Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: oOXbJynh1j4dViiaDKfsijWcWXcP+mlk3EMBnpYXsDE=
Subject key identifier: E9:A9:4E:06:63:55:2E:7F:BD:F0:A3:52:5F:AC:7F:D6:57:3D:04:4F
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 0194BBCDF7684BA9BAE30660E3871512AEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 054C
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=)
2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: vTTYHZjDJ1WSLJoJ2hgPvtx3dNK225Xo0PDytU6PL70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f7:68:4b:a9:ba:e3:06:60:e3:87:15:12:ae:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=e9a94e0663552e7fbdf0a3525fac7fd6573d044f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:ef:2d:7f:1d:23:ee:ff:e8:d4:c9:0e:95:
d0:ae:c9:2c:7b:4b:f6:2a:d0:61:75:84:24:bc:1c:
6f:f4:48:44:a1:c3:67:ec:c8:5f:64:b1:b9:a9:f9:
90:82:d0:64:be:8b:ed:c2:70:28:80:d5:f0:f9:72:
a3:ea:24:72:9c:b1:2a:da:7c:d2:5a:e4:8e:c5:88:
0b:2c:6d:36:0f:1e:64:31:be:84:33:a6:a7:60:3b:
5e:4b:1f:c0:32:81:0c:2b:9c:46:f4:e3:24:80:02:
03:ce:28:2e:0c:0c:33:ee:cd:94:de:cd:be:7e:80:
0a:a0:00:1b:29:c5:ed:ac:e1:1f:bd:15:35:79:42:
af:7a:ea:6e:df:34:0c:27:33:f4:db:5c:4d:db:12:
fa:9b:da:ab:b2:0f:2c:49:3a:77:69:74:05:ae:69:
da:06:20:ce:95:4e:6e:af:a0:21:a1:85:85:da:83:
3f:59:32:a5:66:ed:97:35:61:00:5f:92:22:4a:c0:
fd:e7:04:74:33:4d:f3:37:c1:3e:c4:8c:4a:74:4f:
0f:69:b4:11:7b:72:a8:64:8e:a4:b2:97:e8:7d:5c:
75:fc:d4:73:19:fb:e0:36:f4:8b:a6:a4:be:b0:04:
33:40:c8:d5:ae:e3:44:15:97:d8:d6:39:b7:b8:bc:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:4E:06:63:55:2E:7F:BD:F0:A3:52:5F:AC:7F:D6:57:3D:04:4F
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:5b:d2:b6:9e:8a:07:e0:40:9d:5d:3b:0d:2c:b7:be:2f:
58:fa:b1:1e:73:7a:9e:4f:81:51:40:37:52:91:5d:3a:62:ba:
71:9e:67:99:24:56:06:74:14:b5:a7:c9:20:da:8d:8f:b1:33:
6c:a3:8e:2c:7b:4e:38:83:1c:5d:1e:08:6b:71:62:69:23:e7:
30:42:05:7b:37:3c:2d:13:97:ce:ad:df:3e:b9:ad:a0:bd:fc:
01:6c:75:ea:47:69:87:03:c0:74:8c:c3:76:ba:53:18:9f:68:
33:ae:ba:20:09:81:83:66:3c:d2:0c:ec:6f:e5:81:d6:57:34:
62:57:49:1a:44:0b:17:2d:27:6c:5b:c8:62:1f:9d:20:48:35:
f6:df:67:57:89:f0:98:8b:d6:4c:01:bf:32:f8:58:9d:04:5a:
11:65:aa:22:5f:34:b4:6e:0c:98:89:44:84:74:59:54:d5:4e:
af:a5:39:1f:7d:68:9f:d0:72:53:78:df:db:a2:9e:03:9d:b9:
bf:19:ff:f7:6c:42:c5:28:be:e1:cf:70:d8:38:c4:68:2c:b4:
a6:ae:45:ca:07:02:8b:30:22:ad:b6:d0:fd:f5:9f:d6:fe:a3:
b6:13:1b:94:f7:74:9f:3a:b6:e3:4b:66:85:34:5e:73:ac:1a:
ed:f2:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:42 2025 by rpki-client