Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
File: iy4NGE_1UzdchHw41N_NzeEhn9M.mft (raw, json)
Hash identifier: 534LVWGCx+Vn5RgLaEuI/vXx5Keg6VUJkXTneQioGcM=
Subject key identifier: B9:5C:86:2F:88:06:24:39:74:33:50:8B:C4:71:3A:74:D3:40:EA:66
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 0194BC04AA0AFD98D4EDAA1353D1492B0014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
Manifest number: 0E18
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: QhkZtHC-GArPwLlJouzdeKz4vt4.roa (hash: rYjbbMwu5klxqw8Z2ve99sKM+e3vXg5MSUYMGvpUeAw=)
2: ek-bgKo0V51DyYfh9FUoM-CKgO8.roa (hash: aPF/FaJvXVYEUFEnZVNFtJQGYrjiMzQAcdLekCScrys=)
3: iy4NGE_1UzdchHw41N_NzeEhn9M.crl (hash: m/ar9t0Bbzll9ixs2vM/C7laOFHPG6+eOW9nKZRGDVg=)
4: jjb9-8iXZGVpIaiYLG1b0CgDmDQ.roa (hash: aXW8Frrn0CPPaBr+F5uNOjUESeabRZzpMHqeAGAbYRY=)
5: tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa (hash: A8rtdyJ9paAEirlby1av+cQ7baYrwbelcvz/vsvt2z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:aa:0a:fd:98:d4:ed:aa:13:53:d1:49:2b:00:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=b95c862f880624397433508bc4713a74d340ea66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:03:8f:bb:51:b0:eb:3c:94:2a:d4:28:d9:
01:46:f2:b0:de:8c:6b:ab:9b:b2:46:40:93:b6:54:
5c:cb:64:b4:7e:8b:88:e6:7e:58:9d:6d:17:cb:bd:
c1:f7:4b:5c:da:41:cb:af:25:ac:fa:7e:2e:64:23:
6a:8b:33:b5:82:95:7d:57:4b:c1:dd:88:42:81:fb:
07:6a:d1:b4:39:3e:9f:b6:b4:83:04:9c:a3:85:56:
66:79:ff:8e:c1:b6:c3:d6:45:58:3e:06:7a:8f:29:
84:82:bb:01:6f:b6:03:6f:f8:4c:a7:25:ce:6e:81:
36:03:80:53:c2:78:2e:7f:3b:5c:ac:8e:78:d0:70:
e4:72:ce:cf:1d:23:47:58:df:d4:38:44:bb:d2:e8:
bf:ae:39:d5:83:c0:76:b3:8d:d4:ad:a4:e2:34:b5:
6b:21:d6:4d:92:06:8b:00:e2:5d:43:33:9e:eb:e6:
00:2b:c9:60:cd:ae:fa:86:03:53:a4:6f:09:54:c7:
3c:ad:61:38:eb:fb:54:30:50:0e:b5:e2:a6:e2:a1:
2f:4a:6c:48:5f:d3:af:8c:56:28:da:39:d1:67:db:
e6:84:95:d0:56:b8:d6:7f:22:ae:6f:a5:6b:ec:d0:
fe:d1:f0:b2:dc:2b:ba:97:46:65:78:06:9f:21:0e:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5C:86:2F:88:06:24:39:74:33:50:8B:C4:71:3A:74:D3:40:EA:66
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bb:33:23:9f:ac:1c:8c:fb:5c:47:89:ab:94:8a:d9:9f:ae:
cc:a2:95:d7:03:69:a8:fb:5f:dc:e0:4e:34:31:39:87:fa:f4:
fa:71:14:49:c9:ae:1a:ae:18:7f:9c:c5:29:18:ea:65:78:ca:
1c:b2:b0:71:08:c1:08:91:b2:65:a9:63:c0:79:eb:e8:b6:56:
6b:ac:64:68:77:ae:32:46:b1:80:0c:12:f1:eb:ed:0d:a9:25:
7a:d7:c2:44:50:7f:4a:a0:41:17:ca:ee:5c:ef:41:c1:91:1b:
32:0f:22:f1:86:58:a3:8d:7b:e9:c7:48:0c:ce:6f:50:8b:21:
7c:1f:6c:75:47:72:0a:ce:23:64:77:e4:77:0e:1f:b0:5f:69:
57:1e:20:98:6e:0a:01:47:3a:0e:2e:4d:fd:f4:ec:c6:24:38:
a7:9b:db:de:b4:75:d7:52:83:69:2b:2f:02:f2:bb:bc:33:fe:
a1:a7:5d:ad:3e:42:45:49:58:a7:48:44:09:85:c8:5a:60:fa:
ea:fe:0f:9e:30:ba:7e:5f:28:51:df:21:06:f2:ff:15:b3:25:
03:21:b8:9a:9c:f9:7c:a7:c9:69:10:ae:51:4e:a0:b0:1c:a3:
3e:62:18:91:41:c5:98:57:d2:aa:5e:5c:ce:2a:da:aa:d8:59:
dd:56:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:49 2025 by rpki-client