Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: MbkLqyzY7xdK6GLa+gYXdklA/R74Zv3kEnQ6e2OPLhM=
Subject key identifier: 46:19:28:03:70:6D:DF:33:60:E3:BF:55:93:CF:88:4C:B5:96:22:A8
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 0194BBCE9CBF9DB3C0E49090030DEE2B8995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: E8uSNywATxgyfIc1DTCm+/jnR/wDhYYAK/P3VzxnEz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9c:bf:9d:b3:c0:e4:90:90:03:0d:ee:2b:89:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=46192803706ddf3360e3bf5593cf884cb59622a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:2e:64:e0:f5:9b:28:d7:d4:1b:04:49:a3:
6f:43:88:ae:5f:98:9e:de:a0:1f:64:09:d4:da:b6:
7a:2c:d5:1e:58:52:b1:aa:15:82:5b:47:9d:2b:53:
65:82:f0:52:91:d2:2c:ed:1e:4b:5a:dc:c3:36:99:
44:44:78:81:a0:16:2c:34:5f:f7:28:a3:c1:96:ba:
c0:e2:43:90:f6:52:b7:b7:2d:0c:c9:d1:18:cc:60:
40:7f:50:64:6a:86:bb:c9:ce:13:34:00:3c:51:e9:
92:02:d1:83:2d:54:58:4c:87:25:1a:23:4a:21:8f:
66:16:04:6b:78:5d:04:ee:a5:0f:82:9f:24:35:c0:
cc:e8:fe:b1:42:0c:f5:db:fb:76:2a:42:14:81:ed:
da:e9:bd:31:b6:ba:1c:5e:8e:e0:66:46:ac:40:30:
e3:67:e6:16:b5:f0:57:c8:10:b2:76:09:99:0e:dd:
53:aa:c8:31:e4:2e:ab:04:a3:ef:be:6a:47:70:34:
67:bf:f9:6a:54:39:da:cf:33:af:72:fb:96:b7:26:
85:07:b5:20:2e:44:c8:97:3b:ab:b4:6a:31:de:ff:
c7:0e:9c:8f:d6:1f:52:be:e6:98:ce:cf:6c:67:6b:
63:05:67:13:a6:58:ab:17:db:07:88:0a:fd:1f:d2:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:19:28:03:70:6D:DF:33:60:E3:BF:55:93:CF:88:4C:B5:96:22:A8
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d4:db:33:84:5e:f5:1a:89:81:ec:b4:85:f9:d0:20:1c:db:
b1:b0:8d:71:99:04:d1:e2:d0:bc:9a:b5:54:d8:59:5b:48:e8:
8a:fc:f0:f7:45:e5:2f:3d:d4:9f:83:b3:c1:80:e4:f8:2d:50:
5c:65:b5:af:76:88:e7:89:98:05:62:fa:0d:50:ac:3e:3d:4c:
97:0f:d3:36:26:fb:27:0e:13:aa:0b:c4:99:2e:f1:99:36:da:
fe:63:39:02:58:6f:04:24:3a:35:f2:b1:83:b3:1b:ac:4a:7c:
dc:4d:4c:a5:db:ff:1c:dd:0c:00:0b:8c:5b:89:39:f0:60:a1:
53:b7:cd:30:1e:05:07:12:65:06:ed:96:62:bc:44:8f:7e:6c:
25:9a:45:fd:9e:2b:b9:d6:c7:dc:59:3b:fd:8e:db:bb:8c:a1:
17:95:e1:96:d3:1b:7f:86:be:33:b1:5b:d4:91:90:e1:45:77:
de:6b:06:d9:b6:ea:e7:cf:d4:81:c2:28:72:7d:4d:01:eb:c9:
19:e2:5a:aa:c0:48:95:32:42:a7:00:00:89:8d:9f:8c:dc:79:
60:80:36:b7:a5:da:f8:a6:28:67:e6:50:9f:a4:7d:1d:9b:4a:
c6:66:99:e5:d2:95:e6:cd:0e:a4:00:25:90:4c:f5:24:a8:26:
7a:42:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:58 2025 by rpki-client