Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: TBzjbvI1mlW52BG2r2GT58UPKDncbmM2g+mahckNjLQ=
Subject key identifier: 59:8B:56:EC:9A:AA:CF:CF:00:F2:B0:69:CA:90:A4:9E:3F:B6:39:0E
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 0194BD4E39869848366A880013A7946C9BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 089A
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: 9WfLA6QHajuACG9zKGXgXI_fnBU.roa (hash: aTvWSmVYrhk52fn4L1rzEuUOw3+xRp2a5jHVVtBFY4o=)
2: JY9LzlIgT9I57_KE7zrrGS7E8Qk.roa (hash: pG1i5yA4B+HIYkYc64ggfa0dVvkWYyImVKQY1Fkl/ng=)
3: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: PsRqpoGUvhbhgk2rsFsuvYEgoKZyCfDxiXGgrLSU7tI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:86:98:48:36:6a:88:00:13:a7:94:6c:9b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=598b56ec9aaacfcf00f2b069ca90a49e3fb6390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ad:65:41:dd:a2:c5:26:61:d2:ac:e6:5a:9e:
41:95:78:5e:f4:49:eb:ad:fc:99:e3:bd:bc:07:af:
a0:83:c9:75:cf:84:02:4c:48:d7:73:6f:ad:42:79:
58:a8:64:ba:5f:48:15:c7:09:53:e7:19:a7:a9:e2:
dc:24:80:ae:9d:2e:ae:c5:03:d7:a8:bc:4f:9a:b6:
c8:93:f6:58:0f:99:f6:b8:a7:2a:03:03:b6:c2:bb:
c4:8a:f7:84:ae:8c:53:b6:1d:e7:d4:3c:8d:bc:d9:
98:5a:e3:b7:8d:db:50:32:3b:fb:77:f6:ea:36:44:
46:ab:66:1b:ae:2e:b1:17:3f:0a:20:a6:dc:2d:0c:
ed:8c:a5:6d:c2:0b:3b:8f:3f:c8:29:08:6e:35:45:
32:1a:6a:39:c2:d5:58:51:65:25:94:da:a9:5d:92:
a2:7a:b4:58:c5:b6:e4:47:cf:4b:81:65:47:55:f7:
87:1d:3f:1a:3f:1f:23:07:14:df:6e:72:f2:bc:f0:
d6:68:33:af:d0:03:91:9e:97:b6:94:0b:2b:a9:59:
0f:19:42:8f:53:7b:74:70:b2:50:7a:d7:83:4a:64:
f3:8b:45:72:55:22:d4:d7:51:e1:44:a2:43:71:34:
4d:81:ec:99:fa:72:d6:60:00:4f:27:78:d7:86:b7:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:56:EC:9A:AA:CF:CF:00:F2:B0:69:CA:90:A4:9E:3F:B6:39:0E
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:16:51:a2:af:3c:d3:dd:ef:53:9b:21:c5:b0:c9:39:38:ce:
f1:36:e8:2e:76:25:f9:df:a2:90:c1:47:04:de:e4:1a:d8:59:
e4:59:9d:61:42:65:f6:06:25:af:e7:2e:ba:9b:dc:b7:a9:8c:
ce:cf:fb:dd:19:ad:87:8e:93:b4:4e:de:86:72:38:59:63:ee:
e2:c3:8a:9b:3c:5c:b3:ce:46:42:29:b9:c3:26:7b:4e:47:da:
85:d1:59:28:5d:57:5c:54:0b:d9:34:8b:bc:97:98:72:f8:b2:
81:4e:86:40:41:3c:76:8a:c5:96:f3:af:e3:26:24:fa:5e:bc:
cd:06:e5:71:9c:af:24:ee:c1:89:95:ff:ba:4d:18:8f:95:86:
7d:ff:da:6a:f0:20:77:76:6e:dc:b5:62:d4:3b:ed:2d:45:e7:
a1:6b:c2:60:8f:18:9b:53:be:ba:75:3d:c5:b2:97:38:c0:56:
ae:aa:a5:98:a8:49:27:96:1a:7b:0f:db:81:57:8b:e2:35:ae:
c8:79:26:c4:69:ed:08:b4:6b:ac:ea:be:94:60:00:b4:18:17:
4e:1a:c6:03:3d:8a:b6:8a:4e:73:02:8c:b1:10:d8:84:40:82:
45:18:cd:0b:9f:77:91:cc:4f:19:a7:bd:dd:83:38:af:3c:bb:
c1:95:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:25 2025 by rpki-client