Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft (raw, json)
Hash identifier: KTE1psb6t7OOEk5qYasPUHSLJIMXJygLFp/xJfBCr5M=
Subject key identifier: 3C:82:C9:2A:7F:AF:B4:1A:83:9F:DF:4B:62:A6:10:7C:79:77:35:4E
Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Certificate issuer: /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Certificate serial: 0194BC3BFFC84AC1E506897D8D7645152304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
Manifest number: 02D2
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: XBo1pVVrARNWOJzVGLIS7aXEyvs.roa (hash: LHmi+bbPW6X6RSAyxvQlIttnolx/pGqPJGLDRqAXVIU=)
2: iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl (hash: H9J4tSUcs8zSzzxwt/OKNv1HlEt0WOhi3Kcj+9D8iDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ff:c8:4a:c1:e5:06:89:7d:8d:76:45:15:23:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=3c82c92a7fafb41a839fdf4b62a6107c7977354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:d2:e5:f7:11:a1:71:11:ee:63:72:66:c8:
0c:7f:d9:a7:8d:f5:d8:44:19:d9:e0:88:69:64:e6:
f9:fd:fa:3c:8b:0b:80:25:b4:ab:29:93:fb:05:c8:
7d:84:0e:13:38:fe:61:9e:38:79:b8:6e:d1:7b:29:
d4:39:7a:95:e1:ed:76:f0:51:7c:6e:65:de:49:f2:
69:97:90:f4:66:f7:a7:9e:d1:15:d9:40:74:d7:35:
06:c1:7f:72:6f:7f:df:59:24:c0:5b:f9:0b:65:00:
20:07:80:ce:cc:8a:86:bc:2f:a2:a7:a4:11:b5:35:
16:69:c5:4c:ec:0d:28:48:82:26:0c:40:5d:1c:65:
a6:1e:5a:bc:46:01:c4:95:87:c3:c5:aa:50:73:3b:
7a:7e:0c:d7:6b:77:2d:2d:7b:cc:71:a2:48:46:02:
4f:be:2f:a3:13:f9:9c:91:2d:b4:76:5d:67:67:aa:
e3:b0:10:bb:a3:47:31:a5:d5:92:4c:57:36:80:a8:
8b:5b:5b:b1:63:11:ae:7e:f8:1b:c6:70:2a:92:1a:
0f:0e:f8:9a:81:f5:df:30:6b:b3:cf:dd:0e:05:78:
a7:77:e1:c9:f2:88:5e:fa:b7:9b:75:a6:4d:91:02:
97:5e:b4:5f:bb:00:fd:09:95:01:e5:e5:2f:b4:7b:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:82:C9:2A:7F:AF:B4:1A:83:9F:DF:4B:62:A6:10:7C:79:77:35:4E
X509v3 Authority Key Identifier:
keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a0:ef:f1:a3:da:51:89:c9:31:1d:55:9f:71:45:ad:d1:2b:
fb:0b:86:6c:f1:83:8c:b7:bb:1b:9c:e5:4e:b0:54:ba:7e:22:
06:6b:20:90:52:55:03:f5:d9:e9:ec:a2:34:64:e5:cc:c7:8e:
fb:15:59:8b:8d:64:fe:9b:af:c2:d5:fb:db:0d:21:c8:50:e2:
41:4e:3f:1a:36:01:9b:34:82:86:9f:c6:62:31:e5:f8:03:0f:
57:e4:0c:f1:5c:88:2e:48:d5:dd:73:d3:2a:02:e8:71:46:f3:
25:9f:16:00:02:fc:80:d7:04:77:78:76:6f:f8:de:71:59:1d:
57:ea:6e:4b:5f:9c:bb:c9:72:0d:90:e5:76:f7:89:f0:05:60:
3c:a7:25:09:56:92:94:ad:5d:ac:1d:af:51:09:a3:31:45:01:
ce:7a:bb:2c:90:a7:ad:04:45:3d:0b:b4:b2:ef:44:45:32:78:
47:48:d7:12:9b:72:67:22:03:ba:0b:e3:28:90:3f:36:7e:55:
f9:90:b9:0f:58:c4:86:ad:b9:b1:b4:ea:d6:a6:dc:8c:e6:8f:
00:08:df:f7:3b:58:7d:7b:0c:ab:61:38:61:db:15:20:9f:b2:
3e:f8:cc:bb:e1:5b:9c:31:5e:3d:44:a9:93:b6:a1:95:ff:93:
dc:96:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:22 2025 by rpki-client