Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: 2q4LOgz5zn/j0D85AJuapRxwPBCaxzjd50uXJw05G6I=
Subject key identifier: BA:45:79:0D:B1:09:E8:19:1C:89:0E:28:30:1B:78:AD:D8:9B:A2:38
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 0194BBCDCA45DD9631926D2C5998C1926F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=)
2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=)
3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: aZNoLUERdeausOYg6KrBQqewt8CIATKk/eKQyj50SKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:45:dd:96:31:92:6d:2c:59:98:c1:92:6f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=ba45790db109e8191c890e28301b78add89ba238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:93:16:bd:fe:75:c5:d2:2e:87:b2:bd:04:
b5:8c:4e:f4:19:f0:9d:30:45:23:85:46:ed:e7:cb:
c5:6d:90:5e:3b:da:34:95:6e:3e:f4:1f:99:c9:48:
42:06:f9:63:49:f2:7a:e7:4e:f8:14:b4:c2:2b:3a:
5b:6d:c1:19:88:1b:d7:ef:6e:de:8f:ae:27:a8:cc:
84:9e:61:1b:6f:47:ab:7a:f8:4b:bc:c7:90:ae:0e:
58:5a:7e:f0:44:3b:77:54:bd:ee:ca:ef:bb:be:46:
73:63:37:c6:71:d3:13:b7:50:08:4e:10:b4:7d:b5:
e7:70:c1:62:d1:3e:1c:02:50:0e:ca:56:5e:10:c2:
3a:a1:bc:4c:2c:a2:6f:ef:6d:5b:0a:17:b7:36:5f:
a4:24:69:21:73:af:dc:a8:ba:05:7a:36:8e:53:db:
fa:10:d1:0b:9e:e6:db:a6:db:c4:d4:68:57:5e:09:
5a:90:3c:6f:23:0c:7c:32:39:25:17:0e:21:26:f5:
8c:9d:4c:41:41:75:61:a9:4e:9b:e9:bb:05:e8:d3:
ee:dc:2f:9a:a4:bb:50:66:1a:56:86:37:6e:d6:7f:
ed:8b:2b:0e:51:c9:84:33:e9:ba:64:6e:33:bc:5e:
a3:53:20:47:12:d1:49:f6:7a:8f:36:88:5e:3a:03:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:45:79:0D:B1:09:E8:19:1C:89:0E:28:30:1B:78:AD:D8:9B:A2:38
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:73:45:0a:8b:bc:40:9b:82:58:13:8f:2a:98:7c:ca:7f:c9:
4c:32:37:3d:1d:f5:5d:58:27:66:b5:25:38:23:47:11:98:07:
3f:29:92:3b:65:ba:f7:ee:6c:db:9e:27:f4:76:38:d2:4a:79:
be:b5:67:64:d9:ed:96:c0:70:bf:de:05:14:17:b2:24:7d:44:
c3:9e:64:8e:f3:9f:3d:55:61:a3:25:51:82:99:00:a3:72:c7:
38:1a:05:84:3f:27:9d:1f:47:4a:60:1b:87:2f:56:f5:09:f1:
fd:b9:a1:d3:4e:80:5d:12:24:ef:3a:06:99:76:66:d1:da:09:
92:12:05:4f:61:12:a3:f6:bd:9b:64:69:10:ec:36:81:f9:77:
a4:79:a7:fc:79:2d:5d:c4:4d:74:cf:db:7d:23:69:a3:f6:fb:
ce:e5:83:6e:42:71:b7:ae:70:ce:68:82:b5:ce:c7:06:d6:a6:
04:ae:c4:d3:4c:1c:54:70:ed:bb:2f:f7:c5:6c:d4:65:82:e7:
8f:d8:d2:2b:dc:bd:35:1e:e8:14:57:8a:b3:90:1a:38:8d:65:
d6:4b:32:0a:77:d0:90:9c:40:32:21:2f:79:22:cc:97:f6:26:
08:8e:b6:9c:f3:e9:09:3d:b3:2f:a7:0d:08:9d:f4:30:3e:0a:
5b:9d:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:18 2025 by rpki-client