Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: o/m9lSUARJCeRfYNIamnRCxat7XD39sbcBIZP4OA1t0=
Subject key identifier: 00:E4:2E:70:27:AE:4F:BE:85:3F:29:91:2C:C0:02:A3:55:76:F6:A5
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 0194BD1761993B6B3AE81CE776AB02EE818F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0D96
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: +sZcrqo5hKvVtr8CJ+B2Jhsj81ItmL8QOAZk7W86Cgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:61:99:3b:6b:3a:e8:1c:e7:76:ab:02:ee:81:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=00e42e7027ae4fbe853f29912cc002a35576f6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:0a:65:f5:0b:f7:b9:e0:b1:0b:97:51:cc:
29:fc:4d:b8:43:cc:54:09:1d:57:ff:18:03:3d:28:
7d:4e:46:94:83:76:83:9a:73:9c:65:35:79:db:b2:
9a:eb:ab:48:5e:99:fa:c4:56:0d:c7:cb:e1:aa:4a:
a7:d5:b7:c6:89:9a:8e:2c:fb:1c:98:28:08:36:b2:
b3:47:14:ec:89:55:c7:8c:43:54:27:89:30:24:00:
46:56:c2:42:ca:f6:72:98:0e:5f:73:f9:af:3c:66:
cb:c3:57:32:24:26:41:5b:cc:82:de:e7:91:92:2c:
32:bc:7e:f3:f1:c1:3c:3c:33:87:28:95:f8:93:b7:
2f:de:ec:4c:4f:29:dc:63:4e:4b:2a:eb:d5:7d:5f:
fc:56:d2:fb:06:59:2d:6d:a5:30:10:c6:a1:e5:43:
72:03:b5:e4:64:31:d1:bf:90:ad:3e:fa:a5:58:94:
a5:0f:4b:35:b4:98:46:82:cb:23:4d:df:ba:69:d0:
ba:0f:12:c4:09:95:73:0a:fb:1f:53:a5:69:85:26:
1c:2d:5a:c4:00:ef:75:3f:2b:57:27:9e:d3:24:ba:
9b:23:f0:19:09:cf:ea:c9:1f:57:7f:1e:ba:f5:97:
2d:12:a6:da:e4:38:f6:78:2e:dd:da:24:5d:9c:5d:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E4:2E:70:27:AE:4F:BE:85:3F:29:91:2C:C0:02:A3:55:76:F6:A5
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:47:0c:41:a0:29:55:c9:1f:cc:63:4d:e9:56:4c:63:42:a3:
bf:b6:e1:83:7c:1f:1e:c3:04:b2:b8:78:a8:e3:b9:50:55:05:
db:45:1c:26:a4:fb:e2:0a:72:fe:c0:9c:4c:0a:03:56:01:e2:
bd:b6:d3:bd:57:a9:e2:37:0c:8a:54:35:4c:87:c5:9a:a7:b6:
b4:f5:3f:0f:a2:69:e7:c0:a0:a9:83:a2:29:48:ce:f0:20:09:
d1:3c:3a:ef:20:6b:59:b0:c0:e0:28:10:9a:5b:c4:1f:8e:f6:
7a:fc:2f:b3:08:f7:a7:8b:33:08:e7:1a:8d:eb:a4:4f:3b:68:
d9:e1:01:49:43:3b:b3:7c:09:6a:08:d4:af:fa:9f:27:48:37:
e3:12:8b:ad:c9:05:73:45:f9:01:9e:b3:be:3f:c8:15:fe:0b:
60:76:25:8e:d7:0e:ad:f6:39:49:1d:18:60:b2:76:5a:3e:e3:
09:73:72:0c:8b:a6:eb:e9:11:6b:ef:d5:0c:98:85:97:25:4d:
e1:1b:c2:3e:46:0b:73:e7:2e:3c:4b:df:ca:3d:5a:64:8b:2f:
48:12:50:55:fd:a3:8b:70:f3:b9:8d:2f:a9:29:c5:ed:c5:16:
f8:4d:6d:71:d1:53:01:c2:45:95:bc:a1:49:25:5d:6c:8d:e3:
05:85:12:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:49 2025 by rpki-client