Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
File: iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json)
Hash identifier: y/jTfldnXo/4tcAP4FcoI9casN7rk8IlV1UIRqRhO9I=
Subject key identifier: 1B:F2:BF:BA:E7:BB:87:43:7F:75:91:6A:24:7B:99:9D:58:E5:CC:CA
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Certificate issuer: /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial: 0194BC728A8AFAA2DF3E7401A0F60DB1AE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
Manifest number: 0BC8
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: P5TwA4gqR6DNAZ9Tx38K6wVBeSw.roa (hash: JFHWlXs6ts8+WEohOsphMs0bmJPDZeURLkqEXMqad1U=)
2: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: 2xSLaiFre/tEEDMDwx/NumkWsz2hxxsgKpmJXAHD+4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8a:8a:fa:a2:df:3e:74:01:a0:f6:0d:b1:ae:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=1bf2bfbae7bb87437f75916a247b999d58e5ccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:dc:82:c4:34:28:d0:aa:ec:1d:50:87:4a:
e0:9f:06:09:e6:06:9d:4a:1b:4b:c3:3a:2d:37:f5:
79:2d:b7:3e:9a:85:9e:f3:ff:d5:10:c2:e2:b2:ed:
fb:0d:1c:2d:1c:1d:80:a1:ad:71:5e:93:73:cb:6c:
bd:48:05:d3:a7:42:7b:93:0a:fd:7b:f3:a1:f4:5b:
28:ce:0e:79:01:4c:97:c2:bd:06:76:a0:19:de:cd:
d0:95:b7:b9:b9:32:5a:d5:81:4e:3e:b0:e7:bb:35:
32:d1:67:38:bb:03:83:68:89:0f:4a:5a:a8:37:bb:
a9:0f:6f:49:4a:35:47:6b:a8:f4:c5:2a:dc:fd:43:
41:33:1a:97:58:8c:55:57:df:e5:d9:2b:3a:1a:43:
ae:6c:29:1f:6e:e0:9b:2d:2c:4f:e6:41:56:19:90:
c1:12:43:15:d5:24:6f:60:48:7d:c9:3b:41:f1:f2:
57:da:24:16:3c:32:5c:b1:dc:7f:9a:39:8e:12:39:
61:b6:bd:36:8d:80:df:bf:6b:c4:5a:66:f4:dc:7f:
6c:95:c4:6f:ae:22:b0:81:14:f9:e1:52:73:d2:33:
1d:9d:d5:39:4c:30:b4:40:c1:1d:cf:c2:f8:ff:f4:
23:f9:59:67:73:38:c6:bf:3f:3b:52:91:c3:3a:f7:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:BF:BA:E7:BB:87:43:7F:75:91:6A:24:7B:99:9D:58:E5:CC:CA
X509v3 Authority Key Identifier:
keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:22:73:53:15:26:fe:c7:07:c4:a6:0a:c4:c3:fe:47:73:f1:
5d:dc:fd:ab:ac:0a:b6:98:fc:91:7c:03:4e:0f:38:73:5c:df:
07:05:ef:44:2a:26:c6:32:2e:8b:75:e8:a4:26:f9:d3:84:51:
4c:5e:f9:ce:88:ea:17:9a:6f:ef:10:27:81:8e:e9:d6:36:db:
8a:47:88:4b:1d:8a:6d:41:ff:23:be:6d:d0:c5:c1:81:c6:78:
dc:0d:ce:6c:d6:0e:bc:35:47:4b:f4:41:63:63:c2:98:37:68:
58:99:f2:8c:6d:56:90:f8:43:20:8a:b8:eb:0c:4a:59:03:d0:
ad:e1:c7:d1:20:c8:7c:f2:db:3d:dc:94:05:19:36:e3:fd:b4:
cf:42:f4:9f:49:5a:a9:72:b7:c0:4a:ea:3a:7b:00:b3:0d:94:
77:6a:36:2a:81:10:47:47:01:19:c4:cb:9b:60:f0:0b:87:9e:
e8:8c:35:71:b9:ae:aa:c6:ac:c2:c7:3a:21:cb:08:fd:80:69:
c9:cb:6b:14:e6:79:3a:54:26:15:4f:c1:29:e4:96:cc:d5:fa:
ff:cf:4f:f4:c6:d4:dc:ac:8e:4a:6c:6f:22:f3:6c:de:55:97:
f0:53:16:ed:d3:9d:27:06:4d:49:45:aa:60:6b:4b:5f:8b:df:
1c:6c:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:29 2025 by rpki-client