Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: TMcd3oafyrwS9QEE+oOTm/iCE4dOK7s5k1B6XOskTFI=
Subject key identifier: 35:DF:0D:28:83:C1:EA:83:96:6C:EF:24:2C:99:76:18:A8:5C:2B:3A
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 0194BD17E9BBFEC41971AEA0B165E259E868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 08FB
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: U3vDSPmmQ/y5WmIBiXdnRIXThe4/8mre0Vnxgde6FdU=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e9:bb:fe:c4:19:71:ae:a0:b1:65:e2:59:e8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=35df0d2883c1ea83966cef242c997618a85c2b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:a0:ce:27:f8:f1:c7:33:cd:20:36:a8:91:
a3:7e:53:b7:d1:f7:8e:40:94:b2:77:82:13:33:53:
8d:df:ea:3c:4c:83:a3:11:e9:e3:70:20:0b:24:f4:
60:3a:5c:5f:c5:91:d1:fd:1f:3b:4a:d9:a0:94:73:
60:0a:57:94:cf:f4:e3:91:2f:e1:19:20:99:de:c2:
b8:48:e4:2e:32:f5:18:93:d6:d9:d1:bc:27:f0:a8:
52:bf:55:57:94:d7:26:d7:4e:82:42:04:11:a4:97:
0e:75:6d:5a:2a:2e:8c:e6:19:63:a2:6c:d2:25:26:
bc:ec:c4:02:18:c1:1d:13:0d:24:7a:5d:dc:dd:ec:
32:73:29:af:d1:38:09:4e:84:85:61:ed:87:a5:57:
cd:50:76:39:f6:e8:67:3e:a7:ae:92:50:90:5e:6b:
45:56:6f:9d:6d:b2:33:b9:c9:fe:17:b5:b8:8f:d1:
a0:3c:ec:f5:1b:e1:c9:90:58:62:35:04:bb:ba:ce:
09:0a:e5:c4:42:32:1e:fc:ea:3c:a0:f6:6a:08:2f:
5a:bb:4f:d7:a7:21:9b:26:3e:9c:d4:6b:aa:05:2d:
58:cf:49:7a:f9:7a:64:6f:82:10:e0:87:13:8b:57:
09:9c:4d:2e:fd:5a:ac:a6:23:2e:ad:8c:a2:e4:28:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:0D:28:83:C1:EA:83:96:6C:EF:24:2C:99:76:18:A8:5C:2B:3A
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9d:50:d1:16:08:6f:9e:1a:57:bc:64:7f:c9:2c:1d:7d:5d:
34:d6:14:6b:38:d9:6b:d7:82:29:8f:8d:0f:05:5e:f3:90:d3:
9d:7d:7d:d1:7d:14:71:d0:5c:b1:82:9f:bc:f3:28:08:be:55:
b0:ea:6a:fb:93:d7:e3:76:8f:34:76:86:84:d1:9e:63:d3:2f:
9f:7a:66:ff:c1:a1:5b:81:7b:22:21:b3:17:b7:e3:4c:69:75:
99:76:d3:54:f9:1e:37:14:a4:12:e6:a6:e9:63:ca:9d:25:77:
3a:ef:1c:71:85:a9:24:87:b8:e1:8d:3a:6c:4f:94:40:ca:07:
2a:e7:02:13:9c:25:76:c2:3b:da:3b:3e:2a:87:39:de:4e:cf:
67:83:db:d4:a6:eb:f9:b7:aa:57:af:83:e6:b0:36:14:6a:af:
66:08:ac:d1:09:48:bd:3c:80:27:4a:a9:8d:f9:b3:eb:38:85:
20:45:1c:ac:60:a1:a6:2c:d9:88:fb:1f:ef:73:63:3f:74:39:
7a:af:13:cc:2d:61:33:d8:c5:3b:eb:df:71:8d:bf:5c:c6:eb:
3b:34:98:78:06:0d:d9:65:4f:d6:9f:09:f4:d8:19:6d:89:2f:
6b:a3:e9:3b:97:02:47:90:59:bb:bc:57:31:d2:ee:d9:d7:ae:
70:ff:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:59 2025 by rpki-client