Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: 9t5hEEhAVB7wdLp2jZKeKnyzRAenzpjl9nvps1wIMiA=
Subject key identifier: 38:72:5D:64:41:69:49:98:BF:39:81:5B:76:7B:EF:0D:21:B0:BD:93
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 0194BBCED66122EAF402BAC69043CEBD90D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 103C
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=)
2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: rVkV7iT4Mo06RYasF7HirRO+X9OuL1DdlI/aNfgpdns=)
3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:61:22:ea:f4:02:ba:c6:90:43:ce:bd:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=38725d6441694998bf39815b767bef0d21b0bd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b7:f9:40:97:a8:6e:f2:05:79:2a:7d:85:82:
8c:1c:c2:54:f9:7b:e4:3e:6d:39:b3:64:f0:0e:af:
d9:bf:ed:56:a0:7b:47:08:e4:6b:26:54:ba:d4:71:
09:22:6e:1c:cf:cf:6f:7e:16:f0:d9:94:ec:80:43:
4f:bc:89:33:46:5c:5c:ee:6d:55:91:20:4e:12:e5:
d2:64:39:f5:dc:d9:57:ca:7a:9d:22:bc:f7:b5:1a:
2d:37:4a:95:01:f7:18:25:07:da:05:c5:35:80:9e:
2f:bf:c9:d5:d8:8f:c2:6b:30:7f:54:28:4f:9c:af:
6d:0d:30:98:4f:01:de:a6:c7:4d:b5:03:ab:66:4e:
61:e5:21:4d:b8:a5:76:e7:aa:70:26:35:b4:c0:d4:
18:51:fa:98:21:26:93:e3:76:96:2e:18:76:8d:0f:
f2:d2:cf:3e:69:3c:aa:9c:4e:bf:1d:3b:5a:8e:1f:
a0:18:25:4d:8d:98:7d:75:20:c9:48:b9:cb:9c:fb:
17:98:26:e1:fe:dc:14:0a:11:7d:8a:33:0d:a2:bc:
1b:a6:78:cc:7d:02:02:9f:36:e8:48:01:cf:6d:84:
74:57:89:71:03:ba:6c:8d:b3:13:db:61:2d:ef:f5:
f5:85:27:cb:5b:33:88:ec:23:ec:0c:d5:6e:fc:27:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:5D:64:41:69:49:98:BF:39:81:5B:76:7B:EF:0D:21:B0:BD:93
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:61:93:41:a6:14:a8:13:73:e1:9b:07:b1:77:99:68:10:
49:e8:43:8f:74:2c:60:85:f7:37:e3:cb:57:15:6f:f4:9f:e2:
13:dd:4a:da:22:6b:23:81:f7:be:cb:15:e9:53:41:2d:e4:35:
18:8b:14:69:23:40:ad:b3:5a:97:08:4e:10:e9:d5:ac:24:94:
40:05:c3:40:7b:82:64:9b:6b:f7:4f:97:ff:e9:76:3d:2f:a7:
1c:63:c2:aa:2e:4b:95:6b:51:dd:c3:68:c5:94:2a:69:e1:e6:
5f:b5:01:b4:de:2b:9c:21:71:85:bf:25:bc:88:8b:84:7c:59:
46:34:a6:91:8d:31:36:1f:77:08:d7:4a:46:91:47:30:64:be:
8a:cf:f9:db:d2:3e:50:36:54:00:bf:b6:33:0d:c3:f7:d5:bc:
a1:2a:2b:fc:b1:27:8b:d2:5b:a5:af:f9:4c:35:a9:ec:b0:2e:
3a:76:ce:1f:1a:aa:af:b4:b9:b8:db:ee:be:df:b3:63:97:25:
6f:7d:30:4a:1c:35:1c:82:41:09:31:e4:b5:ba:78:b0:dd:7c:
f9:aa:52:3a:89:9f:79:7c:f1:3f:38:68:0e:0c:7a:03:e7:c2:
e7:6b:01:60:ca:7c:19:53:18:38:4b:a2:f2:ad:4e:a8:e8:49:
4f:fc:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:57 2025 by rpki-client