
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: /HgxwuLQ8kNQ6kldH2VLnul8RhS1FQ2R3DpwwacriQA=
Subject key identifier: 51:7D:50:D8:E0:4B:6F:9F:B7:CC:50:FC:65:A2:88:18:51:98:6C:9C
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 0194BCA9FF4AA951C0AF035D0503227328AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: a9f8qbp5mNZySV03erNN+ayEaXZPuqBJJRyRR1DDO/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ff:4a:a9:51:c0:af:03:5d:05:03:22:73:28:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=517d50d8e04b6f9fb7cc50fc65a2881851986c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:98:03:80:be:a7:d9:f8:de:e6:33:63:4a:
bf:8e:6d:06:bc:12:79:0d:dc:5d:76:55:b7:47:4e:
e8:28:d4:a2:94:31:d8:01:85:7a:cd:06:d3:a7:2f:
d8:3e:5c:a9:f6:c3:e8:73:31:04:b2:41:38:35:88:
3a:21:1d:ad:6c:cb:84:2b:cc:e4:59:69:2d:a9:fc:
14:0f:5b:18:3f:6a:6d:65:2a:9e:a8:04:91:20:6f:
05:33:8b:a9:6d:46:13:4a:df:9d:b7:b6:f5:63:62:
ec:61:98:2a:c5:97:7f:20:e7:63:0e:61:17:17:aa:
b6:15:c8:70:2d:cf:70:ae:33:80:62:42:24:cd:54:
f8:06:63:5c:7f:e2:51:bb:25:4b:7d:f9:12:85:f8:
c3:a7:86:f3:93:37:15:cc:69:c4:76:c6:54:22:1b:
7d:1d:29:3e:ee:ea:6f:e9:a1:15:58:d7:ef:34:5e:
d2:cf:e6:59:a0:90:67:11:81:bf:78:9d:9e:01:a2:
be:5f:dd:ee:ad:c5:a6:ed:72:8b:1e:af:8e:b1:f6:
ba:c8:78:ba:64:2d:5b:39:52:c2:e7:ae:f0:d8:66:
35:c5:ec:3f:93:15:15:30:06:2f:90:2a:96:a6:7b:
0e:5b:72:3f:15:76:af:92:e8:94:62:dd:00:73:5d:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:50:D8:E0:4B:6F:9F:B7:CC:50:FC:65:A2:88:18:51:98:6C:9C
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:15:f8:b2:03:0f:fd:64:ae:35:dd:31:46:b0:c8:59:60:b2:
8b:db:a9:ea:9b:af:1c:15:33:ca:85:13:ec:d3:53:05:ef:ef:
dc:69:a7:d8:a4:02:9b:9e:66:be:df:83:d5:46:57:34:41:71:
72:bf:da:a4:64:e4:9c:7d:63:ad:fe:8e:c7:28:1f:7b:fc:d6:
8e:14:a9:e2:33:54:8e:4a:a4:ab:3a:bf:2e:39:f0:44:1e:e6:
64:a8:f2:45:dd:37:f3:0d:9f:01:9c:8f:40:c5:25:5b:d6:33:
dd:27:ca:61:84:49:e9:70:fd:bf:f3:ed:e1:21:78:ee:d5:79:
5e:5f:56:98:5e:bf:5f:81:5c:ae:0c:0a:d1:76:d5:14:eb:8f:
8c:52:2b:10:06:94:13:d1:dc:30:19:2c:18:86:3c:be:a6:31:
b7:0d:37:af:21:f9:11:36:29:fd:b7:b2:db:b3:51:e6:2c:20:
d9:ba:d8:2b:2b:f0:76:21:3c:f7:87:13:09:a0:39:86:1e:9e:
5e:65:45:b7:25:c8:4b:17:0d:a3:53:29:f5:54:58:ff:ba:c4:
ae:f7:53:87:d4:0c:55:74:aa:f8:1e:62:09:ef:67:74:ef:54:
a4:c9:1b:6d:b6:c7:e3:47:36:30:12:1c:f8:8b:84:85:f0:9d:
a0:74:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:25:08 2025 by rpki-client