
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: jM9qYwjgh1iXARN/6BizbF1k8eQjqlSka9qvEMoHQro=
Subject key identifier: 8B:9A:05:8E:29:3B:D0:7C:3F:F2:F4:40:07:2E:F0:13:EC:2D:5C:F9
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 0194BBCEB413AFA0C9DEC298EAD913A96C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0AE1
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: hLQavj7/+Pt3qnv1iZBX4W6+pf+5Xg+RpqtEMEpLH/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:13:af:a0:c9:de:c2:98:ea:d9:13:a9:6c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=8b9a058e293bd07c3ff2f440072ef013ec2d5cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:75:fb:a5:d3:1c:a5:f1:4e:57:27:36:78:
e9:39:1d:3f:be:bd:b7:71:be:01:da:33:cc:d0:28:
76:65:23:8c:94:21:d9:2d:db:22:58:b7:61:d6:ea:
40:de:04:cc:95:1a:12:8b:5c:25:1b:13:9f:f2:2e:
27:ae:0f:22:3b:7b:84:f7:3b:5b:68:3d:70:5b:eb:
50:51:bb:eb:aa:fa:9e:41:18:a3:da:97:a5:1f:fa:
1f:21:9b:d0:4e:db:0b:02:36:30:14:5c:b2:ff:9b:
fe:3f:d5:0d:39:40:c5:b8:d3:f6:f3:1e:c5:31:2a:
a3:2f:18:4a:ca:93:c9:a4:c2:89:54:4c:3c:71:08:
3d:b8:b0:59:6b:48:40:05:3f:a0:4b:d3:d4:1b:7a:
1c:28:0c:92:5d:9b:77:cb:7f:cd:7f:54:9a:2c:38:
92:fb:69:6f:d7:b8:65:1e:1a:73:9b:0d:a5:29:17:
37:0b:83:8f:5d:5b:e5:ab:68:86:25:4e:5d:b5:d9:
22:29:66:41:c5:b9:79:1d:8a:a1:5a:95:5b:b0:8e:
0f:ec:05:ee:1c:63:dc:fe:b0:02:24:e8:72:c0:f1:
27:2f:70:d6:24:71:09:b6:e0:a6:9c:8f:72:64:75:
57:69:ce:10:4e:70:43:a4:55:e1:95:e8:cc:e2:45:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9A:05:8E:29:3B:D0:7C:3F:F2:F4:40:07:2E:F0:13:EC:2D:5C:F9
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:72:40:f6:76:c0:ac:f2:0f:c4:86:f4:9f:81:e2:a9:4b:31:
d7:aa:30:af:d0:ad:c6:43:98:10:96:da:db:9f:80:ad:e5:6e:
06:d5:63:8b:48:9f:c1:a7:14:0a:ce:30:87:3e:19:4f:78:6a:
1a:35:a1:f7:f4:05:76:5d:f2:cb:59:73:f0:0e:63:0b:fb:c1:
61:c2:40:cf:0d:9b:4a:d9:d6:8a:80:fd:2d:ae:be:0f:58:9e:
6f:a1:b5:c9:8c:3a:09:58:fb:e4:99:da:2d:50:cc:db:1a:3e:
ad:8c:16:ef:16:e2:11:84:74:5a:5d:68:28:9f:0a:6d:01:e4:
24:dd:69:04:71:8c:50:51:15:c3:73:97:a5:f3:27:43:c4:e3:
77:90:9f:97:41:e6:51:da:4a:de:bb:6a:11:27:db:b1:91:1d:
87:6b:3d:ca:17:73:d1:16:59:b8:9d:20:54:40:ee:b7:a4:46:
fe:4f:c8:b6:6e:c1:4e:e5:0c:2f:bd:55:b6:bf:d1:e5:c1:7f:
68:06:45:29:26:f9:9c:89:71:ea:49:79:07:b8:b0:02:4d:bf:
66:93:3f:78:6b:64:7e:18:8c:4b:37:f4:4f:f4:df:13:20:cf:
3e:1b:29:78:a7:e6:ca:0f:99:e0:e1:90:be:03:78:b0:c5:ee:
88:a2:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:46 2025 by rpki-client