Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: Awe6IIqmhWtOp/qSSW+yPoV1ZDUhOX1IjtfL36/4kAI=
Subject key identifier: E0:C4:84:48:43:57:45:E6:0E:63:55:92:3A:55:2D:10:9B:DE:A3:05
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 0194BD4E5034AE48CABAF8632BC3982386E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 1008
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: ygQAam/x0UEBMx9SvxFQAFjnqhkDMgtG3VtaOVWYDXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:50:34:ae:48:ca:ba:f8:63:2b:c3:98:23:86:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=e0c48448435745e60e6355923a552d109bdea305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:9a:2a:13:e5:06:43:c5:8b:5b:75:17:c2:
5a:da:0f:cb:4e:3c:b7:a9:ce:8d:4b:32:ce:44:db:
6a:47:25:e7:22:9d:65:80:a8:53:66:87:e6:9e:ed:
58:aa:01:29:73:39:e4:e9:e4:76:57:6f:3f:f9:6b:
51:16:c4:1f:80:83:e5:8a:84:3d:62:3a:ae:83:dc:
bf:e6:69:0a:7d:46:74:62:5e:71:f0:36:f8:a4:fb:
4f:19:b0:31:14:f4:e3:b3:27:64:b7:42:d8:83:5c:
d9:dc:a2:35:06:7f:b9:7f:99:c1:78:50:3e:a7:a9:
54:28:73:4f:47:c4:07:03:45:7a:ea:1a:7a:39:d6:
56:e0:fe:36:fe:a6:89:54:cb:ff:e2:6f:18:07:e1:
d6:81:fb:a6:d1:f8:a0:ae:2c:ad:bc:53:f9:50:b5:
59:1f:49:50:6f:c1:b7:67:91:a1:21:33:74:b4:27:
31:90:3d:81:a5:fb:3e:4b:2c:37:41:8d:93:b5:58:
82:c0:42:2f:ef:da:ea:cd:4c:fa:a4:36:38:32:a6:
17:68:6d:67:2f:39:3f:b4:24:78:c9:4f:02:2e:46:
41:f1:17:c6:a2:ed:7a:98:65:17:9a:fc:79:78:71:
83:12:66:05:ed:4a:d0:4e:c4:44:3d:2b:a3:78:0a:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:84:48:43:57:45:E6:0E:63:55:92:3A:55:2D:10:9B:DE:A3:05
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8b:e7:ed:e9:5a:da:a7:db:f1:e9:c9:e6:53:c8:1c:da:f2:
88:38:55:88:7e:8e:6d:4c:de:1f:75:7c:72:9e:b6:df:55:b3:
6d:9e:4f:1f:49:c9:29:bb:2a:e0:d4:c9:9d:9d:88:b5:6f:f4:
00:1b:9b:fc:39:c1:62:30:c3:33:c9:27:1d:b1:3c:2e:79:ce:
76:0c:db:18:1f:37:5f:ac:db:44:3d:21:9e:65:a8:a5:48:0a:
69:92:8a:44:8b:7e:aa:67:45:62:c8:c4:a5:0d:e5:bc:a8:77:
42:46:5d:87:3c:2a:3a:da:66:5c:a2:2c:9f:cb:21:66:81:59:
60:57:ee:e5:18:51:fc:fb:a9:22:cf:e1:9c:5f:d0:e0:59:20:
e9:c3:2e:d4:11:4f:9e:ee:22:13:e3:a7:1a:1a:46:79:c6:b9:
c1:41:9d:27:8b:41:87:66:87:a8:26:ae:31:a9:f2:e4:61:fc:
6d:a4:df:4e:90:1c:30:6c:d1:bf:f3:93:cd:27:18:eb:2d:26:
3f:21:08:ca:c5:84:67:52:bf:6c:7b:4e:0d:81:21:05:7c:74:
49:27:90:03:58:3e:38:5c:df:56:c9:13:20:59:b2:04:0d:7e:
e4:a9:b2:f1:a5:0c:37:82:34:d8:a5:01:3b:fc:9f:ff:71:14:
20:a7:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:44 2025 by rpki-client