Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: diZxEWYjnlfo1Fk8t05R2cX+1XaqL7nEyZD1q/WIcZ0=
Subject key identifier: 3D:8F:E7:41:99:2F:4C:26:90:4B:C0:A0:58:37:BA:4B:8C:CE:68:7B
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 0194BD4EC0D73F02AC1AA14022752E06C939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 0F04
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: 5T+296cYmga6CLZT2i8VAeh2PzBOyt8ZukcRwQSFWNo=)
2: rw7mvGsBN1ywLg0aU0WOnuWPa30.roa (hash: Kkop8VBeWFXHnSavZNOMJQZHo1FfDtxgbSsG84Nc5jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c0:d7:3f:02:ac:1a:a1:40:22:75:2e:06:c9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=3d8fe741992f4c26904bc0a05837ba4b8cce687b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:a6:8a:49:03:a8:a9:ed:2c:7e:76:14:f7:
48:26:66:92:8f:3b:4a:5f:66:5c:33:f2:7b:03:2b:
57:6d:f1:2f:3b:ef:5a:44:8c:3a:61:53:57:98:77:
4f:74:7f:48:1f:87:ad:8f:71:96:9a:ed:1f:91:dd:
4b:bb:1e:c6:c0:10:56:1e:9f:9e:af:07:d2:bf:7c:
75:9b:a7:01:3e:73:1e:e0:2f:4c:7d:fe:91:f5:5c:
83:c1:d3:34:0d:19:8d:91:af:b6:4c:b7:39:b9:31:
0e:0c:9b:87:95:e8:68:20:19:9d:cc:9d:c3:68:ed:
32:bd:15:a7:fb:1c:02:12:f0:47:fd:f6:bb:5d:64:
57:a9:12:87:62:51:fc:4e:bd:5c:b5:9c:f5:fb:5e:
46:ad:0b:03:07:e6:fe:e6:cc:b6:1f:6d:6e:0a:82:
0a:29:71:cd:8e:39:9c:e8:24:bf:c2:04:e9:8a:5d:
bf:7f:05:93:68:fd:bd:11:49:b6:ce:7f:8f:bc:da:
e4:1b:7b:21:d5:9b:e7:6b:7a:35:7a:f9:18:69:ee:
59:7a:8e:4e:25:25:36:0d:9c:f8:f2:f2:94:50:29:
21:fe:05:b8:f2:a9:7a:96:43:87:f0:1b:68:0e:cf:
ba:97:bf:a6:e6:03:61:1b:c0:76:22:58:a4:02:57:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:E7:41:99:2F:4C:26:90:4B:C0:A0:58:37:BA:4B:8C:CE:68:7B
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cb:dd:33:17:60:a5:e5:65:e7:6a:6b:3f:40:ac:fe:ef:2f:
c4:94:8b:c2:f1:e0:d2:45:81:35:f4:d5:f4:16:31:62:51:56:
39:2f:18:e1:1b:62:a4:65:3d:9e:4d:2f:a8:0e:b4:2e:f5:d6:
ba:6e:07:71:3f:7b:af:a1:d6:f9:86:3b:22:ca:07:ae:94:e8:
55:23:7e:7a:53:4e:d2:2f:5a:8c:b0:9a:71:2f:c7:c6:7d:74:
eb:35:b3:8d:ea:d9:9b:00:e5:4e:0c:17:cd:d7:cd:e1:b1:a8:
3f:d2:6a:df:8e:48:11:4a:99:3d:ab:16:f0:16:3e:3b:a0:f9:
0f:06:55:b9:ef:91:ea:22:c8:cd:e0:4e:f9:ac:cc:e6:2c:ce:
f7:a7:d0:a7:56:ca:f0:a2:74:32:4d:da:f3:d6:9e:61:67:b0:
ce:a4:0b:dc:83:5f:fd:2e:42:bd:56:6a:cc:a4:3c:70:52:37:
47:74:bf:1a:bc:d9:a4:d1:14:4d:6f:4f:21:77:78:78:63:76:
84:17:d9:6b:de:8d:5e:43:35:2b:73:77:eb:b2:7c:64:b5:17:
34:86:57:56:84:90:a5:9c:1b:03:98:a6:99:d3:6b:b2:50:0a:
bf:3d:d7:dc:60:bd:51:60:a2:da:31:37:d7:d0:7d:fc:56:b6:
08:89:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:36 2025 by rpki-client