Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: 1TZyTndw6YzwDfofSXEqsKeb1BZvr00wXKy0nNie3qE=
Subject key identifier: FD:5D:22:1A:E9:6F:1A:D4:6D:AC:E2:8E:A1:40:D2:3C:C1:ED:77:19
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 0194BC3C04312E538FBCDCFC14DADDC63D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0BD8
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: coTM+0DlT6PKf2lMPeQZiz47w4nWszpUabIFxw5RJJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:04:31:2e:53:8f:bc:dc:fc:14:da:dd:c6:3d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=fd5d221ae96f1ad46dace28ea140d23cc1ed7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:91:dc:b0:bd:37:6d:48:5f:00:7b:3f:9d:
49:28:27:ea:04:dc:8d:2a:ad:36:51:fc:9f:93:af:
ef:fe:4a:4f:41:dc:fd:69:9f:98:f5:ac:80:7b:96:
f6:ec:8f:3d:d5:6c:e2:fb:c2:3f:b9:b3:cc:26:0d:
b6:d6:6d:e7:82:16:65:9b:85:d6:64:34:bc:8b:21:
31:b2:e3:05:67:61:33:26:aa:ad:da:97:5f:fd:06:
99:31:96:b7:df:11:a3:aa:de:08:ab:d1:30:87:b7:
68:21:d9:2a:6a:fd:40:d4:81:a5:31:af:ed:da:6a:
b6:10:33:2b:12:a8:be:aa:74:66:2b:b9:82:0c:b9:
c6:2f:56:f6:8e:92:58:22:bd:c3:b7:01:6f:eb:50:
da:8c:91:9a:73:07:86:df:1b:0f:57:6f:89:e5:e5:
a3:8e:c1:9d:78:8e:1f:79:92:c2:93:42:00:bc:3b:
43:16:7b:9f:1f:a4:4a:ac:5d:e7:4f:46:4f:a8:ac:
ab:6a:65:ef:a2:33:93:f9:f0:75:97:51:a8:d0:13:
5e:b2:34:7b:13:61:d2:51:07:86:47:c3:7f:65:bb:
c1:5c:91:31:11:0f:1e:84:f3:d3:77:f4:3d:cf:31:
86:7d:e8:7b:24:69:78:39:c5:56:bb:ed:84:ed:7c:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5D:22:1A:E9:6F:1A:D4:6D:AC:E2:8E:A1:40:D2:3C:C1:ED:77:19
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:01:3f:53:38:a5:4b:2b:4d:16:70:95:98:b1:a7:cd:35:b0:
6f:0d:3f:bd:7e:9c:74:f3:98:52:31:3f:14:65:c4:2e:27:ba:
5f:16:4e:d0:35:c6:8d:7a:1a:ed:fc:e4:e0:45:ce:10:3f:71:
a6:7f:41:34:4a:c3:56:a4:1b:cf:2a:41:be:43:86:70:81:4d:
19:f5:37:b5:fc:68:31:78:19:b8:f6:fa:5f:44:28:e6:d8:e3:
49:2a:66:6a:6b:50:04:a8:e1:9f:7e:ad:78:d8:87:d2:ee:fb:
cc:66:8e:2b:84:1b:b7:10:11:d8:1d:af:5b:f9:b9:f0:bf:2b:
6a:4b:35:5f:c7:a1:38:89:e3:ef:4f:8d:e0:33:37:d4:b3:a1:
1c:e6:a0:c3:07:57:cb:58:57:31:43:53:85:63:d7:c6:e4:ac:
1e:6d:86:18:db:4d:bc:8d:03:f0:78:aa:fa:6d:15:04:0b:fa:
b2:4f:ae:c0:83:e2:bf:90:05:35:aa:fc:ee:10:75:6d:90:d2:
57:fa:b1:21:98:70:44:b5:10:fa:a7:aa:00:93:cf:ae:0e:72:
df:c2:02:30:aa:48:e4:a7:f6:f8:1d:b4:83:9e:86:d7:91:f3:
fc:28:a6:2e:ad:44:13:7d:f1:d4:be:d5:fc:45:36:1e:cf:14:
40:b8:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:35 2025 by rpki-client