Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier: D4ZrZkvCRvqsnB8y0pLsBuo++qhwYJj7wFNhSmilI0M=
Subject key identifier: EC:44:C6:1F:83:33:D8:15:FB:F2:4A:DC:F8:91:AA:98:18:A1:F3:A1
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial: 0194BCE0DCEE23B391F984CACA1CA5494950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=)
2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: fakBZFydOnc3NG2ZrpQFajwkH6diHE0/5+0iPPSDeD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dc:ee:23:b3:91:f9:84:ca:ca:1c:a5:49:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=ec44c61f8333d815fbf24adcf891aa9818a1f3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:6b:dd:e0:66:ec:bd:3b:ae:7c:69:73:82:
a6:66:c0:91:a6:55:83:e5:e9:76:b7:da:3e:23:94:
b3:ea:43:bd:8e:db:a6:5d:f3:3e:7e:cb:b3:f8:a9:
67:38:9a:7e:4f:38:6b:3e:5b:a5:28:cd:a0:a7:50:
9b:d6:d6:e4:17:1f:4a:9b:76:bc:ac:71:0a:aa:27:
1f:2b:65:9b:c0:be:72:21:bf:70:de:ff:38:36:e7:
30:d8:83:ff:03:13:6d:ae:55:84:77:f0:2e:45:48:
ee:e7:12:ff:df:50:ad:1c:de:8f:3f:94:78:94:e3:
6c:36:70:79:15:98:48:f9:50:ae:ab:4e:72:55:3c:
f4:f4:b9:3b:f2:23:fc:d0:2c:a3:91:ae:0d:e2:37:
1d:f8:61:ba:dc:e7:98:84:5c:7a:18:4c:e5:fd:02:
cf:0e:83:8e:71:ac:f5:9a:2e:e8:e7:77:2b:6e:1b:
48:b4:a8:09:82:90:05:58:33:b9:b4:82:95:6b:95:
7f:51:ce:54:ec:2f:e3:40:64:47:7c:4f:1f:dd:46:
93:c4:05:bf:49:5a:b9:bb:63:37:e5:9c:7f:31:48:
f2:4f:4a:e7:d5:44:f5:41:6c:ff:f7:63:fb:e2:83:
2e:07:65:9d:69:e1:64:c0:2b:81:18:9c:70:48:27:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:44:C6:1F:83:33:D8:15:FB:F2:4A:DC:F8:91:AA:98:18:A1:F3:A1
X509v3 Authority Key Identifier:
keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:ce:c3:f3:7d:61:0c:37:fa:19:cb:d4:87:4e:8e:0e:d5:
8a:a2:b5:23:81:b4:60:a3:a6:65:8b:b1:c3:7e:94:e9:1b:d1:
8e:15:48:5e:7c:ba:ba:a9:1b:1e:16:ff:7b:4d:6b:41:12:6e:
6c:65:50:7c:9e:49:a7:9f:60:16:05:72:c0:f8:e2:f1:f2:a8:
bb:d2:f2:f9:97:ad:2e:eb:31:16:c3:79:2e:8f:26:68:dd:d9:
b9:59:ab:c7:47:d8:a5:16:64:0b:b3:3a:df:91:00:09:9a:13:
7e:42:2f:a4:6c:f9:7f:68:96:c4:31:49:ce:d9:3a:1c:80:cd:
2a:f2:ac:d0:e3:b1:da:5e:eb:d2:85:27:97:1d:af:2d:9d:f7:
92:2a:dd:40:fc:79:04:08:70:7c:7d:62:b4:90:b9:07:7d:15:
a7:d7:04:df:3e:50:f3:32:f4:e0:1e:d0:b4:c0:fd:2c:d7:fc:
6b:d3:0d:ff:24:b2:15:5c:53:9a:12:ea:30:91:ff:31:ca:55:
35:3d:af:67:70:75:e7:b0:f1:20:8f:59:c6:f9:36:03:95:42:
d4:59:80:c4:06:e6:2d:c2:5a:1b:8b:b6:c0:b2:d4:62:a8:aa:
1b:b8:bd:e7:13:a2:80:27:a9:27:52:fb:4d:1c:d8:b4:b4:15:
bd:68:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:13 2025 by rpki-client