Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.mft
File: i4gBVDgSBAR31HRCKUZshTfUUXE.mft (raw, json)
Hash identifier: eaIDnVKZJEQqsfVTFGXZR8qzfa+NSaVRqz/tGcbBGLk=
Subject key identifier: 47:E2:5B:5B:B8:9E:6D:56:3A:2F:DC:B9:66:80:14:38:B1:EC:7A:F6
Authority key identifier: 8B:88:01:54:38:12:04:04:77:D4:74:42:29:46:6C:85:37:D4:51:71
Certificate issuer: /CN=8b8801543812040477d4744229466c8537d45171
Certificate serial: 0194BC72E684794439DF02A2B6C0168D6080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4gBVDgSBAR31HRCKUZshTfUUXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.mft
Manifest number: 0B73
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: CDrnNbtJLaCL50xwnqrzUWhQ_9k.roa (hash: xkyChTjHPfmap3pEfIzmPahUIANDsQxEAOedvER2SvU=)
2: i4gBVDgSBAR31HRCKUZshTfUUXE.crl (hash: rlKzwRjlCzJVEt8F63e2SAAbRPhPguWsm20QlCQE4Wc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e6:84:79:44:39:df:02:a2:b6:c0:16:8d:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8801543812040477d4744229466c8537d45171
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=47e25b5bb89e6d563a2fdcb966801438b1ec7af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:64:9f:39:e0:74:fd:cd:b6:ec:aa:50:6f:
ef:98:8a:cb:e4:09:02:5f:19:0d:7d:da:9c:17:d4:
75:93:bd:4b:54:df:eb:8a:f4:80:e1:7e:4e:9b:c7:
35:4a:40:af:40:55:d8:18:20:d0:c3:bd:9a:e1:c5:
59:50:1b:d5:0b:e1:44:73:28:cc:a4:7b:7e:b5:63:
2e:e7:5d:ec:bb:53:1b:74:0d:16:cd:d7:a8:42:06:
ba:c7:87:af:dc:36:48:e0:d6:31:fc:c6:e8:2b:0e:
30:a4:ef:94:cf:70:4d:d2:2d:af:9d:a4:db:b5:cd:
c8:29:55:c1:8b:04:6b:6e:72:9b:f6:18:fa:66:2b:
1b:92:ac:99:12:6d:47:f2:34:b3:b4:ab:5f:50:ee:
be:4c:d8:4e:03:b0:eb:42:34:25:1c:c4:5c:d9:aa:
a2:df:c2:1b:33:a6:f3:2f:d4:8f:ec:9b:cb:3a:36:
a0:a1:90:9e:0e:b1:e2:92:96:4e:18:94:07:a8:ee:
d1:42:48:30:b9:48:15:0c:2d:46:1c:80:b1:e2:9d:
7b:52:6f:2b:cf:f5:73:05:e1:85:4f:f9:d6:88:75:
08:31:7b:a5:3b:06:06:1a:93:bf:95:2b:83:d0:3a:
9e:eb:97:54:2d:d9:bd:c6:5d:75:84:12:90:74:60:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:5B:5B:B8:9E:6D:56:3A:2F:DC:B9:66:80:14:38:B1:EC:7A:F6
X509v3 Authority Key Identifier:
keyid:8B:88:01:54:38:12:04:04:77:D4:74:42:29:46:6C:85:37:D4:51:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4gBVDgSBAR31HRCKUZshTfUUXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89bb71-3fe9-42d2-a73b-13ae98aa7d33/1/i4gBVDgSBAR31HRCKUZshTfUUXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0e:9e:49:20:34:b4:20:b5:51:1f:a6:dd:72:7b:ff:68:25:
a0:f4:64:84:aa:25:13:b2:69:8e:0c:d9:45:c1:53:ca:91:13:
69:ac:e3:b5:08:d3:74:d6:98:02:31:30:19:e5:d8:5c:9a:81:
61:78:85:3f:2d:04:3f:bb:98:9f:8d:78:7a:b4:02:a9:98:1e:
3a:f2:76:0b:eb:1c:60:05:09:11:23:da:05:cc:8d:94:d7:45:
83:38:06:10:20:c0:d6:7b:24:bc:86:a3:e0:98:23:69:75:78:
9c:83:0c:9d:a5:7d:dc:ff:d4:78:ff:d7:7a:5a:68:04:ae:7c:
c5:8e:5a:17:1a:72:4e:12:14:fa:70:eb:84:5f:54:0f:87:06:
ff:e8:f3:e6:09:71:8d:fb:c4:23:f7:3f:87:ab:ed:f2:f3:7d:
35:e4:53:dc:86:52:99:12:9a:f3:1c:63:6e:78:3d:75:84:e4:
36:ba:51:49:6e:60:e7:a1:39:09:8a:e5:ff:99:ed:8d:c7:71:
d5:8a:bf:fa:86:3f:e4:2b:0d:e1:1c:fa:62:e1:97:11:bd:2f:
4c:5f:4b:63:2e:72:f9:19:35:2a:81:22:38:c6:d8:30:23:37:
cf:33:d2:a8:37:bb:2a:3b:18:37:82:7a:19:b2:e6:d0:51:8b:
b9:3f:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:26 2025 by rpki-client