Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: P3X8Fy4bshX8+bI2oZc8YjFcCltFQk/DY8QiQ3rfhJA=
Subject key identifier: 5C:09:82:17:04:B9:E3:5D:C4:19:CA:3A:3B:AD:26:41:32:5F:10:B1
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 0194BCA9CEFFDF352D16988773D7E59CF9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: jkX73PO7/tnkbmOrMA6bIDyExpCT/GoYMBnDvZPB5uc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ce:ff:df:35:2d:16:98:87:73:d7:e5:9c:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=5c09821704b9e35dc419ca3a3bad2641325f10b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:01:ef:99:6e:9a:94:81:02:7f:73:8e:d7:
f8:4e:f1:2f:9c:7a:d2:f1:f0:b3:08:36:6d:fd:c4:
3f:55:93:31:69:38:e3:b8:e7:10:43:97:b9:ee:1a:
70:96:d0:f5:f3:49:bc:86:5a:ed:b5:bb:47:43:e9:
49:57:17:4e:05:51:ce:24:e4:f9:83:3f:10:d9:f9:
15:ec:71:a1:b9:9a:08:d9:cc:58:b8:ad:58:45:a2:
f1:89:0c:bd:d8:b9:14:91:2e:58:d7:8f:d5:d6:d2:
bc:11:20:23:c5:72:58:55:2f:0d:6f:24:4e:d4:54:
ca:49:78:d7:16:da:d0:8b:33:f0:f7:2e:6b:e9:8d:
0b:8b:4b:64:d1:15:3c:c5:d5:9d:5a:c9:47:d5:c4:
cf:63:61:50:ef:23:c8:ed:8e:6b:a4:1c:98:ec:31:
17:ca:d6:43:34:a3:a5:f8:8a:cb:49:30:83:00:16:
72:85:8f:77:16:6a:e8:67:f1:78:57:07:6f:e4:25:
44:c5:5f:df:ba:10:c9:de:de:c5:11:a5:c9:3f:d7:
3d:fa:f5:63:00:b0:34:e6:54:76:77:b6:7d:63:5f:
77:f5:a8:1f:05:eb:fc:ba:47:ba:49:c6:75:ed:11:
aa:66:7b:22:98:55:1a:6d:63:93:a7:92:45:3c:03:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:82:17:04:B9:E3:5D:C4:19:CA:3A:3B:AD:26:41:32:5F:10:B1
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:5b:5c:ed:c7:bf:75:ba:f0:23:c7:b3:a1:55:90:ae:13:
51:e3:ab:3a:6a:1e:b2:51:40:65:39:d9:8b:15:1f:56:f1:97:
f9:86:43:de:41:18:4e:e4:9b:f1:5c:23:ab:7d:bc:3d:22:7a:
a3:aa:29:ca:8a:03:82:4d:e7:64:4a:40:b4:fc:4e:fa:1b:11:
6c:bb:bc:01:f1:7a:0c:dc:17:49:91:0d:79:d1:30:ca:06:67:
03:d4:a3:f3:7b:34:f6:42:b0:7c:08:15:97:cb:e5:94:37:40:
63:63:63:fa:1c:eb:d2:a3:ea:cd:93:cc:de:62:97:b3:b2:e9:
75:7f:3c:37:c9:31:cd:7f:d1:88:bc:f8:70:14:73:8d:4f:46:
7b:d6:38:f3:cc:80:1c:f7:b1:6a:17:68:63:02:45:9a:be:0a:
72:c4:9a:7d:aa:ec:8a:7c:6d:26:6e:23:f1:cf:d5:48:62:f9:
de:28:59:9f:85:22:bd:6a:b7:8c:bb:e6:5e:aa:d4:64:6c:50:
d3:d7:aa:85:9a:67:0f:32:e9:2f:4f:a1:8e:6e:7a:20:9f:2f:
2a:ac:56:c9:54:c0:00:97:e4:06:b6:58:ca:85:80:f9:09:1d:
dc:a4:38:e2:a8:79:0b:69:ae:85:47:78:5f:ab:aa:a8:63:0f:
11:db:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:04 2025 by rpki-client