Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: fsmBABqQK5ZnFYefip8ZFqhceqeIG+9EDZ2Y8wQy9GE=
Subject key identifier: 5F:CF:C9:DB:9A:75:2A:AA:D2:9A:1B:98:8D:31:BE:98:20:0F:55:C5
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 0194BCE0E888CA8B26157D2A4A2699FBC118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 11CC
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: RNgyfpwxPpu3SCu3CMlVCicp3qFOJdJEbflgt+31sSY=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:88:ca:8b:26:15:7d:2a:4a:26:99:fb:c1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=5fcfc9db9a752aaad29a1b988d31be98200f55c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:47:01:bf:f4:1d:3b:d9:c6:2b:da:30:16:
55:11:89:ef:b6:b7:24:56:ec:17:dd:d5:ff:93:b2:
28:72:af:7a:bf:37:5e:92:72:81:a6:4a:a8:da:74:
7b:0e:79:3f:f6:d3:d8:c5:68:fd:cf:7d:5b:fa:32:
9c:80:e6:8a:7c:97:13:f6:a1:6d:35:fb:f0:a9:04:
09:e9:6e:d8:78:b2:4b:fb:00:33:21:29:ba:14:f6:
b4:23:a7:c5:0e:16:62:81:e4:73:eb:02:e5:cb:ca:
1a:c7:02:c7:9b:f4:3c:be:dc:c7:a8:ee:34:69:d7:
e1:cf:50:68:6f:cd:76:d1:92:c5:21:32:1d:2c:98:
92:a8:1a:dd:76:66:c7:34:7c:6a:17:31:3a:eb:90:
4e:c8:f0:4d:1e:5c:52:e0:06:73:12:c9:5d:4e:ea:
55:6e:a7:08:89:14:c8:3c:9a:2e:ea:ed:e2:cd:15:
84:8b:41:d2:8e:7c:87:74:12:ef:8f:18:db:07:24:
38:1e:1e:a3:f3:e1:c3:c0:dd:b0:da:e7:e8:29:53:
d3:c3:35:f4:13:52:b6:eb:c4:9f:4b:1a:5c:70:23:
84:cf:73:b5:0d:6a:dd:46:a4:1c:9c:a8:a4:d9:5c:
30:17:df:29:df:8f:e4:60:31:e7:fe:e3:00:00:8b:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:C9:DB:9A:75:2A:AA:D2:9A:1B:98:8D:31:BE:98:20:0F:55:C5
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:24:67:d7:3b:70:10:99:b7:37:7a:8a:98:c5:89:04:ad:89:
7f:b4:3a:09:a5:5a:ff:e4:10:f7:4a:99:c8:e6:05:26:8c:61:
29:c6:94:c8:39:cf:8b:4c:e3:41:20:b1:70:5c:e0:1d:ba:b5:
ca:42:a7:3d:c6:67:50:13:37:75:62:26:94:0f:63:3e:75:e4:
7c:71:4b:0d:28:ef:05:64:cf:d6:00:8f:b5:e2:92:ad:7a:05:
18:20:42:22:19:65:c3:07:cd:78:22:73:30:03:0f:5e:ed:50:
17:6e:77:ae:da:23:02:42:f0:26:6b:df:ab:47:07:82:2d:ec:
ad:d1:11:37:f9:f1:8e:53:f9:da:04:16:4c:2c:73:d9:ca:ab:
89:f7:9d:e3:8a:27:9f:1c:66:67:b9:fd:b6:27:33:bf:2f:5b:
e8:14:de:57:fe:6e:60:4b:9b:d8:83:d7:d2:eb:c9:80:f0:81:
68:fe:d9:67:5c:67:60:17:5e:c3:8f:06:d2:16:37:7b:53:17:
96:a1:c6:ff:c8:59:07:f3:4e:6a:6a:24:a4:ba:2d:5d:8f:7c:
0b:65:15:79:1a:43:fe:b3:72:d0:b5:a1:57:7d:5a:83:10:11:
6a:a6:02:87:6a:c0:52:9c:95:dc:13:52:60:ac:60:f2:d0:6d:
15:62:63:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:22 2025 by rpki-client