Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json)
Hash identifier: ot8E1e8rH4rE3DfA2iGQLpHKz/8cBIJKvkM1+9krsfU=
Subject key identifier: 48:89:A2:C5:3B:95:B3:AB:E0:6E:9A:6C:54:76:14:26:16:AC:BF:3F
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0194BD4E8E14707D2BD1F42E1B9DFBCF6B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
Manifest number: 1409
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: 5rIeuHWtH8yu4biA9JtwWPp6MuE.roa (hash: siMvcky3cvMun2YkaQXVSYL1TTM6RnbrDQWn8L9dEp0=)
2: I25027nvCvvxspQIMA-_-29u_c8.roa (hash: c8OueX1EGFj7ydd80sYSa+JEqyDmMH4B/vwcOtonhuw=)
3: I8gT2ozGfRGoAfq3xoWWz2hkzPc.roa (hash: JuwWXXoUzp/KXgYqvxW04jiRY2U2W4HODovHm1apUSM=)
4: JuflCKY-Mb7BlQudMjqutisHkO0.roa (hash: 8TAVjWPKryefk6C3xQCj3q5ZBmjPOTBTdzadDKXxGwM=)
5: PSTA7aBO3VYB2zMpMImeOQX4TxE.roa (hash: KhNu39d0hMZQeHsSSDypoBQ2uQz6//kc0yiRwmUN5AM=)
6: S-j8KrF9-Z7EgA1I4gr1JYpc8Ok.roa (hash: eZK9HJiCpN6lVubG/bQi7DGgdx+1nKeyi2v0Mer4MLk=)
7: bCDR_VakZN9P1SLjLv5dASNlQHQ.roa (hash: 8P6SAAct3v3ggzTHoy70AVMzJ0yoV1oRHXzBMv0Uajk=)
8: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=)
9: eI9F_LSb3X4NO_PNYUjLUxgrwqc.roa (hash: eKfLdAfKn4XzQd6Pr6XXZ6luO/xNC4ppwlNyAMVAidE=)
10: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: HndWjrRhurz1kT5bp+VpFpMmF1y1/hoFD29iSc6Ix18=)
11: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=)
12: n0aetbv1kdrTGLwx_MOdeRwsltg.roa (hash: 83SMmnuOZ/9x2wOey39f5QXGhDuZJTHXwPmcJrqnbp4=)
13: qNmo9ErwvGzB7-gtURMQyOE2DUI.roa (hash: uBNPGZq3r2haanNNNROjCkxdwQgouK/Y3JytQpmCLT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8e:14:70:7d:2b:d1:f4:2e:1b:9d:fb:cf:6b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=4889a2c53b95b3abe06e9a6c5476142616acbf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:f8:0b:60:57:f1:82:72:c5:44:02:da:c2:
c0:21:79:06:1c:ef:01:5b:0d:14:2f:22:30:23:71:
03:ab:3a:87:14:4d:74:fe:ea:1b:52:e5:24:c2:7b:
04:d4:22:b7:5d:85:eb:a2:92:7a:e3:fa:e0:aa:b6:
7a:7f:11:c0:81:41:d8:a2:2e:f4:04:c0:de:ee:9e:
fa:e7:92:ff:78:9b:c6:d2:33:5d:c6:f2:9c:68:8a:
c9:64:04:86:4a:0a:a9:dc:20:0e:ed:d6:78:8f:f8:
0a:b3:43:6e:19:40:eb:64:6b:49:5f:9e:5b:de:cd:
e8:fe:e8:b3:01:9b:a3:6e:43:1b:d0:0d:19:d0:c4:
1a:b5:16:81:9d:31:70:4d:cd:a1:2f:36:c3:ef:70:
44:b1:08:b1:25:c7:d7:65:53:e4:f7:f9:83:23:ee:
23:af:b0:d5:fc:28:9f:c8:8f:62:7c:74:1b:5c:ed:
37:2f:24:ec:65:44:b7:c0:dc:f9:2f:27:e1:fe:78:
32:89:69:d4:2d:96:ca:93:e0:d3:a8:60:13:63:e3:
8e:2e:77:15:15:0b:db:66:ef:51:d0:e0:70:64:ef:
85:58:75:e0:e1:5b:7e:ce:19:4c:28:54:50:99:a2:
00:9e:3f:2f:44:61:2a:20:3e:6e:33:06:b3:9a:da:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:A2:C5:3B:95:B3:AB:E0:6E:9A:6C:54:76:14:26:16:AC:BF:3F
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9f:30:09:e8:ab:85:a1:c8:32:09:80:03:15:52:bc:87:17:
2d:4d:70:6c:d4:67:15:e3:46:b6:f6:0b:18:c7:9e:7d:95:67:
55:87:8e:1d:ec:00:14:0e:85:79:ba:a6:e2:9c:32:45:b5:d8:
2f:1b:11:ea:9b:55:cd:1b:74:5e:1b:f8:2f:ca:5e:b9:ce:3f:
88:07:65:a8:d9:62:64:d4:eb:e6:a2:e3:0b:0b:35:29:46:6b:
32:f7:74:87:f6:ea:83:bb:f7:c9:99:35:d6:7b:9f:e5:4b:3a:
d2:0b:d0:31:51:34:52:5d:e9:c5:ed:4b:ca:18:dc:de:fe:2a:
89:7f:c0:15:f0:be:99:ad:00:b4:2c:f3:b0:c9:c3:bf:d8:1d:
c3:54:d7:12:58:68:ac:d0:66:a9:e4:1a:4b:64:d2:0f:be:53:
9a:48:55:69:67:15:33:7b:6a:ba:6e:a9:ad:3f:a6:e6:0f:81:
18:9b:0d:d2:49:01:fb:a7:b9:f5:c4:cd:cf:79:92:4f:30:b6:
32:ae:d3:1d:8c:7c:85:48:c3:6e:ca:81:d0:ad:cc:8a:db:ca:
cc:1d:68:9a:bd:c0:01:d7:8b:f7:69:31:8b:e7:c0:e6:fb:ff:
76:cb:0b:66:e2:76:5a:11:47:b7:46:d2:32:7f:70:5d:45:05:
6c:22:45:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:43 2025 by rpki-client