9:db:8c:02:46:d2:5b:a8:ef:d7:36:bf:58:ca:22:96:d6:93:
95:d1:f0:ff:b3:cc:2a:8f:ae:49:69:39:5d:9f:1e:94:35:bf:
70:ca:5b:1c:fb:6d:5b:bf:07:59:3a:5b:6c:b9:37:2e:95:21:
45:19:57:cf:67:65:60:15:c6:af:a6:e4:4c:c1:61:45:34:8a:
ba:73:50:ad:ac:fb:c9:a1:bc:3a:50:a1:f9:b5:a0:55:e9:a9:
6c:11:dc:49:9d:d6:79:80:42:99:b1:2e:e5:89:f0:ac:ec:02:
1d:ed:4d:59:bc:a8:9f:bb:70:c2:12:f3:3d:cd:70:71:58:4d:
6f:ec:9a:f6:9e:86:e2:8f:68:8c:bd:83:68:e6:11:a9:ad:2b:
7c:7d:34:ee:d0:cb:01:f6:cf:07:a6:2b:32:a2:ba:c4:1b:4e:
9a:32:c0:49:14:9e:d6:1a:c3:f4:d5:14:fd:94:db:79:10:54:
f0:07:a7:1f:73:0f:58:3a:90:4c:69:3a:67:7d:17:da:66:a0:
0d:73:54:d4:95:e6:11:f3:3f:59:5f:e6:6d:e9:87:10:5a:e8:
17:e2:f0:df:2a:bf:82:2e:a2:c4:81:e2:e1:13:1e:01:51:26:
f1:85:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:05 2025 by rpki-client