Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: sIfSmnJ+SBXQTQkb0rdZdOZqU+fJsOjqxNO+2lhJGGw=
Subject key identifier: 28:66:59:BF:AB:B6:25:3A:32:6B:F5:CE:92:7F:30:E8:8B:4C:EF:81
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 0194BD8537D96BCF153EB20A164BF5DB8CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 0E36
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: KwomHtAHnCM0D-yGdW_0Sf3mopc.roa (hash: nJuUP0j6H239g1R7GMJyKq0zviXnK+AhK7Q4U43dyg4=)
2: ZYlcf7X6lFUqPdlZgjx7h6pY7f0.roa (hash: Z91lhusvfId6xXTKVa6gm5qmkQJNcO8M7YoIqY37LFU=)
3: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: Y21lwCvEuJIpLx1Sg/veuFfWv83zhq18G/B8XPJl93g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:d9:6b:cf:15:3e:b2:0a:16:4b:f5:db:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=286659bfabb6253a326bf5ce927f30e88b4cef81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:99:1d:4d:8a:0a:76:4b:8f:32:bf:91:e5:
c3:20:66:0d:39:26:85:ba:4d:f5:17:87:5b:31:d6:
34:ab:d4:9a:a1:d0:ad:9b:1b:6d:37:b1:33:78:43:
cf:cd:96:38:55:fd:32:49:38:c3:95:ba:21:de:8d:
f2:67:4a:5d:cc:f9:ed:22:87:a8:f5:f3:c1:17:ae:
7c:40:0d:65:bc:fc:f9:fd:d1:fe:19:db:9a:67:ba:
de:dd:6f:e0:c5:1b:a5:9d:1e:cb:3f:ee:48:a4:3c:
46:0c:a4:eb:b0:dd:c0:7f:bf:22:db:8b:2b:23:b8:
6d:87:5e:d4:bc:b7:0d:ac:d2:b2:45:fb:c0:a3:ad:
37:f8:02:d7:b3:bc:23:f0:11:ec:e1:51:42:95:d5:
58:e4:2e:36:f1:37:ad:ea:a4:d8:18:1c:ae:29:1b:
19:84:e6:fe:76:53:5b:0b:11:1f:a0:cd:59:e0:8d:
a7:ee:98:28:a0:8e:9c:69:2e:25:bf:cb:95:be:03:
29:7b:90:4b:7d:7b:80:6f:c7:38:dd:c0:90:f2:bc:
54:33:55:48:95:19:56:6e:8f:41:69:85:9c:b2:83:
13:fc:84:a1:38:da:d9:9e:bb:a4:a4:9c:fc:87:40:
da:42:af:bb:52:7e:8c:9d:2a:dd:62:99:27:3b:09:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:66:59:BF:AB:B6:25:3A:32:6B:F5:CE:92:7F:30:E8:8B:4C:EF:81
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b1:b0:2d:6d:93:68:ac:34:7c:6a:a4:61:72:f9:89:1f:8c:
a9:d8:a0:f9:c4:ec:12:94:5f:a9:5b:e2:8e:3b:9d:3e:51:c7:
e8:38:85:27:f8:ff:d4:cd:66:6c:ec:5a:84:e3:21:e4:c6:4f:
94:43:f8:7c:e5:5d:42:cf:43:5e:67:86:29:ea:22:ce:04:04:
f2:c2:52:65:28:86:b3:d6:c0:fa:b5:a4:ef:e3:b4:a3:11:e8:
50:9e:e8:41:21:56:1d:be:2e:af:cf:9c:4b:65:5b:77:f5:90:
1a:88:5f:d9:b8:6c:f2:af:6f:f5:b1:c7:3f:d8:1c:8f:6d:01:
46:5a:6e:b2:45:d9:c6:51:82:54:39:e3:c2:6c:2f:50:92:72:
d0:e3:fc:06:52:01:06:04:3c:31:18:d9:9b:d8:02:5d:e0:4a:
8b:9d:c9:db:65:fa:2d:79:67:82:72:06:0e:73:bb:5f:23:43:
d4:8f:c4:55:46:f2:56:09:ca:24:a4:da:0c:02:ae:0a:f7:19:
20:94:61:df:55:8e:51:c6:32:40:6e:8f:cf:ea:93:6a:4a:2d:
15:94:49:3e:8b:a8:78:1e:6f:ad:32:71:4f:6d:f3:7b:4c:70:
2d:2d:dd:37:ea:d2:97:8c:2d:23:b6:53:a5:74:92:bc:92:60:
af:24:95:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:40 2025 by rpki-client