Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: 9g6fg4iZ91cJm++nTlCvBsKyKTZgDJoZFCenhXNyRZc=
Subject key identifier: 7D:3D:88:D9:1C:AF:AC:F9:37:38:72:FD:36:31:52:36:A0:B9:57:E1
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 0194BBCE52F83BDA7BFDE9C15C17D114BA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0ACE
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: As/L5eHHNUeXVFTH9bdOQ9Ixk0H0iJYZMjLUN+tLDRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:f8:3b:da:7b:fd:e9:c1:5c:17:d1:14:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=7d3d88d91cafacf9373872fd36315236a0b957e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:da:f2:b4:cc:73:c7:40:86:cf:f0:80:c5:
93:6a:d4:71:83:ab:1e:d6:31:f1:67:90:eb:ec:33:
fb:12:2f:92:fa:05:6f:52:5d:0e:f0:57:d0:a3:88:
0d:96:e3:3c:af:94:d7:99:5d:ae:14:d9:6e:1d:93:
07:de:79:73:a1:03:8d:0d:0b:ca:91:58:12:a5:7a:
33:aa:71:0a:3f:fd:e5:36:d2:f4:71:9c:39:68:99:
f7:2c:96:5d:e0:40:62:ca:db:d2:f1:e2:4a:aa:ae:
90:75:8f:d4:91:77:59:36:6a:eb:a1:82:7b:57:dd:
d8:7a:ec:61:14:9c:e1:73:01:04:19:61:73:fb:ba:
ef:7f:2b:35:f9:04:98:2b:69:85:4b:0d:aa:b4:3a:
c7:c5:fb:ff:2a:86:48:d0:0e:3e:7d:5e:66:c8:5f:
02:54:a9:d3:69:58:ac:39:d4:60:75:c5:86:2a:36:
c3:cc:17:79:f9:2b:7c:5e:37:bd:e1:60:0a:27:9d:
8e:22:01:aa:a1:8f:5e:15:28:76:84:d9:e6:a3:cb:
e7:55:d1:25:fb:dd:11:29:20:f7:95:30:f0:af:cd:
2d:19:1e:2e:bb:c7:f5:dc:7b:33:c8:e8:00:b9:ed:
ae:45:2b:36:c9:9d:99:10:e1:d5:98:5e:59:30:b6:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3D:88:D9:1C:AF:AC:F9:37:38:72:FD:36:31:52:36:A0:B9:57:E1
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f9:5b:7f:87:24:cc:3d:dc:e7:7d:c3:27:48:14:83:db:74:
27:4c:1b:03:32:55:b3:05:f0:f1:ed:23:c4:6a:df:fc:a3:b5:
21:9c:45:09:ed:b5:80:31:05:61:b1:8c:51:48:20:7e:d7:7b:
c0:68:fd:a1:02:72:91:e9:77:08:00:a7:df:89:29:07:0e:4f:
cc:11:bf:19:37:99:ca:1b:d7:e3:b5:55:64:9b:d9:ea:0d:96:
4c:57:55:80:e4:2a:70:22:38:0f:27:d0:99:48:92:d0:c5:55:
df:e4:67:83:ec:2d:02:1e:86:f0:a8:57:31:4b:90:d0:91:ac:
c8:68:1f:40:99:08:3c:1d:0c:26:c6:20:be:aa:c7:8a:70:9b:
31:63:1a:a1:1b:73:0b:40:66:6a:b0:a9:e3:8c:3b:2c:58:73:
9d:ea:6e:ef:64:f4:f2:ac:91:1c:94:94:58:ca:f4:5b:8e:61:
66:01:ef:e3:13:de:b7:90:cf:a1:33:71:7d:37:71:b3:06:d9:
7a:0b:23:43:88:fe:ed:4a:fb:4d:65:a2:59:a7:10:e8:c7:df:
f4:ae:1b:d1:6c:76:20:73:b9:f5:35:9f:30:ec:97:8b:96:ea:
8b:44:0f:27:ac:b9:df:4e:52:0c:cd:1f:6d:48:9c:ec:8a:cf:
21:4f:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:25 2025 by rpki-client