Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: xekdthaL0b3OVG9E04WYjG9vqrrtyhwqH3f5x2IMNVQ=
Subject key identifier: 55:C0:01:2E:C0:57:DA:94:85:6E:9F:1E:A3:8F:A0:EB:29:5A:10:0B
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 0194BC3C8943A82415332552C1A8220325F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 056E
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: EjVUkF23ILLApN5F8xB4q0gahaXoACULv14Oj3QJRvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:89:43:a8:24:15:33:25:52:c1:a8:22:03:25:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=55c0012ec057da94856e9f1ea38fa0eb295a100b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:53:aa:84:aa:36:00:5c:0e:d6:23:09:f2:
84:5a:0e:02:37:19:df:be:ea:2c:c8:1a:e5:cc:14:
d2:c7:db:d1:72:f6:b0:aa:df:29:d2:c0:46:39:f1:
0a:ec:ce:12:5e:e8:71:89:69:20:c4:97:89:24:f3:
04:f1:16:28:09:80:a2:4c:3d:e3:73:09:10:bf:f2:
cb:9d:4e:f8:98:e5:a4:ab:48:5e:c9:b5:1f:9e:38:
54:7b:af:5c:c1:40:68:fa:95:4c:ce:31:f5:8f:02:
bf:18:a4:2e:4a:f0:a5:2c:cd:3c:8e:cc:be:eb:d2:
71:04:43:d1:47:92:99:72:df:f0:3d:f5:ca:64:67:
28:ab:61:68:ab:a9:46:31:b4:62:91:61:e7:3d:0a:
e4:53:b9:dd:1a:b3:b7:c2:57:06:f8:a1:0e:b0:b3:
a9:e4:55:67:2e:39:9e:f4:53:e7:65:9a:4e:63:90:
fe:4a:2c:df:2c:dd:7e:f0:60:04:51:76:21:23:a5:
75:83:da:ea:2e:04:51:a0:4a:c3:88:e6:e3:6d:62:
05:a9:d6:05:34:ed:8a:f2:d9:f2:b4:bf:22:4e:a6:
d4:5a:dd:b2:3c:8a:2d:c7:bd:89:e9:51:49:12:d9:
1e:72:cc:06:a7:36:c0:10:bc:df:dd:84:55:55:8a:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C0:01:2E:C0:57:DA:94:85:6E:9F:1E:A3:8F:A0:EB:29:5A:10:0B
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7d:00:d0:78:68:63:05:57:a7:b3:a7:48:a0:5b:49:08:1a:
63:43:9c:08:3b:8f:23:16:3f:45:d3:3c:95:e7:b2:ba:e9:41:
6f:ce:da:cc:47:f2:56:48:cc:e6:87:25:8b:3d:e5:0b:23:a6:
0b:92:96:6d:2d:09:6a:39:93:61:6a:4c:e5:8e:2d:b1:90:71:
fa:fd:a8:7b:16:c4:f2:55:ab:41:d7:84:6a:c6:83:75:43:cd:
1f:14:e7:fb:52:7f:bf:40:48:00:1f:96:e2:d9:01:3a:2d:c3:
66:fe:28:60:42:ad:34:a2:dc:d2:1c:6e:59:fa:9a:10:7e:d5:
51:24:46:c4:ec:e4:78:25:b7:bd:44:71:4b:fa:a9:3b:11:d7:
a9:7f:f1:db:af:c4:90:c7:c2:3c:f9:cc:3e:c0:52:63:35:02:
4a:4b:1c:9f:9b:1c:86:57:0d:52:d9:30:f9:f9:cc:d3:38:04:
cd:94:f6:a4:00:f6:6b:78:12:ad:24:0a:a6:c3:7f:37:be:33:
38:83:35:63:f1:31:90:d9:17:29:66:c1:29:31:30:93:71:14:
16:47:51:e8:5d:fb:d5:0e:31:a0:64:e3:d6:55:e8:3b:b1:0c:
53:e7:ea:ad:83:87:74:8f:56:b7:d3:5e:2c:c9:1b:e5:fa:76:
a0:94:ce:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:26 2025 by rpki-client