Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: dNjw46sWfGT1ktqjSyRE4TyhJiQkS/XfAcvctVc74m8=
Subject key identifier: 73:6F:A7:11:7C:E5:0B:45:62:87:C9:74:89:29:66:BB:D1:40:4C:33
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0194BD859BDBCBEA2F80C208428968388B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 09BD
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: Zch8jOqfkL5VZi3-XuE4AZj1UWQ.roa (hash: Gr5X2Rmhr1oI9Q5+L8dhJwGmpeVsMSPTaTpb15ko9Pw=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: wwWfvMETwOs7YXPzaXcI9jpmaJWXui3rEtmNqKDpWS4=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9b:db:cb:ea:2f:80:c2:08:42:89:68:38:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=736fa7117ce50b456287c974892966bbd1404c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:e7:f3:89:c7:85:bd:62:55:ee:96:9c:8e:
7b:ef:ff:c0:f7:e9:fb:e4:5c:5f:2e:d1:f3:4b:84:
53:ab:e2:b3:5b:03:81:60:f8:2e:e0:00:5d:0b:48:
11:43:98:a9:05:98:18:ce:e0:73:de:d4:9e:66:ff:
4d:83:e0:03:67:ee:b2:c9:e7:03:78:b9:36:17:6a:
1c:bf:dc:c1:96:59:dc:3b:57:b7:ec:90:f4:c6:4c:
eb:95:62:23:35:2e:97:86:6e:f7:de:3b:fe:35:07:
7c:06:0a:2c:06:a5:65:5f:ab:41:c0:13:7a:be:b8:
5a:00:5a:9e:09:f8:59:d0:23:93:b3:45:5d:f5:a1:
3e:62:a3:76:aa:49:14:69:ea:d8:c4:47:eb:92:5c:
96:88:9a:dc:9b:2f:be:7a:73:cd:b1:7d:d8:75:f5:
ed:f9:50:7b:d7:23:8b:e2:fd:6b:6f:a5:e6:dc:04:
21:ee:07:d6:a0:f2:a8:5d:0e:25:0b:be:7b:46:71:
56:47:4a:f4:d6:b4:8e:7d:6c:01:d8:13:db:8a:08:
66:c4:a1:0f:32:60:65:06:4f:e3:ff:d3:87:19:b5:
e9:7f:93:fb:56:bf:02:44:a8:36:d5:4c:03:ef:d3:
7e:5d:88:8f:fc:26:a7:38:2a:01:14:9d:bf:bc:b8:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6F:A7:11:7C:E5:0B:45:62:87:C9:74:89:29:66:BB:D1:40:4C:33
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d2:ae:ea:72:bc:3c:d5:85:ad:af:9a:49:66:d8:70:e0:a8:
bc:95:50:de:1c:9b:3b:0a:cb:d7:6d:d2:dc:ed:36:68:08:c7:
e8:0a:56:4c:d4:27:27:6c:9c:30:eb:83:c0:7c:4b:c4:2b:5f:
cf:64:23:80:f1:14:7b:40:6e:d6:18:49:1e:bf:ca:1c:6a:28:
11:5c:00:1a:68:f4:72:af:c0:ba:c4:93:22:f9:98:c9:3f:66:
c4:e7:c5:64:f0:e3:1c:79:18:5d:eb:e8:3f:6e:9a:b5:50:dc:
9c:e3:e0:ac:5e:8f:70:07:f0:5a:e2:f2:61:6b:de:78:e1:7b:
05:c6:62:66:02:88:51:e6:48:3b:76:2f:cc:8e:e0:78:e6:b7:
62:57:26:0e:33:e8:94:5b:0e:ad:9d:f8:7e:93:c4:d1:94:55:
90:82:b1:62:12:0b:50:c1:06:25:45:ca:1c:5c:a4:f7:72:75:
2c:97:a7:82:73:9f:f8:91:58:1e:b4:ca:d1:40:1a:9d:18:ca:
8f:4f:ed:3c:02:94:1c:ad:16:29:94:ec:9c:68:8e:9a:6d:27:
e8:23:f1:d3:49:62:dd:4c:4b:c9:a9:14:19:92:e5:34:0c:39:
39:a2:79:49:e4:ef:00:db:c7:aa:1f:c0:d6:6e:bb:35:f6:f0:
12:95:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:14 2025 by rpki-client