Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File: iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier: xhI6zo26KLnXCLUpOu9CGpPS9ZHAoif/JUSYCHh4u4Y=
Subject key identifier: F4:3C:1A:12:45:97:2B:72:B5:C3:07:DC:EF:1F:3A:98:8E:88:A9:75
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer: /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial: 0194BD17A551781E9D19C42EAAE9B24B28C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number: 032B
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=)
2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: AXN7VJKDHcFRK9K8lksRDI/eUxeHDZ2s5GFrTL+thxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a5:51:78:1e:9d:19:c4:2e:aa:e9:b2:4b:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=f43c1a1245972b72b5c307dcef1f3a988e88a975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:6c:32:d3:23:5b:a5:92:a8:ae:b3:4b:f0:
b2:97:2d:4f:0e:f5:a7:b6:8b:3f:ba:f4:6b:aa:ea:
04:53:8e:53:28:93:33:cf:73:95:50:01:69:32:2a:
ef:3b:98:32:69:27:13:7a:a6:c7:a0:b3:79:75:8f:
dd:e5:f2:20:09:aa:53:0e:40:1c:de:7d:d8:74:29:
cb:cf:41:5f:02:17:f8:1a:9f:d2:91:0d:2d:65:04:
66:9d:bb:9b:b8:f2:47:fd:9e:96:b2:10:f9:46:b9:
2a:b9:bc:4a:51:d6:91:23:d4:34:ff:a6:ed:0b:f5:
00:a0:d6:5c:10:7a:45:ab:23:7d:17:2b:14:c0:e8:
71:5c:3e:bf:7b:bc:04:0b:1a:b9:f5:9d:95:bf:8c:
54:53:e6:84:81:5c:a5:03:09:f3:1f:24:75:c3:f7:
15:55:bf:9b:e3:95:2d:42:c0:db:7d:4d:49:72:15:
77:9b:21:85:20:6b:d4:4d:a0:c7:0f:4c:d5:8e:56:
2b:3e:aa:0d:e6:e1:6d:9a:d5:49:fe:03:fc:6a:37:
ca:ff:65:be:e2:cd:d7:69:9e:6a:a4:79:f0:5c:01:
f1:a9:4f:38:1a:79:fc:ae:d7:4b:1e:74:23:c9:e8:
69:17:5d:fa:0a:01:69:cd:12:41:f3:6d:b2:1a:a0:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3C:1A:12:45:97:2B:72:B5:C3:07:DC:EF:1F:3A:98:8E:88:A9:75
X509v3 Authority Key Identifier:
keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:6a:78:21:8d:d2:6b:55:aa:58:fc:58:ce:d9:f7:20:98:
55:09:fd:f9:e2:1f:9e:39:d2:75:1e:21:20:95:84:8f:4b:c6:
b1:12:0b:c9:8b:49:4e:fd:48:ca:a5:79:47:68:00:32:26:4e:
07:0d:ec:ae:c2:2b:ab:17:43:b3:39:e9:d2:e9:45:f3:7e:f5:
07:46:92:22:9d:7d:28:5a:4d:4d:d1:b4:e6:a9:6d:42:7e:fd:
9f:2e:ff:39:a2:34:74:58:c2:4b:d7:6e:65:1d:62:8c:69:c2:
39:a6:6e:68:97:e6:d9:ac:da:16:8c:3e:07:68:5f:c0:75:49:
8f:3a:b8:09:40:ab:74:78:9d:4b:42:57:e1:6f:81:45:8a:cf:
44:40:09:db:b1:24:f7:84:60:3d:3e:0f:91:7a:16:a6:90:24:
c4:a1:17:94:5b:58:ec:4b:29:01:d5:36:b3:02:09:ef:87:6e:
d4:70:c0:ff:2e:4b:b9:f0:75:39:f5:ce:26:64:13:87:80:1a:
a7:97:45:84:27:f9:24:8a:87:cf:a4:f5:e1:cb:62:5c:32:a8:
af:95:4f:3e:d7:48:79:0c:3e:38:7e:4f:fb:77:63:04:5b:c4:
e4:51:b7:51:a2:0e:49:3b:af:fa:b0:5e:a2:63:30:ed:86:13:
bd:0d:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:12:07 2025 by rpki-client