Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File: iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier: Ao0cwjP7eNCX85XwPyZ0p7WZmkWJBZ9qhdOg3mdRsyM=
Subject key identifier: 14:A6:75:7A:D6:22:6B:35:DF:2C:B4:36:71:E0:CB:29:E2:BD:49:19
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer: /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial: 0194BC72AE1AF2C65F92D064C3FD80BE2BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number: 01CB
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 8USyjcIT_1GOHpkZIowE_fxQy7g.roa (hash: SrhI+FQKoLnBdoVigVeYKJo+5g+IVUyEqc65USNCWB0=)
2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: M9rKSAHOJjuut1QV1KYU9slJsFFiuwTSEsYAzCECJVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:1a:f2:c6:5f:92:d0:64:c3:fd:80:be:2b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=14a6757ad6226b35df2cb43671e0cb29e2bd4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:47:cf:1f:70:57:10:df:27:d9:15:aa:d3:
34:22:12:0b:71:4c:83:68:c1:b4:a0:ad:52:35:74:
69:e3:ed:9d:e9:58:b4:6a:32:83:e5:6b:b5:f0:49:
44:83:8a:33:38:22:fc:5b:3f:b3:03:60:68:4e:22:
29:51:ce:04:d6:b9:67:a4:38:f8:e6:89:94:f8:20:
47:9d:4c:cd:c9:74:eb:83:1e:fa:c3:4b:fd:62:fa:
d9:7c:37:9a:ed:01:24:7d:95:d1:9e:7e:15:bd:de:
bd:da:9b:94:7b:f5:c3:09:8d:fd:5e:4c:12:37:f4:
b9:a3:10:12:7b:36:fb:c2:8f:fd:5d:a6:e8:28:ac:
89:e6:9f:c9:de:a7:c3:d0:af:d1:74:0f:38:93:56:
76:7b:76:b8:c6:ad:b4:a1:34:90:22:05:0c:ec:23:
6e:35:82:e0:73:e3:a6:39:bc:80:dc:a1:d1:43:be:
cf:62:02:c7:5f:b9:f7:6c:c6:17:8d:ac:cc:e7:1f:
34:4b:34:3d:61:75:56:20:b3:49:bf:4b:35:85:9a:
24:c5:2f:7a:67:bc:34:b6:65:77:f1:27:4f:95:77:
43:fc:59:95:8d:86:09:c1:c2:0a:c6:f0:dd:8d:60:
2c:b7:17:6e:d4:80:78:ee:79:85:e6:30:93:19:3e:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:75:7A:D6:22:6B:35:DF:2C:B4:36:71:E0:CB:29:E2:BD:49:19
X509v3 Authority Key Identifier:
keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c7:98:d6:ab:af:12:40:f4:83:5b:d0:68:a9:59:6e:f6:91:
b3:db:99:45:69:54:55:52:87:e3:a2:47:a2:77:65:5b:4d:89:
38:5f:f0:0c:b8:39:24:dd:e3:9a:3f:6f:c2:8a:6e:a7:c0:b5:
92:6e:d6:95:34:2c:ca:d6:26:c1:ec:2f:a6:2c:dc:0a:b7:d4:
10:61:7f:d5:20:84:9a:73:33:43:e6:3f:1a:e3:3b:e5:9c:b4:
75:f0:d4:7e:7c:93:97:0d:1f:b0:91:07:c0:d2:e2:63:5a:36:
91:5e:96:f8:2a:93:f0:42:7c:9f:ea:36:52:49:37:3c:9b:32:
a5:ea:2d:d7:2e:21:ee:dd:cf:93:67:3d:00:da:52:90:30:0a:
4c:ff:45:5c:7d:3c:cf:af:02:d2:50:d6:22:df:c7:8d:98:e0:
32:2a:b8:8c:37:d5:a4:ba:ba:c6:29:37:66:2f:86:45:8a:31:
22:9e:52:5b:d6:0a:19:08:52:c9:c4:34:ac:db:e5:c4:2c:0e:
23:b6:ac:ed:f2:f8:76:1e:ff:2e:55:f7:1e:bb:de:b3:30:4f:
d1:21:c1:11:1d:cc:54:c4:59:73:17:25:92:9f:58:41:3a:f2:
b2:47:4d:b5:a0:97:95:57:6c:95:04:ef:2d:31:a4:e7:af:5e:
82:6b:56:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:43 2025 by rpki-client