Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: yzWKNSBo5fkGrdxPkooy8aFJawb5DdMVxiP2ZrIHRGY=
Subject key identifier: 5F:D5:EA:63:09:5A:87:1C:53:87:7D:3D:20:81:29:86:5E:45:2F:B3
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 0194BBCDCF433044E774DD538FE716440E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0274
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: fnjE8+w7xDHo5fylAgMtRnzN/6Tv2i/yPGYsKBQiepo=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cf:43:30:44:e7:74:dd:53:8f:e7:16:44:0e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=5fd5ea63095a871c53877d3d208129865e452fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:65:ae:44:ad:2f:b7:3d:ed:af:3f:66:ad:
cf:6f:ed:9f:d9:8b:12:65:87:ad:21:c1:6e:36:38:
d9:73:4c:b1:f0:5c:58:f3:95:60:9f:72:d2:d7:3d:
ee:38:5e:12:31:1b:ce:6e:4a:30:e9:67:b8:2a:5e:
16:15:05:2f:a0:cb:e2:32:be:7c:5a:08:c1:e2:88:
93:d7:8e:d6:1f:12:2c:dd:d5:bd:76:3f:70:5a:0b:
43:5a:a2:24:87:3f:e8:92:6e:f6:f7:ed:2c:4b:3a:
72:9b:d7:f2:1d:cf:de:49:b0:ee:20:3e:c7:69:7b:
a5:2f:bd:47:32:ca:a3:42:e8:d9:cb:88:e4:14:0e:
a4:53:43:30:78:8e:4b:b9:22:23:94:0d:59:d1:7b:
4d:a1:4b:93:45:72:ae:40:03:4d:24:06:e7:7f:7c:
6c:95:2d:c2:a9:4f:51:34:9b:c3:de:02:1d:34:74:
b7:ab:c0:64:35:96:4d:a6:60:6e:50:0a:df:e0:a2:
31:a6:26:0b:15:8c:77:24:02:bb:34:97:31:ae:de:
07:69:9c:97:f9:97:07:c9:af:d5:3d:5d:35:6d:f2:
96:e6:6e:36:a4:b1:a4:56:30:19:65:02:33:a0:a9:
16:f6:14:bb:14:7d:35:4a:d8:af:0a:ab:d0:e6:79:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D5:EA:63:09:5A:87:1C:53:87:7D:3D:20:81:29:86:5E:45:2F:B3
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a8:3f:71:4f:ab:7c:66:96:76:d2:44:b8:99:59:3e:55:16:
94:a3:0a:fe:93:d3:13:95:7e:4c:26:f2:db:1a:1a:2a:39:04:
61:84:51:33:70:66:c0:02:a3:b4:20:dc:9a:7a:44:64:41:39:
a1:46:74:0a:a1:14:25:74:d0:2f:84:52:fe:22:78:26:6f:5b:
3e:47:e5:8a:c4:4e:4b:58:14:73:88:7e:78:a8:69:31:0f:ec:
c1:23:3f:59:fd:1e:4f:c2:70:a5:d8:e3:45:10:41:77:05:79:
46:39:82:52:0b:5b:85:e0:7f:a3:c9:f8:0e:3c:bf:8a:ef:ab:
f6:e9:6e:80:b8:d4:53:92:b1:22:8a:06:2f:ae:ec:88:7c:a4:
76:96:49:f8:52:2e:58:69:51:ef:c8:0e:32:40:99:f9:82:bc:
cf:66:ac:0c:49:6c:b6:55:d5:7d:72:4a:75:24:c7:e7:9c:47:
d6:57:be:b5:46:5b:b0:56:f6:43:68:8e:d0:8a:9e:e8:1b:93:
33:43:25:6c:5a:40:74:8f:39:ca:9d:d5:f5:79:e0:da:ad:3a:
9a:eb:d4:17:6d:5e:1b:ce:13:b4:9a:f5:15:cd:78:b7:45:47:
21:4b:66:8b:92:ba:d9:e8:64:ad:35:69:a8:7b:70:80:91:47:
74:10:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:25 2025 by rpki-client