Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: 75DAIOSxZXLkI04aGOdcDLUkC6UH5Zf1jUtRnJlo840=
Subject key identifier: 97:72:7B:81:2A:18:46:21:85:6A:0F:C7:44:49:F3:88:CA:47:2B:29
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 0194BC7332F186936C24A533E9B89D886989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 116F
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: c0gEDIsDzfFjoEPspuvnhURuTOfcpAfKmheOKV9pCoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:32:f1:86:93:6c:24:a5:33:e9:b8:9d:88:69:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=97727b812a184621856a0fc74449f388ca472b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:0d:66:73:b2:9c:ee:2e:65:e4:6e:80:20:
6b:93:b5:ac:e5:27:4b:f2:49:d7:f9:be:0c:f6:cf:
eb:48:4c:4b:3b:07:48:55:2e:52:cf:32:05:9a:ef:
36:fc:18:48:9c:e6:bd:aa:4e:55:ca:e1:6a:99:22:
db:dc:69:b7:1e:ec:a5:26:ae:8d:fa:a2:dc:2a:8f:
c1:9e:99:f0:95:3e:0d:95:05:69:60:a2:9e:38:71:
01:47:f6:ca:2a:5f:06:c6:a2:ce:23:48:e5:78:24:
bd:42:32:f1:60:d4:09:5a:fd:f2:4c:f1:c9:94:77:
28:5f:89:e4:c2:ab:99:d1:e8:05:bd:c8:92:bf:75:
66:d1:d1:2c:9b:1b:7d:69:0e:45:66:65:eb:12:61:
41:3d:d2:91:a9:75:6f:eb:c4:3b:af:95:e3:8b:c3:
41:13:6b:38:6f:88:f2:d2:42:89:ab:49:d8:84:fa:
e6:01:ea:01:02:05:6b:62:00:e4:01:be:c1:d7:a3:
39:07:c5:82:fc:d1:3b:1a:f2:11:dc:50:6c:ff:cc:
5c:9d:f7:0f:b1:44:c7:ed:c4:a7:b4:69:e8:73:bf:
80:20:b6:9f:fd:1f:0d:4f:4b:85:17:b8:a0:a8:30:
e4:43:0c:b7:80:fb:04:cf:f8:75:96:f0:f0:b6:c8:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:72:7B:81:2A:18:46:21:85:6A:0F:C7:44:49:F3:88:CA:47:2B:29
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:36:8f:be:04:cb:c1:d9:64:03:6c:ae:7f:fc:ed:38:9c:76:
29:d8:91:9e:56:4b:1a:22:d1:43:8a:a3:8c:66:4b:d0:48:75:
48:63:0a:7c:1a:7d:38:5d:df:3a:34:53:37:73:be:51:68:36:
ba:eb:34:d9:8a:8d:e4:59:10:84:09:cc:4c:ea:b8:3a:e0:76:
b6:57:74:b7:7f:f3:88:6d:22:dd:81:70:bb:18:fc:c8:47:fe:
96:9b:f3:06:5f:b5:5a:c4:9d:ac:d6:22:c8:4e:d4:de:e7:c0:
6c:7c:51:6e:9e:78:ba:ef:22:7a:ea:d8:23:64:b3:ce:fe:33:
e4:dc:7b:1b:39:83:f4:69:47:6a:77:4f:8a:ed:f9:81:75:3a:
a3:fb:0d:ac:0a:de:da:18:29:29:1d:9b:21:a8:1f:15:1e:ea:
c1:b9:34:b9:4c:ff:74:24:ea:bc:87:42:cc:6a:0d:57:86:e7:
f2:05:05:60:e1:53:8c:72:0d:58:b2:55:b8:d4:c9:0c:da:7b:
f6:1c:a7:12:ab:74:50:14:8d:98:26:a6:a2:1c:5c:11:f8:4b:
c7:ff:e9:2e:3f:a2:f3:8c:4f:a6:cb:45:07:b0:45:7d:45:7b:
28:02:28:e1:aa:30:08:f1:03:10:18:a7:35:40:fd:66:dd:43:
2c:13:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:37 2025 by rpki-client