Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: fwFyptv7OZ8qxueKPfqjJ9wur2A2iCLCIVj2RYrPaGI=
Subject key identifier: CA:36:DF:A6:4B:F3:5F:44:5E:59:31:BC:FC:9E:A4:A9:2D:D8:4F:21
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 0194BBCE590FF8EE823FAD05548A9F48EAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 11DF
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: 2F7ofuJQyWSjh9v4jHA6QJBPz2cT9WeqScpQOT/41ZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:0f:f8:ee:82:3f:ad:05:54:8a:9f:48:ea:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=ca36dfa64bf35f445e5931bcfc9ea4a92dd84f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:6c:ee:52:e9:14:c2:23:18:14:61:51:55:
17:af:3d:4f:bc:4c:04:9d:97:15:b7:ae:63:06:c6:
b6:14:70:c5:ca:d8:2e:93:5f:6c:69:67:9b:6c:f8:
03:61:9d:e0:2a:1b:8c:b1:83:ce:f1:bf:46:70:58:
40:4d:0e:fa:f1:ec:1d:93:ee:36:ba:79:5f:6c:65:
9b:0d:49:9e:bf:43:8e:c3:78:f2:42:3b:c9:1d:3a:
bb:a5:3c:f4:1f:03:b4:e2:85:66:52:6f:59:95:0b:
21:f6:0e:1a:fc:81:8d:49:69:30:5d:b0:d8:60:df:
61:d0:a5:50:90:22:a1:97:99:6e:7c:df:d1:bd:ab:
61:b7:f5:a9:fc:0e:ec:26:82:a0:d1:64:df:5a:56:
75:f3:83:d6:81:e2:c0:4e:ca:d3:b1:8d:2e:84:db:
cf:a3:0b:cd:ed:b3:09:ad:ff:e4:1d:62:30:c4:3c:
b4:f5:b4:57:52:27:7d:c0:38:5d:ce:40:84:a7:5f:
e3:eb:90:7f:ec:ac:80:c5:46:96:34:d8:3f:26:1b:
5a:1b:b6:68:a7:08:76:c7:41:2e:1f:17:b4:21:a7:
c9:98:e5:39:85:e1:18:bf:5e:02:fe:26:b5:ee:3c:
85:61:64:da:31:ab:f9:ff:9c:30:6b:86:30:85:1c:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:DF:A6:4B:F3:5F:44:5E:59:31:BC:FC:9E:A4:A9:2D:D8:4F:21
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:47:0e:78:1f:7a:c2:26:c0:6d:36:b3:82:04:01:b2:fa:4c:
4d:42:a8:8f:59:96:3e:ca:80:2b:e2:6b:e2:aa:11:bb:b8:cb:
b1:67:76:b2:56:17:16:07:11:31:ee:ff:cb:f2:7d:dd:27:a2:
fc:e1:74:ff:27:df:9d:01:28:d1:21:24:a1:3c:00:4a:9e:a1:
72:e0:0f:65:83:f9:3e:e1:9d:26:6f:9b:96:9e:b3:00:80:11:
79:95:5b:db:3c:81:41:9f:b7:10:87:7d:e9:50:17:13:68:8b:
95:d6:a1:e5:68:4e:64:4f:8a:60:84:6a:46:ff:22:f0:2f:6b:
24:86:66:2e:49:b8:37:1a:55:20:c1:b6:61:b7:bc:65:65:12:
39:44:33:c1:e9:96:34:3e:32:ab:8d:cc:1f:f8:3a:69:31:0a:
5c:06:87:a8:29:b3:68:bb:e9:60:08:df:7b:5d:94:1a:a5:1f:
07:a8:fb:5a:c7:a1:da:40:79:11:8f:25:b9:19:47:ea:68:fe:
f4:bf:de:f0:53:03:35:d1:eb:44:98:34:64:d6:3f:37:16:3a:
2c:2d:69:99:2a:7a:20:2c:54:ed:da:64:3c:0d:62:dc:91:d0:
dd:9b:ed:8a:57:fc:b5:b9:d5:5a:33:54:73:a1:10:c3:66:ba:
8a:fa:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:56 2025 by rpki-client