Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File: ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier: c02TS4LJS1trwPz/USr050rocXTJvh4WQH+xyrtzUVI=
Subject key identifier: A1:BA:16:4C:F2:CB:55:61:DF:03:97:30:9B:1C:28:89:1E:C3:CB:6C
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial: 0194BCAA193F7C1B8302758B37AEB433C80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number: 112B
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: v5WaHjsHqBiPEhvkQv7QRFEcNnlFu8B30NLjb0d2aYs=)
2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:19:3f:7c:1b:83:02:75:8b:37:ae:b4:33:c8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=a1ba164cf2cb5561df0397309b1c28891ec3cb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:4e:40:ce:05:f4:83:52:25:7b:6b:5b:f9:
f0:a3:99:4f:fe:39:c5:bb:d8:d0:74:e1:88:c2:93:
0b:83:3e:1d:a1:b5:87:4a:ea:08:8a:2c:b1:03:93:
47:68:dd:86:49:ad:c9:12:84:19:2f:58:27:18:98:
c6:8a:31:09:5f:76:3c:f8:bc:8d:30:cf:bc:08:53:
42:95:c0:ce:98:bf:ab:49:2b:ba:5d:05:ca:7a:5e:
59:cf:19:a3:b3:7f:8c:69:73:d1:b8:cb:f3:63:05:
d2:2e:9c:49:67:93:d5:4a:06:9a:03:69:9c:55:83:
74:7a:9b:22:2a:12:6f:e7:4e:2f:13:1b:2d:db:88:
cb:3f:6d:13:9a:0d:1f:01:21:98:fb:05:5b:60:58:
4f:3d:58:34:c4:50:6d:3d:78:d4:c8:99:0e:bd:09:
5b:ab:31:8f:8d:dc:15:ce:a4:b0:7b:35:d9:42:bf:
7c:ce:9f:6f:e1:bb:87:c2:c6:4d:1a:c3:46:fb:05:
80:4e:b1:9c:fc:05:8c:05:62:65:e7:af:c6:86:bb:
af:98:07:67:a4:d5:04:86:69:0d:46:d1:f0:75:65:
d1:2b:03:e4:f8:12:41:1c:39:1d:63:3c:84:b9:e8:
ef:94:09:68:c6:5e:8f:7e:89:8a:74:34:3d:e1:9f:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:16:4C:F2:CB:55:61:DF:03:97:30:9B:1C:28:89:1E:C3:CB:6C
X509v3 Authority Key Identifier:
keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b9:df:d9:e6:47:b7:5e:78:c5:14:3d:61:42:ff:f4:b5:9c:
15:f1:95:05:c4:d3:cd:f1:9f:20:e0:cc:5a:59:70:b1:bc:a2:
2d:fd:8d:9b:95:1d:de:b7:d8:84:25:1a:58:31:57:61:cd:39:
a5:6c:fd:82:7a:05:bc:2a:6a:7f:33:ce:d9:5b:a6:d2:77:72:
2c:87:59:85:a2:dd:36:fc:c4:de:0b:3b:2d:85:b2:b3:7a:e4:
fd:56:d2:d8:4b:b2:a1:73:8d:af:53:d8:18:12:40:91:5f:4b:
ce:9b:4d:c0:f1:87:8f:df:5c:bd:9c:5b:53:52:55:4a:c5:2f:
19:28:4f:9d:d3:19:74:e1:61:1b:41:a2:62:59:31:7a:f0:24:
d8:6e:f1:65:62:df:16:ca:bd:42:54:25:87:4f:02:f8:91:03:
99:3b:84:c7:3c:bc:7a:d5:60:1d:62:8a:28:6c:45:20:21:37:
35:f2:60:f4:ca:44:a9:7a:aa:05:f6:52:16:f4:44:d4:1a:55:
6a:cf:d2:6c:2d:d4:7f:8a:83:a7:a8:83:7c:75:54:37:26:4b:
ca:6f:9e:07:b0:a7:06:12:da:b0:0c:e9:8a:96:b2:28:3c:5c:
a4:28:e2:36:4f:d8:91:5e:06:e3:10:1f:41:4e:45:0f:5c:8a:
70:26:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:32 2025 by rpki-client