Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
File: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft (raw, json)
Hash identifier: uk+JKYVK+LtovpDAlNcW4OQJlw13pmazAyLkjQXuQjg=
Subject key identifier: 4F:BE:CC:F0:05:AA:BE:AA:60:03:C9:4F:3C:69:44:AC:A8:F6:4D:D4
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Certificate issuer: /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial: 0194BC0516537B22ED9C378C676F68A0104E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
Manifest number: 1066
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl (hash: 5SyWQuzfRB6SvTc7SGqDmSTVZgEK54JubjOIcBfw4oU=)
2: vWNF9c9xh0UQ-FU-UmVlKKmFXu0.roa (hash: 6rkEiKqMQhH3x9WDxfo0uMKCtMaKKNiS0hRACYb4UZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:53:7b:22:ed:9c:37:8c:67:6f:68:a0:10:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=4fbeccf005aabeaa6003c94f3c6944aca8f64dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:0c:d7:23:c7:46:5c:ad:b2:87:5f:52:d5:
1e:28:6f:c0:a6:7e:7e:a7:7c:2f:21:c3:fd:8b:6e:
31:00:0b:d5:88:40:ff:c7:09:eb:80:a6:38:40:ef:
25:b5:fc:4d:17:b6:4b:99:d8:24:33:88:8f:0f:d3:
2d:9f:61:b1:17:87:90:71:e5:e3:c5:2b:24:cd:23:
6d:b1:4e:53:81:09:99:21:b6:1a:9a:f0:66:10:8e:
5d:03:f9:1c:93:44:c5:19:9e:87:62:36:08:7d:df:
b9:6e:fc:ee:76:3c:a2:59:1c:cc:90:1a:6d:b3:cc:
67:bd:5d:b7:52:fd:47:a6:bd:30:ad:47:83:c3:bb:
c2:3f:a4:80:47:b0:12:7e:85:59:3b:c3:90:95:df:
a7:e4:17:58:91:46:72:da:a3:aa:3e:89:bb:93:2f:
64:2a:1d:a5:3d:0c:ae:ff:53:5d:91:11:cb:c4:97:
a7:96:6e:3c:98:a2:9e:02:e9:31:55:86:d5:15:b3:
e0:ef:8e:a0:5f:ee:0f:d4:63:d7:34:fa:b7:d1:62:
9f:71:90:36:ef:5b:72:27:eb:b9:b3:64:20:4c:d3:
42:fa:73:a0:f6:a9:07:ba:b4:8c:b6:06:35:65:39:
d9:e6:8e:80:84:41:c6:2d:bc:60:cd:0a:82:8c:c5:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:CC:F0:05:AA:BE:AA:60:03:C9:4F:3C:69:44:AC:A8:F6:4D:D4
X509v3 Authority Key Identifier:
keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1b:5c:d2:38:4c:b7:f1:68:ed:d3:e5:cb:61:bd:2f:81:80:
7c:ca:68:ef:ef:cc:ac:a0:b0:0a:f7:04:57:64:2d:33:8d:51:
c0:ec:b0:ca:8b:01:ee:53:c5:18:2a:7c:16:f3:15:1b:06:a8:
07:a7:92:a1:80:9d:71:41:2e:68:e3:30:b3:30:68:a4:f8:ff:
c5:54:ef:af:63:1f:a3:41:84:16:01:22:d9:79:4d:06:4e:7e:
ba:30:2a:ce:72:b8:5e:6c:22:8e:5c:af:0f:18:96:e1:b1:5f:
17:92:d9:9f:43:b2:96:71:9e:91:f4:20:b9:d6:e3:a2:21:11:
69:cf:4f:70:5c:f5:1e:70:70:0c:13:91:41:70:d7:0c:20:3d:
51:62:18:65:51:63:db:a8:7b:ad:b4:d6:bb:fa:19:b9:ac:ca:
17:ed:97:c3:c2:fc:a3:b7:1e:7d:c7:c0:80:ad:2b:16:ae:6c:
f9:d1:06:e9:c7:17:ae:10:5f:aa:60:c9:0f:6c:a0:27:4d:b4:
04:3e:0b:db:fa:68:29:45:ef:f5:d4:40:5d:1d:65:82:c3:b3:
fa:87:c4:a2:e1:71:2b:c9:b0:69:da:e0:f9:af:96:2f:42:e0:
97:88:4e:cc:43:f7:96:d1:ca:e8:f7:64:e5:c3:24:e5:c5:1a:
6d:b2:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:19:12 2025 by rpki-client