Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: 3SQ/U5AKyVrBis2GXkdV4thhQ37Ul5roASZgnlt9SFY=
Subject key identifier: DE:70:82:9B:82:30:DE:EF:CB:85:F5:11:D9:83:9D:4F:DA:45:CC:9C
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 0194BD4EBDE345559837B004C58E57EBABA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 1401
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa (hash: gZA+5nFU0e3J+dZOb0p/gBtvIfB/51rVDEOTe4nlfP8=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: i7SJlOrOo8bz/Iek4CRxU7Usz2FeYV1GZovQbots+h0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bd:e3:45:55:98:37:b0:04:c5:8e:57:eb:ab:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=de70829b8230deefcb85f511d9839d4fda45cc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:2a:1c:ab:fc:0c:6d:71:a9:c3:fe:3b:47:
93:db:64:ed:44:d0:dc:40:13:d0:67:59:e8:d4:58:
ba:d7:da:96:c9:85:e3:e8:0d:f3:44:44:6f:40:3c:
7c:27:08:27:b0:27:c1:9a:1d:a2:9f:19:03:80:6f:
90:9f:6b:75:5f:e4:ad:88:f3:66:c4:dd:62:f9:91:
f8:34:b2:f8:11:4b:dd:74:cc:00:5a:2f:8c:dc:90:
93:34:59:99:33:54:7e:5c:6a:2a:ba:45:2d:a7:98:
ef:2d:94:a0:7e:05:a9:78:0c:19:2c:29:d5:24:64:
31:db:a9:11:71:1b:76:a0:ad:cb:16:b1:74:45:35:
d6:2d:c7:14:2e:62:fb:40:5f:38:f2:3f:3e:52:6d:
c5:e8:ce:bf:af:4e:a8:92:48:a8:fc:73:0d:ba:99:
5c:1d:c7:82:30:8f:7a:ef:b8:00:87:89:61:f0:f5:
11:97:b4:10:ec:87:c3:2e:1d:4b:49:85:cc:8f:5b:
17:f3:eb:33:05:33:68:f7:8c:29:e7:5b:0c:95:3b:
54:95:80:8d:7f:12:ff:79:18:34:58:a6:fc:6b:de:
75:f9:d5:4c:42:f9:c7:8d:9b:7d:f4:ca:7b:77:01:
28:9e:14:51:a7:d1:94:be:8c:d6:91:54:1f:9e:dd:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:82:9B:82:30:DE:EF:CB:85:F5:11:D9:83:9D:4F:DA:45:CC:9C
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cd:aa:a8:c1:e9:07:fb:4f:d3:f2:12:1e:db:87:4e:43:05:
4c:70:12:ba:93:0c:7e:55:17:a8:d8:14:51:85:c9:4e:2d:67:
90:7f:47:3d:5d:d6:b7:5f:67:f5:95:61:94:aa:6b:9e:5d:a2:
fa:5b:92:30:56:b0:57:09:91:d3:c1:ac:26:ae:51:c4:c6:4d:
e5:db:c1:a7:8d:84:66:e6:18:4a:04:f0:de:fe:81:05:11:56:
92:d7:a6:91:76:b2:2f:6d:56:94:53:0d:3e:a6:cf:22:e8:a1:
bf:9b:25:c0:d1:a2:6a:20:ff:76:5d:8b:7e:39:0c:bc:7b:b6:
dd:f3:67:bb:01:39:b3:95:54:43:0a:4d:f9:c1:52:49:a4:72:
52:b8:54:20:c6:97:28:6d:b1:9a:6f:47:37:c6:91:a2:ea:3a:
ee:32:be:88:72:91:96:c1:d3:81:a3:bf:72:49:58:9a:30:af:
5e:97:ff:37:b0:74:ad:b5:d2:1b:d1:8c:2c:c2:0b:ef:0d:8c:
81:63:f3:17:0f:06:ba:be:5a:25:cb:47:fb:4e:7c:48:58:d6:
31:7e:c0:75:bd:c9:82:65:b5:df:07:f4:7c:8d:50:d2:e1:3a:
4c:b8:b6:e7:ad:c0:8b:56:20:03:b1:f1:34:f5:76:36:4c:cf:
08:cf:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:49 2025 by rpki-client