Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: 21qaPD/3g7HNih9V/K1tVIoPvjEnsq2c0/riHJm8tXM=
Subject key identifier: 7F:80:0B:F5:4D:37:A7:ED:40:1B:D8:73:74:68:80:7B:5B:B3:0F:F4
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 0194BD4E4495280DA69BD2FFA2F5F100B629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 137E
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: rlt4sL91jPvmnf1iNRtnFaiuTVnIn1hhEyI0mqsupLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:44:95:28:0d:a6:9b:d2:ff:a2:f5:f1:00:b6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=7f800bf54d37a7ed401bd8737468807b5bb30ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:06:33:c3:c2:f7:08:83:29:60:86:78:07:19:
22:e8:ca:7f:56:68:8b:5e:7d:6f:47:59:6c:4c:b5:
4c:e5:69:a1:3e:b1:79:48:3f:9d:1d:e5:e7:fb:f5:
f2:7e:ef:37:02:8d:ba:ee:ad:c8:73:2d:74:82:14:
38:56:13:1a:44:a6:27:cb:8b:00:d4:e4:0a:04:36:
e5:30:30:3a:9e:b3:d9:ac:6d:20:31:ef:28:6d:3a:
07:3a:b6:b2:a4:11:31:71:82:2e:8f:2d:9b:7e:68:
3a:fe:0b:96:e9:ab:fa:a3:e6:2c:86:d6:d2:3c:f8:
8d:c3:c2:c2:61:27:3c:bf:8f:76:88:44:f9:d4:9b:
98:00:d3:ed:37:dc:48:9d:17:1b:2d:0a:0d:1f:ef:
0c:6a:62:44:90:5d:99:49:fe:d2:a1:e4:c8:c2:fd:
53:f1:17:69:a9:8c:4e:e0:1f:79:e4:e7:3d:d0:24:
f0:6f:05:ba:83:cd:8a:c4:a5:10:66:95:3d:d7:db:
e3:f7:5a:92:d1:0f:7f:1c:98:12:92:c7:01:04:5b:
f9:bc:72:f3:57:79:d6:16:cf:38:a7:ad:a7:32:e3:
db:f3:e1:28:91:7a:01:32:c2:ac:16:0b:90:42:db:
88:9f:cc:6a:19:6d:25:c9:b8:7c:96:cd:24:0e:8f:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:0B:F5:4D:37:A7:ED:40:1B:D8:73:74:68:80:7B:5B:B3:0F:F4
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c9:4b:be:e9:ed:80:3c:b0:5c:ed:cd:82:4b:b0:18:09:ea:
af:a2:db:bb:9d:bf:63:0b:fc:4d:16:8a:ba:95:69:8d:a6:7d:
cc:2c:30:d1:05:b1:0f:92:40:46:ed:f9:ce:46:8d:94:08:77:
5b:b9:17:3a:7e:22:21:cc:8b:a0:48:8f:80:f8:1d:ca:c3:85:
b6:57:4e:fa:49:d2:e3:42:1c:fd:24:c0:6d:18:e7:00:e3:01:
9b:d1:e2:59:7b:3b:a4:70:d8:cf:1d:88:97:24:ad:e4:d4:34:
3c:5d:95:f0:e6:f9:b7:93:cf:89:71:63:8c:6b:34:ea:23:96:
94:cf:2d:a3:19:e6:f1:46:d2:80:99:db:ed:7e:38:15:b0:4f:
25:76:fc:88:d5:b6:d3:11:4c:ba:bd:da:93:c7:f4:b2:be:5e:
a9:bf:50:a6:16:91:c3:ad:2e:db:f8:76:29:47:a9:d3:58:a4:
db:91:9a:a3:67:80:6f:4f:a8:c9:76:4e:2a:40:a5:0d:4a:e6:
23:83:00:91:73:c4:e1:b8:c5:74:53:86:02:2d:80:9b:5c:0f:
a9:9f:4f:f6:8c:fe:93:fc:fe:fc:2a:a2:03:29:02:f5:36:15:
58:bb:67:8c:0b:17:93:ad:2e:41:69:b2:e5:99:1a:02:54:f5:
e7:83:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:11 2025 by rpki-client