Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: CdJuCiMevlM1YdRCrX9WqZg67SDj42Y3Y8PQ7EH0yfE=
Subject key identifier: 41:BB:7C:BA:EF:CF:61:07:34:67:11:49:84:92:99:BF:B6:B1:69:B7
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 0194BC04AF028E32D69C7B6F94ACDFD79243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 089F
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: 2E8BW6ocWN4xphPAlDGGRZtkSGgm3FcYOBHjbB9IM2k=)
2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:af:02:8e:32:d6:9c:7b:6f:94:ac:df:d7:92:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=41bb7cbaefcf610734671149849299bfb6b169b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:df:0a:e5:75:b5:cc:2b:6e:26:3f:4a:a0:
a7:cd:f8:6d:78:4b:cc:0e:01:07:90:07:ef:56:8a:
73:76:cd:51:7e:b1:04:29:c7:8f:de:2d:9b:cd:23:
1a:2b:51:17:b7:5b:46:39:72:cc:81:8a:05:56:c0:
07:19:04:1d:b8:07:b6:a4:77:4a:f5:8e:f8:1d:83:
b0:cf:af:79:b2:5c:43:fc:f9:24:89:81:3f:84:ba:
e9:58:bf:1c:a6:dd:fe:62:e0:ec:21:a3:4c:fd:45:
0c:c9:76:a4:f6:3c:a1:94:c0:c1:a6:97:9f:1c:b9:
83:3a:28:61:a1:05:fc:cd:64:8e:2c:f5:78:03:82:
24:32:ef:41:2b:c4:ba:f1:db:8f:06:a5:4e:9d:45:
56:c5:4b:3a:c1:3e:03:01:93:00:72:00:6d:b2:68:
76:a2:68:67:cd:b2:ec:01:a9:0f:8b:43:7d:5f:bc:
12:00:60:c0:ae:66:2d:9b:bd:3f:06:07:0c:65:2f:
df:97:fa:fa:7a:72:94:cd:5d:05:4c:a8:5b:d3:52:
3b:41:bb:b3:b8:80:7a:a3:a3:3f:49:5f:fc:ba:d5:
0c:62:89:e0:33:99:bb:86:b6:2a:35:4a:56:11:98:
c9:54:73:e5:4f:dc:52:95:1e:e7:d8:7a:7b:3a:43:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BB:7C:BA:EF:CF:61:07:34:67:11:49:84:92:99:BF:B6:B1:69:B7
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3f:05:a4:80:7b:53:27:76:3b:f7:fb:fd:1b:93:6a:ea:aa:
64:4e:c6:7e:4d:52:dc:e6:dd:48:9a:ee:1b:55:23:ff:6f:65:
6c:30:ac:9c:25:ce:82:7e:1b:0d:41:68:20:23:d1:45:89:6a:
eb:f1:25:fd:3e:2f:00:32:c9:8e:27:8f:91:3e:54:54:39:ec:
59:2c:bc:b7:0e:6b:73:58:e4:06:b8:c1:aa:72:d5:ef:a7:4d:
e9:d8:73:40:ee:53:bf:24:e0:d3:4e:fb:68:e2:7e:86:f8:8d:
c2:b4:c2:75:b5:79:01:72:1a:0e:33:21:58:a6:1e:1b:42:db:
21:a2:98:83:34:ad:11:2e:10:73:a6:f4:df:b9:04:64:81:db:
ce:e0:03:e3:7a:c9:69:64:42:02:a6:7e:28:58:00:ea:c1:21:
76:e7:4f:35:71:6b:ca:b9:b6:dd:31:c8:34:5d:4e:0d:6b:f8:
c5:e6:1f:4d:b7:c1:d1:c7:96:aa:6c:8d:c2:a9:46:a1:4a:e5:
d3:c9:13:24:19:8d:a3:42:25:8e:2a:92:20:5d:0d:44:dc:f5:
5d:72:af:fe:9e:7b:23:f3:68:1d:00:fc:b6:c1:b5:b0:75:13:
84:38:57:0d:e3:e7:68:97:50:47:82:ed:6b:05:9b:32:fb:20:
29:00:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:37 2025 by rpki-client