Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier: iMh+V6jtIJPhRAFzoAISqeqHORW0zMTd6cXFRsfmPRI=
Subject key identifier: 58:07:CD:B5:55:43:A8:9A:ED:83:31:7F:C8:FF:F8:AE:9D:DE:5A:1E
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial: 0194BD855B508A24BB7AE22D73501C916AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number: 06EE
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: J6ULYmQdo8ydL8m3CjWf7q4pmblfWnuT642g8vn9hpw=)
2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5b:50:8a:24:bb:7a:e2:2d:73:50:1c:91:6a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=5807cdb55543a89aed83317fc8fff8ae9dde5a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:00:3f:d8:05:09:d8:28:c9:66:b4:72:04:
d3:6a:f1:c4:b7:93:b0:03:a5:44:c6:07:54:d1:94:
64:86:b0:c4:2c:6a:36:67:d1:1b:4e:50:4f:0c:52:
43:42:ae:5f:8f:b4:97:09:66:8c:4b:9f:b8:79:a9:
65:4f:f1:42:a7:8f:57:71:a0:f8:e5:61:1f:98:36:
05:00:76:3c:80:c5:5c:70:1d:41:af:61:af:fe:1e:
a7:2b:da:3a:42:6a:7e:bb:f4:01:e5:8d:77:d4:ce:
c2:5d:af:ce:04:20:0d:18:6f:23:30:d5:c3:ee:8e:
66:39:13:4d:63:c0:69:98:ab:7e:36:8d:7c:a8:a0:
ac:6c:0f:90:5e:68:d1:81:ad:a2:a4:b3:15:2d:f3:
95:8e:24:6e:93:8a:25:b6:5a:4b:2c:42:66:d4:16:
f0:26:49:bb:e9:0e:76:bd:23:0b:e9:bc:9f:ff:e3:
84:bf:5e:65:93:0e:1c:77:fb:11:6c:9a:81:dc:e5:
a6:5e:6c:8b:fd:eb:13:f1:c7:db:1c:23:a9:03:e7:
86:7b:a8:a4:d5:4f:25:3c:a0:77:fd:c4:fd:2a:48:
dd:c0:06:1b:07:33:64:75:98:db:01:53:bd:14:84:
77:a8:6b:fa:ad:62:69:86:c3:c0:87:c2:de:2d:2d:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:CD:B5:55:43:A8:9A:ED:83:31:7F:C8:FF:F8:AE:9D:DE:5A:1E
X509v3 Authority Key Identifier:
keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f4:34:fb:20:bb:05:4d:6d:cb:a2:eb:25:f9:a1:30:99:a6:
e6:4c:d6:ce:5e:bb:4b:e8:b9:f7:00:5d:88:16:ad:ec:06:17:
3c:ae:c8:01:de:e4:41:7b:49:a7:8d:fb:0f:6e:fd:3f:82:59:
9c:45:4e:34:33:80:72:8f:48:d3:3a:63:52:30:7f:4f:bf:2a:
5f:1e:51:91:6d:0d:dc:a4:27:bd:ab:53:aa:ba:df:16:38:9d:
df:84:c2:a9:b9:bb:4e:41:96:c7:fc:0c:fb:9b:00:00:40:c8:
96:a6:10:ab:47:be:b0:b6:76:9b:7e:62:65:7c:f2:80:b9:d5:
d6:3e:0a:86:74:d5:df:dc:c9:f7:cf:63:05:c4:47:d6:8d:0e:
9d:e6:6e:1c:e9:db:96:f8:b3:b6:b6:d9:ec:3b:75:e4:e6:4c:
01:ff:e4:b7:8a:7a:ba:0d:26:11:48:e2:93:da:07:be:b4:bf:
1c:ef:29:b7:14:ca:17:69:88:2c:f2:60:36:46:a7:cc:b3:5a:
58:3f:2d:61:bd:0c:6f:ef:c5:a0:e8:34:0e:94:ea:81:f1:18:
09:63:ea:01:8f:26:de:46:c3:32:73:62:60:60:3a:ab:01:20:
11:88:43:2a:61:e6:14:e3:b5:5a:dd:8a:74:e0:00:c1:b1:73:
20:dd:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:07 2025 by rpki-client