Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: 9w4r/j6rIkJhiPPirz2VV1x4qWkr3S65Lnrt6pwgMyg=
Subject key identifier: EA:69:5F:A0:4F:A1:60:0A:05:D6:71:9B:46:14:46:D1:9B:2E:C4:09
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 0194BD8543E0354FD1858DAE17225671836B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 0318
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: R91C9p5s4+funKIOu11UbchO/9VNR9TWW8ijhPUJUS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:e0:35:4f:d1:85:8d:ae:17:22:56:71:83:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=ea695fa04fa1600a05d6719b461446d19b2ec409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:15:c1:09:bc:2c:be:4f:2d:10:8e:21:f3:
ce:47:ee:8a:8e:d7:e0:9c:7e:11:e1:c6:50:d7:27:
d7:ff:98:9a:7e:5d:ce:db:38:c5:1b:1d:87:b7:1b:
40:22:c4:c0:1c:2f:38:5e:24:34:43:be:c1:f0:23:
17:06:3a:f2:41:89:9b:a8:d4:59:34:f3:66:7a:4b:
9c:2c:56:04:8b:96:7e:a1:1e:d1:6b:80:98:a1:f9:
15:2d:82:21:cb:78:f2:e4:13:ca:7c:4b:4c:25:44:
1c:af:f3:e9:90:b7:38:bc:e3:85:c3:c9:7a:83:6a:
d1:0b:4a:55:ee:30:d9:87:4b:9e:3b:a8:c5:31:85:
31:c8:ee:d0:1c:6b:d1:f9:fb:29:40:07:31:93:18:
44:92:42:40:42:9a:65:03:6f:ad:ae:e8:3a:e5:6e:
76:46:b9:f9:7e:cb:ac:34:bd:5e:46:f0:a6:fe:ad:
d1:18:02:76:37:20:15:08:ef:7f:ae:43:09:8f:a4:
7c:28:5b:60:3c:51:e8:75:48:ca:d7:06:33:0f:ea:
12:d3:52:a7:99:5f:c6:cb:b3:a1:d2:1c:30:13:ec:
84:39:2e:f3:f7:12:1e:8f:08:2a:3e:94:9f:c6:e2:
96:e0:bf:49:d2:39:80:19:e8:4a:ef:47:2c:86:be:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:5F:A0:4F:A1:60:0A:05:D6:71:9B:46:14:46:D1:9B:2E:C4:09
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:91:30:69:63:c0:be:5f:81:61:f7:5c:1a:40:a3:1c:f2:
0a:f5:74:de:70:8e:38:39:54:12:ac:74:40:e1:f9:23:25:19:
3e:83:83:92:1c:5c:61:61:d1:16:30:1f:ab:e4:79:78:e0:67:
e9:f3:31:07:a4:3e:20:64:ed:2c:6d:da:b2:3b:ca:86:1a:4e:
d2:f7:51:f3:64:42:39:79:f3:6a:43:7d:f8:07:0f:6c:5b:01:
e3:22:44:fe:2b:07:4f:5f:ab:80:e8:1c:5b:7d:8f:74:3a:e8:
9f:99:d2:f1:ac:9c:a5:7d:62:70:52:f5:9c:7b:14:1e:33:c3:
78:37:5c:1c:3d:9f:60:4e:b5:b9:63:78:a0:04:cd:3d:82:9a:
8c:2e:43:26:93:41:c4:54:f6:0f:d9:73:9f:a5:3f:12:08:2b:
74:a8:fa:7f:0d:ea:1a:5d:42:b1:26:9a:bf:7f:11:63:a6:8c:
15:e8:7f:31:be:ec:c0:1d:3d:de:d6:25:c9:23:8c:ac:48:79:
19:a5:ca:ad:0d:f8:35:d4:88:17:cc:81:31:d2:27:4e:c1:eb:
53:64:60:61:5b:2e:e8:c8:af:cc:d6:8d:51:9c:b0:4c:4b:b0:
2d:97:4d:4c:fa:14:40:b0:38:d7:64:e2:d4:b9:69:fc:0b:45:
68:45:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:06 2025 by rpki-client