Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: If8iNGSuiTxFzW/CaMD7hn/s98gPLfqgI7r7bUEiAMo=
Subject key identifier: 91:47:F7:69:60:72:BA:CB:22:24:57:4E:EC:CC:37:8C:37:76:92:9E
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 0194BC3C0E507FD8A17AEDFF0B589944AEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: HRH8h/7TgHO8Zm1gYaz9QSiqC7A/bOtGtmhejRFH3HM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0e:50:7f:d8:a1:7a:ed:ff:0b:58:99:44:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=9147f7696072bacb2224574eeccc378c3776929e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:35:ca:9e:77:39:c7:50:ee:b2:f0:c2:28:
7d:60:9b:1c:4b:12:40:e2:2c:1c:ab:2b:d6:09:91:
c5:bf:eb:67:ad:1f:2a:6a:16:0a:50:bd:0c:21:6c:
d0:1e:cf:94:2a:a9:21:3e:58:4f:56:91:62:40:76:
f5:bd:37:f3:8c:3d:6f:bd:54:23:04:6d:c7:94:aa:
a2:3c:cc:68:81:90:36:81:db:ac:df:70:3d:9a:77:
c8:24:1b:1c:8d:06:3b:e6:b2:6c:ac:cd:55:61:4f:
f5:52:33:fe:33:17:ff:65:3d:b6:e2:81:66:70:c8:
75:91:6c:bb:24:e1:1e:4b:c5:04:a2:7c:63:96:c5:
62:57:3a:66:52:9a:a0:48:f4:22:17:3d:f3:ca:1f:
df:1e:15:52:64:e5:61:39:9c:bf:e4:c3:99:92:09:
2b:a5:47:08:1f:db:7c:07:a9:8c:b2:88:6c:6c:4d:
a2:c9:43:ae:cd:00:96:f3:51:a7:9c:51:be:92:a5:
77:a7:0f:cc:8c:fe:1b:1b:57:1c:e0:de:17:d5:0b:
e3:a4:16:d1:17:f2:76:80:3d:48:af:e4:53:ef:ab:
67:69:91:fa:5b:32:5e:df:3b:ca:56:59:a9:10:3a:
58:df:3c:6d:8c:78:a6:b7:62:49:5b:0c:a3:58:1f:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:47:F7:69:60:72:BA:CB:22:24:57:4E:EC:CC:37:8C:37:76:92:9E
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0e:33:40:83:26:ce:77:e6:68:49:56:df:17:9a:d3:72:a9:
36:74:21:24:59:9d:20:ef:46:75:f5:dd:ba:6b:f7:e0:3d:e9:
32:b8:24:70:d7:5c:a2:9e:0c:ed:54:4c:e3:1a:07:ca:1d:ed:
37:ac:69:4d:70:62:42:ee:2b:36:46:34:b0:37:e0:f3:c5:98:
50:b2:bc:d4:7f:93:c6:5e:bc:b3:5b:ae:ef:20:f0:95:f7:e0:
29:ec:d4:6d:64:d0:0d:c2:53:20:1b:9a:b8:c6:96:ff:a0:d0:
1f:e7:63:f6:97:20:29:6e:f0:34:43:13:c1:ce:52:bd:6b:85:
d4:cf:bb:54:07:e6:50:d6:6b:06:b8:60:ed:7f:91:23:ad:33:
f3:a1:75:4e:2b:90:23:4b:a0:ab:9c:c6:c6:95:dc:72:10:e8:
dc:36:bc:56:f8:d3:d8:c5:fd:8a:8f:e7:ac:21:51:6b:c5:0d:
f5:52:1d:78:8b:7a:83:bb:54:90:de:c4:1f:2d:6b:5d:4c:33:
f4:d2:7d:06:41:ad:77:43:a0:43:9b:55:8b:98:15:31:7a:91:
48:17:ba:51:12:d5:74:b9:52:4f:3c:05:c0:ae:aa:66:c0:49:
f7:81:1a:05:4e:d1:20:a9:b4:f2:1e:ab:ca:cb:2e:ec:b1:73:
1c:90:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:50 2025 by rpki-client