Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: twDO3QoC+T7BepDhS3BqB8AhjbgKLm8tjBiE+jRLaVg=
Subject key identifier: 6F:BA:A8:D7:B0:99:31:37:B6:44:91:8D:56:1D:9F:7B:2F:5B:91:C2
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 0194BCA97BA8D087EA542CB7AB5D85505CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=)
2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=)
3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: RaMvu2IAAuvpB02GX106JVMwE9XzbN2ObITa/4Rv/nQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:a8:d0:87:ea:54:2c:b7:ab:5d:85:50:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=6fbaa8d7b0993137b644918d561d9f7b2f5b91c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:aa:2f:4a:ad:13:4f:36:86:91:be:c5:f2:a2:
18:79:9b:8f:d1:87:f0:2d:78:0f:e6:59:22:dc:ad:
e9:47:0a:15:40:cd:cc:7d:93:e6:c4:b2:8c:a0:f9:
21:0f:fd:0c:06:d2:a4:a9:8d:04:c5:e1:76:74:8a:
98:60:15:c0:30:58:a7:f9:8f:59:5c:9a:29:8a:5c:
18:9b:ce:96:8a:a9:2b:db:33:d1:99:bc:eb:6f:14:
10:81:c3:fd:bc:5d:fb:52:6a:47:08:34:46:67:f4:
f9:fd:18:33:95:91:5f:96:17:86:9d:b7:00:89:c0:
ab:b0:ad:91:de:d3:ba:95:a9:03:6d:74:1b:55:cc:
78:3c:30:65:6b:c8:7f:69:ce:d8:e7:78:f4:ae:a2:
ba:2e:8a:4a:a7:1d:3d:85:ae:e6:84:ea:6a:9b:f5:
43:27:8e:38:43:ad:f6:51:90:cf:e0:87:cc:6d:cf:
29:c4:ab:aa:ce:3f:18:e7:2f:a7:11:9d:4c:bc:df:
9e:12:54:cd:4c:ee:20:3a:ee:dc:b8:20:b6:81:84:
2e:ee:ec:70:2a:c8:d2:02:c9:b3:cf:fd:49:7f:d9:
ae:7f:ae:4f:56:5f:49:04:c3:93:2d:5b:a6:02:cc:
14:d0:76:55:56:eb:08:2b:32:af:69:ad:6a:30:03:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BA:A8:D7:B0:99:31:37:B6:44:91:8D:56:1D:9F:7B:2F:5B:91:C2
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e0:7f:c3:26:8c:12:54:bd:39:63:c5:11:e5:c0:44:4d:1a:
ff:e1:71:1f:d7:45:7b:bc:f7:84:8f:1b:d5:a0:71:de:b1:b6:
49:4e:1a:f3:8c:61:db:fe:ae:f0:e3:2c:20:f6:a8:50:35:e7:
89:3b:f4:eb:b9:b1:d4:2a:ba:2c:dd:49:94:23:61:dd:44:ac:
31:02:ac:6a:8e:8f:24:09:50:02:05:d7:67:66:25:17:c4:95:
8e:db:43:b7:ed:b3:25:aa:3a:3e:95:eb:e3:1d:a5:2d:4b:db:
11:3b:27:f0:df:a5:b7:a0:2e:42:49:cb:81:41:9d:0e:8e:f3:
26:e8:24:0e:33:58:b5:7f:12:d6:1d:f1:7d:b7:0f:ca:3d:0a:
8a:96:03:92:ce:25:bb:88:a5:2e:80:c1:f4:f0:fc:ba:3c:4a:
6f:c0:fd:7b:8b:86:1a:e0:ee:8d:19:e7:83:ad:b4:e7:55:ac:
35:a6:e1:56:3d:47:a8:e0:9f:33:61:c3:fc:bb:dc:bd:48:cc:
5f:a7:f2:ae:ef:ef:0f:e6:2f:33:49:2e:03:25:2d:df:3a:5b:
76:70:8a:d3:49:93:b3:eb:e7:9e:0f:78:d0:66:bf:fd:b0:9f:
b0:f1:56:e7:45:de:f2:14:66:a7:05:25:15:27:b8:3a:b3:be:
e7:0c:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:59 2025 by rpki-client