Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
File: IZUnwiTwCiiy9MtOExLXSNXKUWk.mft (raw, json)
Hash identifier: t0h++WI4fkmYa9GwO0a6mTuVNyT7RqTSChnCYj+jFXw=
Subject key identifier: 62:49:C5:B7:FA:6A:FE:8D:B8:CD:DF:26:A7:94:99:CC:3A:1B:EC:6E
Authority key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
Certificate issuer: /CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Certificate serial: 0194BC3C609AC2C738938DC0855532A95791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: IZUnwiTwCiiy9MtOExLXSNXKUWk.crl (hash: i6I5Tf8nGL0akbMgh/eDg5ij2KuEgrkOioIAfPTH44U=)
2: l8INnv3QTRexkISN97lg6HuKeCY.roa (hash: pDEsYARUuEJK1pYQPfyythtLkxkCfRaxj9c1qzwCEIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:9a:c2:c7:38:93:8d:c0:85:55:32:a9:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=6249c5b7fa6afe8db8cddf26a79499cc3a1bec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:de:f1:68:51:be:2b:ae:5e:00:15:9a:e8:
fd:da:69:a5:3d:c2:27:b3:b7:a1:bb:15:2b:f7:a0:
af:8d:b8:cf:71:96:40:f9:5b:8a:dd:50:d2:a2:69:
51:ef:27:28:4c:a1:be:94:2f:b8:12:15:2f:7e:1d:
f6:d6:40:a0:66:10:01:be:fc:1a:fe:a7:b8:71:72:
e0:93:d8:8b:e8:84:80:48:d3:92:c0:42:ae:1e:14:
f5:a6:f4:5b:40:73:da:ae:31:61:f2:fb:77:f8:f3:
44:55:49:24:59:42:46:7e:de:98:51:ff:9e:16:2e:
ca:74:f9:ef:33:88:1d:fd:d8:18:cf:29:cc:88:0d:
ab:80:79:b6:e5:ec:4e:b0:fa:fe:f7:c0:8a:fe:e4:
4f:0f:21:20:06:0a:cf:18:2a:d3:4e:2e:31:e2:31:
46:91:34:c4:08:5a:78:6b:ba:55:96:7b:dc:fc:b1:
a9:ee:b5:f2:42:c9:02:b7:06:91:33:b7:0a:61:de:
41:14:5a:c8:ab:9d:3a:1c:ca:d6:30:0d:e7:6c:4c:
6d:77:9d:fa:49:b7:72:7b:be:b9:5f:0d:4c:f2:ed:
ba:d2:92:fa:40:66:c8:1d:4b:a6:39:cd:03:26:8c:
b2:c3:a3:d2:18:59:c1:ff:f2:f4:25:91:3f:28:2a:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:49:C5:B7:FA:6A:FE:8D:B8:CD:DF:26:A7:94:99:CC:3A:1B:EC:6E
X509v3 Authority Key Identifier:
keyid:21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d9:f6:d1:71:cb:34:56:28:24:12:56:ba:2e:00:46:f3:6d:
4b:97:7d:e6:89:d9:6b:e3:f2:d4:e3:e6:2b:53:76:2c:8f:0c:
3e:82:2b:73:cd:de:fb:d9:a3:5a:8f:3d:f3:f5:b9:cf:ff:f2:
1e:3b:03:60:53:6c:5c:0e:28:4d:53:08:6e:00:27:c2:66:7e:
29:ba:a1:2b:b9:fe:b9:fe:81:88:bc:76:c1:37:2c:1d:fe:62:
66:9a:c7:2d:8c:89:6e:61:5b:ff:e0:c9:d9:0f:73:8c:ed:d1:
41:45:bc:20:26:ea:5b:57:d5:93:5c:69:b1:d2:56:09:ad:2c:
8e:0e:39:e6:4a:64:64:8a:cc:8c:e1:18:2f:08:b7:51:ea:cc:
9d:8f:58:a0:30:a0:dc:c9:a0:cf:fc:8d:74:57:7f:4f:86:18:
69:90:19:2e:84:67:fc:b9:d7:0d:b4:88:d6:4e:c0:2e:cd:b7:
3d:8a:0d:20:72:db:7b:82:cb:fa:43:36:41:90:cd:32:a3:0f:
68:a6:09:8f:e1:06:02:49:84:40:6b:3c:74:bc:ca:f5:19:cf:
c4:d5:04:a6:78:54:cf:da:ab:e1:fb:47:7d:54:a4:e2:7f:bb:
7e:35:a4:bd:bd:9b:c8:9d:00:dc:09:06:e9:e0:68:33:90:29:
92:15:9d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:11 2025 by rpki-client