Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
File: iBmVbdzq4CLP4SPaNzxrERZANo0.mft (raw, json)
Hash identifier: jNyreU5gFjxiNQxxRO+RS1BODEMWnIzwbwdWYaJxzuI=
Subject key identifier: 33:CF:86:E4:6E:FA:8B:F1:59:66:8D:34:CE:BD:9D:C4:DF:38:71:FE
Authority key identifier: 88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D
Certificate issuer: /CN=8819956ddceae022cfe123da373c6b111640368d
Certificate serial: 0194BCE0753F18D7B766F0D8D40F66435203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
Manifest number: 103C
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: JZQSwG4wbJPMZQTbI1xSGViuvto.roa (hash: 7nxSYve4K7+DiIBeaX8vSWVp7u4kFJYyJFHRolTK/UI=)
2: iBmVbdzq4CLP4SPaNzxrERZANo0.crl (hash: a8MwXVLEPcoRf9DC5EYlK7efPML0qZ+o5gsjjCghnKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:75:3f:18:d7:b7:66:f0:d8:d4:0f:66:43:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8819956ddceae022cfe123da373c6b111640368d
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=33cf86e46efa8bf159668d34cebd9dc4df3871fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:71:16:8b:94:d8:d5:e4:0c:d8:d0:f5:c4:
35:48:fb:cd:f7:a5:30:c9:68:0b:7a:06:22:2b:eb:
02:e1:bf:9c:ac:d4:d8:07:46:3f:f7:f7:20:e3:89:
db:15:55:8f:12:31:d7:30:4b:a0:bf:bd:57:93:bf:
2c:2e:4d:cb:8e:71:cf:60:6b:a0:8d:23:fd:1e:2d:
24:40:0d:6a:8a:78:16:89:ab:10:dd:33:57:10:ed:
40:39:65:fe:f6:ec:2c:a5:d6:1f:f0:3d:15:12:40:
19:6c:5c:70:54:ff:78:b2:cf:26:50:7d:14:c0:a9:
09:66:c5:b0:17:c5:22:5b:76:18:b0:6d:eb:eb:2d:
b6:d0:de:e6:7b:2b:00:02:fd:8b:43:c4:2d:60:98:
4e:4d:81:ef:89:00:9c:2d:db:c6:5e:01:02:a5:e1:
8f:87:4b:a1:6c:11:43:d0:b3:ed:e1:e5:2a:2a:fd:
6d:2d:00:a0:d8:f4:c3:3b:dd:96:7c:b2:29:f6:e9:
cd:ce:79:71:ff:11:0e:1e:61:ba:09:02:4a:37:af:
cd:15:83:2f:65:a7:e9:a7:9b:75:93:cb:53:04:51:
ce:92:33:0f:e9:53:97:3f:0b:37:9f:30:10:fd:b5:
14:59:20:26:e4:f3:d1:be:8c:cc:2b:57:ee:df:bb:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:86:E4:6E:FA:8B:F1:59:66:8D:34:CE:BD:9D:C4:DF:38:71:FE
X509v3 Authority Key Identifier:
keyid:88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c8:ab:4d:33:4d:9f:7e:9c:86:1b:d5:41:9f:93:98:b8:c9:
70:be:16:bd:b3:79:bb:6d:8e:4a:ac:59:e4:93:5e:a8:c8:e6:
3b:c4:64:5c:27:01:ba:fb:a2:a1:e1:6e:43:f8:5f:a1:c7:c3:
d7:80:92:30:4c:8c:64:37:fc:23:5d:02:b5:3f:d2:57:de:6f:
18:33:02:4f:d2:5a:01:6f:68:db:91:eb:67:2b:e1:6e:83:ab:
37:bc:23:68:07:b1:ac:a5:dd:22:88:16:cf:ab:81:39:fa:4b:
ff:bf:75:13:dc:c7:55:39:38:1f:bd:01:48:92:24:90:52:02:
b3:f4:4f:2f:d2:87:c0:6d:8e:68:c0:bc:d5:28:87:f7:56:00:
66:14:58:88:2c:3b:3c:bd:4a:81:77:3f:6d:d6:3e:19:cf:0f:
2c:ad:09:d0:f0:db:eb:0a:48:c1:2b:0a:a0:a1:d5:74:97:80:
94:66:74:d9:6c:f4:1b:f8:0f:4c:2e:98:24:6d:81:4c:76:32:
38:fe:c5:2a:ed:ef:60:59:12:14:fb:fd:e0:b2:6d:5e:56:85:
1a:a4:45:d4:88:b4:cf:fa:45:d4:79:0b:73:dc:71:a5:fd:52:
b5:d3:0b:ae:d8:1d:62:d6:02:93:79:1b:a4:ea:fc:82:26:3a:
13:f0:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:05 2025 by rpki-client