Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: EHZBWVXukmZ1ZOfvimAEEFBmE377vhQnKzqz7+x7EiQ=
Subject key identifier: 7F:F0:7B:8F:4B:36:AC:38:5A:E0:AA:54:79:FF:0F:6F:D5:77:6C:56
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 0194BC05238D65991C4B3107A6601F43D1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: qDpQVC/7KkuwDXPQqsptSw0nOcDM+YzqgwD9f7AjDsM=)
2: JEagz34AmrWJSl5tWfv6gEtsLGA.roa (hash: 6ThacyL41jFB75SwEJNS97B98Umjv7cIvZNxvFFSXfI=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:23:8d:65:99:1c:4b:31:07:a6:60:1f:43:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=7ff07b8f4b36ac385ae0aa5479ff0f6fd5776c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:0c:12:99:16:8f:87:59:ef:c5:fe:5b:14:
1e:85:c8:ac:d5:38:12:44:d1:64:0a:67:80:e3:9c:
4a:1d:e5:b1:f8:81:ab:96:f9:67:2c:83:3b:bf:ad:
38:be:aa:91:07:f9:d5:b1:58:50:f2:cc:7a:1f:e5:
04:ed:19:f0:d7:ff:c6:81:27:58:78:92:b5:8a:6f:
de:64:96:35:15:82:91:98:20:ea:ed:fb:f5:bd:f2:
5f:26:68:30:53:f8:3e:7c:1e:3a:c0:a8:02:71:68:
61:46:de:f3:88:0a:41:fb:0f:8d:b6:cf:44:3b:01:
66:97:3a:b6:57:8f:9d:5f:cb:19:e2:6c:85:70:57:
17:1a:8d:45:14:f1:3d:e4:ac:28:80:02:a9:e0:5d:
74:5f:db:6d:0a:47:8b:5b:e4:2e:ce:46:3a:c1:0c:
4e:76:3b:d0:1f:4b:ee:73:f5:35:6a:c5:e9:bb:e0:
26:94:12:ff:c9:3f:3a:40:f6:43:5a:d9:99:b4:2c:
73:79:b1:0e:d6:c5:68:8c:98:58:d3:43:9b:12:29:
68:d6:de:bc:56:5c:18:ff:ec:20:96:7f:8e:2b:44:
3d:66:bd:c6:ad:ff:75:33:e3:40:59:42:05:ad:b6:
e0:36:55:27:5a:ac:c5:94:ea:14:0f:09:85:7f:8b:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F0:7B:8F:4B:36:AC:38:5A:E0:AA:54:79:FF:0F:6F:D5:77:6C:56
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:55:b6:cc:07:95:b5:e0:51:93:0a:cb:d5:eb:dd:56:a2:6f:
f1:d8:3f:c1:23:92:aa:df:f7:3a:3f:d0:00:1e:d4:3f:6b:91:
c1:2d:15:53:cd:a9:ef:da:cf:2e:f5:e9:81:f5:db:e1:ef:89:
bb:29:72:00:d4:65:aa:6b:c1:96:2e:43:fc:c2:b1:0c:1b:eb:
5e:4b:a1:92:ec:20:34:eb:ec:0f:5b:43:38:b8:09:56:0d:ac:
a1:02:cb:6b:63:f7:2a:af:5d:c0:6f:a2:83:db:38:b7:69:d7:
58:9a:c0:d6:36:9e:93:46:e5:29:9a:ca:47:4d:19:b8:ad:ab:
25:a2:9c:8f:98:94:ea:74:4b:e3:42:97:38:0f:f9:de:35:ac:
76:10:58:4b:d7:7a:fc:ab:64:2f:c0:3d:23:c2:40:50:14:ec:
8d:98:1f:d7:1a:c1:02:5e:6f:24:ce:cf:0d:6e:dc:1b:37:31:
0e:ef:83:79:cd:d8:4f:9f:fc:f2:ac:67:ac:ef:42:98:da:20:
67:0d:9f:35:9d:58:4b:5c:9d:79:93:ed:37:60:c8:fc:f4:30:
cb:b4:88:13:e9:f6:79:9c:19:16:90:a1:c5:91:a6:48:91:df:
d3:df:2b:f2:18:9f:8c:93:41:9d:3b:31:db:eb:09:50:95:5d:
0a:d8:87:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:27 2025 by rpki-client