Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: FBeohvsOvDEig2IY8qVl6B70om4N0e0T2Vr5w1svCdA=
Subject key identifier: 3E:E9:34:19:C3:8D:CF:17:41:25:14:A7:51:8F:B2:BD:FA:09:8E:8F
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 0194BC72EE703C9269166CCE57E0BE488325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 07BD
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: fuTJqC6WAAT+CV6DuttyEeRcQwjeC5I2q6ZZgidEVmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ee:70:3c:92:69:16:6c:ce:57:e0:be:48:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=3ee93419c38dcf17412514a7518fb2bdfa098e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:e5:63:b1:7e:f3:63:66:19:4e:99:f6:2d:
3e:fd:50:74:ae:1d:c4:78:43:56:7d:94:ad:08:23:
76:3d:1c:d1:b7:a5:55:40:72:16:1e:6e:5c:41:d5:
eb:97:23:e8:2b:4c:47:21:44:eb:25:e7:a5:2a:f2:
52:bf:2b:18:4c:05:8e:71:5c:05:e8:12:5b:64:6f:
7e:4f:7a:e7:25:e7:e9:b2:7d:72:9c:3f:98:04:a5:
c1:64:0a:aa:b4:57:7a:2a:08:fd:3b:be:ad:69:89:
2e:35:dc:10:81:82:86:11:2e:3a:6b:93:8c:74:21:
eb:49:73:71:f7:16:58:96:6e:5b:b5:af:8d:0c:e4:
3d:33:01:c3:11:f1:aa:46:a4:c3:1a:e1:3b:96:a2:
8b:3f:f5:87:72:42:90:de:6d:ae:c1:1d:5d:f7:56:
de:1c:d2:72:61:1a:07:7f:e8:02:3f:f0:d0:a7:55:
9d:f9:9a:1f:75:7d:8f:a8:8e:82:77:f3:78:87:22:
37:65:2f:1e:bc:6f:eb:f5:ac:1f:68:2f:fe:0a:4c:
06:93:6b:10:65:60:39:25:f6:38:be:42:cd:ac:54:
eb:9a:d7:cb:f1:6f:97:ed:df:0b:c8:83:81:a8:b7:
5a:bc:8b:00:b5:d9:47:54:b4:a5:8f:8e:a4:ea:c8:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:34:19:C3:8D:CF:17:41:25:14:A7:51:8F:B2:BD:FA:09:8E:8F
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:c4:4b:f0:23:c5:c4:fe:03:aa:b5:dc:87:c9:c1:1e:b6:
de:1d:e2:47:4f:53:d6:53:7b:ab:6d:af:a0:6c:da:0f:cf:3b:
47:8a:3d:64:53:e0:25:5d:8e:cc:55:9d:5d:82:e6:3c:1e:4a:
0e:6a:04:d3:ca:e8:88:78:32:d6:25:5f:c3:30:a4:5d:70:8a:
ff:42:40:85:eb:c2:0d:1d:d1:13:71:74:bf:67:ef:c5:07:38:
60:45:fb:92:bc:69:43:fd:88:bb:7c:01:5c:0e:82:e4:31:2a:
93:5b:28:10:67:01:5c:ef:6d:e1:44:dc:d8:ba:25:6c:8f:e2:
20:94:96:91:e8:51:95:ff:75:2d:74:3c:14:bb:88:bd:f1:63:
eb:eb:19:de:fe:3f:b2:7b:9c:d2:f0:fc:99:c9:a5:19:34:04:
f2:80:dd:be:c5:42:22:80:7b:3d:98:77:4e:16:8d:33:5a:78:
9f:b3:c1:20:7a:24:bd:cf:8b:10:cb:aa:ac:1f:57:ee:98:8f:
04:53:23:c7:0f:e3:6e:b7:b3:ab:2a:56:0a:79:5d:21:24:65:
54:5f:ac:ee:30:ba:99:ed:2f:2e:4a:3f:33:9b:94:d8:b8:01:
14:ba:9a:39:c6:4e:cb:c0:60:8c:0d:72:e1:26:23:b2:61:7d:
5f:27:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:45 2025 by rpki-client