Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: RRaGCaYsKY9R673XL8oX87VoZF9xaUtwa+Ielv6+9rg=
Subject key identifier: D8:73:CE:E5:44:AE:6B:D3:AD:EC:18:4C:73:6F:5D:E9:88:DA:EA:E4
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 0194BCAA026A00136FF910C9E63AE0A92416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 055D
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: 2VPW0Tlz9mQOgKtQrJJpbJwOunFvWRqwH1DcIXSeEYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:6a:00:13:6f:f9:10:c9:e6:3a:e0:a9:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=d873cee544ae6bd3adec184c736f5de988daeae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:e3:45:c1:45:c7:1c:35:34:0b:a4:25:72:
a9:68:e5:80:dc:71:07:e8:07:af:28:f5:47:97:a1:
4b:0c:cb:97:ee:5d:15:1d:af:6e:3c:07:0e:f4:b8:
29:26:5d:4f:fa:06:fd:2e:69:03:44:7c:f6:5e:d6:
18:3b:ca:bb:3e:d2:60:72:8c:94:72:de:9f:6c:e1:
aa:8f:44:fa:63:e5:53:b8:8a:da:85:d0:fe:3e:0c:
30:57:79:f1:aa:b2:42:5c:a7:80:b4:f3:7e:c2:7c:
65:93:63:2a:ee:46:f8:ac:eb:2d:c6:ff:23:2b:19:
37:e7:f6:11:14:33:c3:bd:ea:c4:76:62:5f:4b:7b:
71:c0:f7:59:9a:49:d9:20:db:aa:f4:3c:4f:66:70:
89:52:a5:49:3a:4e:84:69:c7:af:c2:85:c2:55:b8:
57:0c:a8:39:96:dc:69:29:34:34:2b:b1:0c:98:92:
68:05:90:7c:9f:9d:fd:73:ef:f5:6e:68:56:4f:57:
71:9e:f2:37:1d:de:5c:67:7a:39:95:0b:8b:4e:d2:
89:d9:19:8c:56:d4:6a:85:8a:10:0b:e3:b2:8a:0a:
4c:df:b1:85:12:83:27:3c:8f:69:f3:c3:fe:52:ca:
75:d6:71:f1:eb:b9:52:d3:23:f1:bd:96:13:95:aa:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:73:CE:E5:44:AE:6B:D3:AD:EC:18:4C:73:6F:5D:E9:88:DA:EA:E4
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e7:8a:75:fe:2a:c6:07:29:ab:34:23:ca:80:8e:a5:d2:81:
84:8e:f2:62:dd:82:b6:b6:cc:b6:cc:01:43:20:20:45:49:24:
52:fa:90:55:5f:b8:ed:f9:ab:a0:57:6d:69:08:b8:47:4f:76:
8c:3e:af:58:e4:1f:bd:74:97:9f:a1:30:4c:60:28:d9:a4:ea:
01:f5:6f:41:d2:18:7d:24:68:7d:fa:e2:60:e6:b3:9a:70:c6:
bd:ee:37:1c:0a:98:d9:f7:26:45:73:bd:30:a5:a2:cf:69:76:
01:bc:4f:0f:fe:d2:39:5d:17:ff:56:d8:d8:6a:a3:30:ba:c7:
b5:49:ad:de:ca:e7:1c:32:3f:41:c6:20:1f:66:c9:b7:13:33:
53:14:0a:49:5e:cd:a9:b9:d1:b5:85:85:6e:31:5c:20:2d:9d:
9e:8b:ea:6d:cb:18:0b:ee:65:f2:fa:41:c9:f5:49:51:e7:16:
36:9e:6f:3d:cf:c5:35:1b:4d:13:0d:d5:e4:fe:96:5c:9d:b6:
3a:31:11:47:69:75:6a:5b:d1:b1:f9:28:c4:98:5a:b3:f9:d0:
78:19:5a:60:6e:be:4c:de:7c:c1:c2:63:95:44:9c:08:36:22:
fa:ab:f7:87:f6:6e:65:c6:91:5e:c7:8b:2b:15:c8:b9:41:6e:
d2:f9:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:15 2025 by rpki-client