Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: OO8z03bZvdxWFEcc1gGQ1FftplnHSQ05dUVGhv1iWtA=
Subject key identifier: 53:58:AB:9B:D6:77:D4:DA:CC:2C:1E:12:AA:33:0A:17:AA:BC:6A:34
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 0194BBCE4247F8ACAD9F799C551106933CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 0D57
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: mPW5GSCruHge1nf3tw8CW4x/iJrlDauoUs3+YcBwIbA=)
2: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (hash: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:42:47:f8:ac:ad:9f:79:9c:55:11:06:93:3c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=5358ab9bd677d4dacc2c1e12aa330a17aabc6a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f8:31:2c:53:8e:78:b6:3b:7a:97:64:00:14:
d6:cd:9c:28:df:46:c8:f5:b7:02:02:e6:ef:60:4d:
2d:52:44:cb:a3:02:f4:24:9d:81:a8:df:80:3d:e4:
cc:44:2a:cb:60:89:52:ba:e8:c9:53:22:55:3e:26:
38:6d:f7:86:74:07:8b:c0:c1:1d:fb:43:b1:71:a5:
e4:ea:3f:b3:25:ab:5e:40:ed:da:91:70:64:70:90:
26:5c:f4:7e:89:d8:9e:a0:ec:1d:62:5a:8e:b0:72:
1c:66:d9:5f:04:fe:ae:8b:c3:41:17:51:41:60:d8:
14:3f:48:5e:51:e6:1b:48:96:7d:27:d9:ff:4b:09:
6a:c9:45:f9:df:66:c0:e2:39:6a:5a:c7:e1:25:4e:
4f:3e:d3:1d:cd:b8:15:5c:74:fd:2a:b9:4a:cd:64:
98:37:5c:dc:dc:cc:26:27:2d:5d:05:b0:cc:c6:91:
1a:ba:a8:29:6d:d5:bd:5a:de:85:cf:8e:bd:31:9c:
df:67:ef:a5:d1:40:42:03:db:a7:0d:95:93:65:eb:
00:e7:8b:a9:66:68:3c:a4:04:a1:29:c1:b3:73:49:
9b:58:c0:83:81:fa:9d:79:bb:c1:36:1d:fb:8f:78:
f7:d0:53:87:85:be:c4:fb:59:64:7f:65:78:4f:23:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:AB:9B:D6:77:D4:DA:CC:2C:1E:12:AA:33:0A:17:AA:BC:6A:34
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:60:a5:67:19:4d:f7:d1:b3:b9:49:82:10:ca:14:aa:91:d9:
b1:ce:03:bb:61:32:6c:83:08:22:a0:ae:8d:c8:96:7a:d4:98:
53:02:9a:7e:6c:91:40:13:64:48:0b:57:9d:60:ec:98:e1:f2:
20:77:94:ae:55:af:9e:9a:9c:ad:b4:e0:41:27:14:74:23:21:
ad:ec:d5:eb:68:f7:1b:bf:e4:91:bb:53:83:5e:c6:3a:58:da:
7c:90:19:8e:64:6a:a6:07:c5:b4:19:1a:21:8e:dc:9b:d4:d6:
0a:52:df:e2:91:ca:83:3d:cf:d0:19:38:85:b5:c9:51:19:03:
1d:6a:ae:97:d9:70:88:98:2f:ed:81:e6:0e:ea:2e:1f:3e:1f:
96:ef:38:7c:4c:aa:41:0e:e6:80:ba:44:05:6d:38:89:c3:8a:
6b:48:82:2d:34:ba:1e:c9:3f:5f:64:0f:34:d7:f1:ff:d8:30:
ec:45:a7:b4:74:73:62:1b:63:59:fd:c1:dd:d4:f0:f7:5c:3e:
a8:1c:10:7e:52:1e:a2:45:ea:4c:97:a8:db:c8:50:6e:b9:8b:
0d:94:e7:6e:c1:e1:c6:b4:5b:06:89:f7:ce:30:c4:8e:0e:65:
4d:cb:39:47:7a:0f:ea:ac:91:bf:b2:48:15:9d:15:eb:af:03:
3b:a6:31:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:40 2025 by rpki-client