Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: MW98+3aaQ1kaHka+Fh3L+nTIYL3HnIHI356xjAlg+J8=
Subject key identifier: 67:F7:CC:8E:10:38:8E:71:73:29:9F:C0:8F:CB:E9:50:98:03:18:6E
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 0194BCAA09213DDC516852D65EEA4C690BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: abYfGytzU6rdWd0O2m7fVC6hX2aNCzYEdDG1Dff+VSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:21:3d:dc:51:68:52:d6:5e:ea:4c:69:0b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=67f7cc8e10388e7173299fc08fcbe9509803186e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:1b:98:9d:4c:fa:09:44:5a:d0:ab:cd:dd:
1e:c1:84:bd:ab:ae:df:df:f4:1d:2d:30:c7:35:69:
1e:63:dd:2a:6f:24:8a:07:72:2f:6b:b8:8c:a7:7c:
03:12:19:93:12:a6:0f:93:2b:98:24:bb:8c:44:09:
1b:a5:29:76:5b:1a:12:4e:a7:b4:e2:6c:bc:b1:84:
dc:2b:47:98:ab:02:47:55:c6:6d:44:eb:6d:89:df:
db:96:60:70:49:19:61:60:62:55:43:0e:6e:8a:39:
0d:62:20:72:0a:a4:54:cb:a3:78:03:9a:4d:a8:6a:
44:a2:08:10:9e:20:ea:aa:2e:c7:fe:7a:8f:76:41:
61:23:73:bf:03:b0:aa:8b:4e:5c:f3:ac:66:55:93:
44:34:87:f8:10:84:ef:99:10:f1:bf:54:44:b7:4f:
f5:a3:10:33:74:94:96:78:36:6e:0d:78:e1:fe:56:
bb:0e:ec:96:b5:3f:9c:c5:7b:6c:ad:e4:f2:4d:a0:
6b:da:ce:82:38:ec:f5:8e:78:11:9b:61:db:0a:af:
a2:8f:ff:ed:a1:68:9a:e6:99:10:76:c7:25:2e:78:
1b:62:a6:fa:71:b6:e0:47:b4:63:fc:c6:53:42:19:
4a:b6:cb:fa:95:0a:c9:5b:bb:0a:0d:b0:e5:4c:40:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F7:CC:8E:10:38:8E:71:73:29:9F:C0:8F:CB:E9:50:98:03:18:6E
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:df:fe:a8:5e:d8:4e:73:ec:dc:c9:cb:44:49:9e:be:a3:98:
51:32:a8:15:2e:db:53:1f:d7:ee:e9:0c:9b:85:87:8d:61:53:
9a:65:cf:11:3e:5e:f0:fb:cf:7b:26:e1:36:54:29:20:89:ac:
d5:8f:bb:a6:85:b8:93:0c:95:89:c3:64:ba:d0:c7:a7:ae:1d:
d9:6d:dd:2b:78:1f:5a:2c:ef:4c:cd:99:7b:5b:e4:c0:2f:64:
1a:f0:99:97:f6:d5:4b:fc:32:c7:ee:67:69:6c:b1:0e:86:c3:
04:f1:f2:38:16:ac:f1:11:cb:27:db:f3:11:9c:c3:02:e1:4f:
01:d9:db:c3:7c:de:b8:b3:ab:4e:32:25:0c:08:52:0d:ef:55:
db:d7:50:d8:82:6e:a5:34:44:7a:30:96:a7:cd:61:e9:82:83:
d3:53:50:37:5a:09:80:c4:b4:73:f2:03:f3:ac:7a:9f:1b:6e:
93:02:ee:e1:fd:ab:9a:96:7b:a9:8d:3d:10:47:74:92:a9:3a:
5b:19:90:45:0e:43:7c:32:bc:96:18:20:6c:0b:01:39:e1:bd:
b1:b8:8d:e8:71:dc:0e:8e:6d:2e:ca:68:e1:56:bc:fb:bb:82:
14:4b:f2:47:a2:b3:d6:1a:40:af:f5:14:32:b7:d5:ba:09:5d:
97:82:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:49 2025 by rpki-client