Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: Db1z/afCNksvYsTir29Fo4apLB5doIlXDb2SetxOk3Y=
Subject key identifier: 4F:F9:A5:24:C2:46:B0:B6:76:0D:47:4E:8D:90:A8:3E:5D:05:4F:C6
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 0194BC3C2961AD829CFAE795E4856B74C485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 10CB
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: 1YRksy516Pl/u/exOqzvDs7yH8b3KqsnoyhWiuTeRjA=)
2: aEJUX-P3iWzm8iZ2YmNhX1BUm-w.roa (hash: UCW6fp2JBu8X3L8wVEatff2uZp8yn3edNh91K1NyH88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:29:61:ad:82:9c:fa:e7:95:e4:85:6b:74:c4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=4ff9a524c246b0b6760d474e8d90a83e5d054fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:5f:74:09:ee:73:43:40:ee:84:5c:a1:50:
05:93:5e:c3:9d:27:a6:64:4a:1f:e5:7e:71:e3:03:
b6:5b:b1:6d:e2:6c:e8:bc:07:93:ec:f9:1f:9a:33:
41:1d:f6:bc:7a:69:d6:92:c7:c0:2c:8f:48:58:65:
d5:fb:d7:9f:bd:8a:ac:66:6e:48:5a:3c:fb:3d:e3:
7a:13:0c:e4:78:1c:97:a6:c4:be:02:46:d7:e4:b3:
7b:a2:24:c8:f8:fb:21:63:e9:6d:0f:6d:cd:fe:ce:
c2:59:b6:32:14:12:4c:c3:a7:40:43:b1:7c:fa:45:
8f:10:27:e8:75:03:16:fe:d9:fa:3b:35:22:b0:10:
20:e8:be:1e:9f:bb:bd:a9:79:63:93:7f:4a:80:d0:
fa:a9:12:f3:08:f6:58:41:1a:fb:bd:7c:61:12:56:
89:96:3b:f8:6c:47:b8:b5:8f:4e:55:fe:84:7f:27:
9a:24:40:5b:73:ba:4f:fb:75:a8:55:bb:eb:a5:55:
77:22:ec:e4:fa:74:ec:5b:6a:e1:86:e2:1c:31:cb:
7c:59:7f:82:cc:a1:ff:55:4c:10:43:c0:fa:06:46:
93:15:45:d9:d9:25:d6:60:db:d8:72:19:2d:0b:64:
cf:ec:9d:e8:3e:24:6e:e1:64:fe:d5:15:ff:12:32:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F9:A5:24:C2:46:B0:B6:76:0D:47:4E:8D:90:A8:3E:5D:05:4F:C6
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6b:92:c0:b0:32:76:54:47:d3:b2:5a:82:01:2e:45:83:bc:
22:0d:61:3c:5a:7d:c7:98:6a:e2:36:dc:0c:00:70:fd:86:bc:
57:6c:1c:f6:52:2c:1d:92:df:e0:f9:9c:e5:8f:1d:81:6f:c0:
00:dd:b3:de:ad:86:2f:fb:9f:88:64:58:12:fe:74:1e:ab:85:
42:9c:a2:63:67:ec:12:5c:5d:9b:db:02:1b:ce:99:be:c2:14:
fa:1c:49:17:dd:ae:9e:ab:cb:83:b4:fe:2a:9d:1d:06:e7:57:
60:45:2b:a6:f7:5f:46:44:32:56:7c:f1:79:59:77:f1:b5:6f:
f1:e2:c7:23:36:70:c9:b7:1b:36:9b:81:8f:a9:27:3e:4c:d3:
8a:df:59:19:0d:62:1c:7a:8a:db:a8:31:cd:ae:62:2d:d0:ff:
38:08:41:9d:99:9a:82:30:44:64:74:9b:eb:c3:bf:ab:35:c7:
b4:d5:08:76:4b:90:c0:19:f3:23:80:4f:92:c1:c2:32:92:df:
34:b0:a8:8c:91:fd:9b:28:72:fb:1f:a8:fb:08:cf:a2:63:a0:
c7:66:50:34:68:52:fb:5a:96:b5:f4:aa:7f:f1:74:2e:75:0c:
7c:31:49:25:f0:f0:e1:1a:a6:84:6c:cf:b7:50:16:04:a5:f7:
8a:9b:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:53:58 2025 by rpki-client