Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File: IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier: 7iJawX6x7kd9Y2TdM7uGhSQ/dfDJDSPTlvQ+zATO4yM=
Subject key identifier: F3:87:EE:2A:C4:1B:8B:8F:C9:9B:A9:21:BC:57:FD:A6:36:7E:01:35
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 0194BCE097E4214585D309E9ED53EB5B9D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number: 1170
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: 89sI7SRW5v40y58f9CXFL4Ce7ph4bzr7U5OcgbD9e/o=)
2: MWwIJyVW-xGM8HHmiPSGu90ysVM.roa (hash: 9euJkhmoCQb1LOfkGIPpqowd4pomSIjB0l7bFL7u4Yg=)
3: PiMCmpetvGyOad9hAP8fiU1Qa8U.roa (hash: W2k0p2aLpcmF1pGu+mKgyVPY0tAWg3LNT6+Z7BuBqqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:e4:21:45:85:d3:09:e9:ed:53:eb:5b:9d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=f387ee2ac41b8b8fc99ba921bc57fda6367e0135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:91:d3:da:9c:36:c7:75:dd:bf:df:da:83:
6f:a2:1a:6b:ed:39:65:7f:03:c7:89:96:6d:0a:bf:
16:e9:d3:9a:d7:e8:f0:7d:6d:7f:2d:27:b3:f7:97:
42:09:c2:85:24:63:b5:5e:a8:ea:85:07:a9:98:c1:
3e:02:04:3c:0d:a5:87:49:eb:46:27:f8:0a:b7:65:
f6:c9:a7:59:e2:6f:b0:22:3a:c7:05:4c:5e:58:36:
2d:2d:64:e2:07:f9:7e:7b:fc:42:58:f9:22:49:b2:
bc:d7:04:17:ee:f6:c6:de:81:a6:bf:a4:28:b9:40:
7d:9e:2c:7a:4b:76:a0:c0:d5:46:de:1b:47:0c:b5:
43:4c:ca:18:b5:68:cb:3c:27:9e:82:3b:29:8b:b8:
bd:9f:72:c4:1c:99:52:e7:f2:9d:2d:79:4f:2f:9d:
e4:7c:64:df:34:71:cb:9c:62:0c:f9:f3:80:5e:6d:
17:77:35:a6:c5:6a:f6:50:62:e4:88:7e:9c:13:74:
3c:df:05:b7:6d:11:a4:a0:00:a4:15:e5:48:32:7d:
c9:ff:0f:31:85:e7:fe:ec:65:78:7b:cc:54:56:62:
ff:88:64:81:ad:9a:52:c2:af:62:de:c5:b5:05:a8:
a3:10:31:6d:e7:52:1e:c6:4b:36:74:02:91:87:c6:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:EE:2A:C4:1B:8B:8F:C9:9B:A9:21:BC:57:FD:A6:36:7E:01:35
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:23:a8:66:d4:80:aa:f9:bb:c8:e9:d4:39:c3:6f:d2:71:ae:
00:7d:83:0f:d0:04:20:ed:ca:70:07:c2:a0:16:4d:51:d1:d7:
6f:81:aa:5a:28:e4:45:6c:3e:2d:82:46:bd:49:36:cd:f3:20:
1c:2f:f7:38:8b:e9:b9:9e:b0:71:b1:ce:a5:c4:89:04:92:8b:
3c:fd:60:c6:1a:07:b6:dd:64:97:34:65:a2:67:da:a4:cc:33:
fd:5c:93:3a:c4:44:d8:a6:0c:fd:98:88:93:03:5e:ab:a5:40:
0b:a4:18:85:fd:42:cf:7d:9e:30:31:4f:79:94:6f:c3:d7:42:
5d:5f:c3:9b:68:2a:1f:84:a2:bd:d0:89:e3:41:9e:48:39:8e:
72:ed:68:62:de:4c:b0:6b:7a:e2:1c:c5:02:fe:59:c2:a7:70:
d0:0b:b3:82:53:cf:d8:e7:6e:ce:d8:a7:cf:ab:25:79:ab:ab:
43:f7:4d:56:de:dd:9f:88:0d:8b:68:f6:2e:25:86:aa:2a:16:
a7:93:5d:ad:b8:39:33:5a:e5:4f:a2:cd:2d:82:e4:97:fc:ac:
8e:2b:98:6d:6b:05:a6:ef:ad:fa:19:c7:d6:02:8c:f1:8b:08:
9b:e3:8d:2d:9e:fd:4d:c1:df:73:0c:e6:59:21:74:dd:bb:28:
b1:91:2a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:50 2025 by rpki-client