Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: 7okvSokQ/6qBcIulGNJ1t/c9gELwExQEnruB1bHLBYE=
Subject key identifier: DE:BD:88:6B:98:A2:61:5A:E8:3A:70:9F:DD:F8:D0:36:EF:52:F7:A5
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 0194BCAA09A73BE63C5BE18675DEF2CD8447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 0742
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: ieOf3MFkPYHkP28J19fXikevfifUCXmMMJcDxfzIyu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:a7:3b:e6:3c:5b:e1:86:75:de:f2:cd:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=debd886b98a2615ae83a709fddf8d036ef52f7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:ae:bb:85:c2:51:40:17:82:f4:3f:84:61:
f5:0c:28:3b:24:17:07:83:c9:27:de:7f:06:b8:4a:
95:26:7a:7f:e9:00:82:5a:03:5b:71:c0:01:c2:90:
04:4f:16:88:ed:73:35:0d:d3:4a:d7:2a:14:3e:26:
51:f2:95:4d:24:7b:69:13:ba:a0:a7:d1:7c:42:c4:
3e:03:62:98:0c:93:80:36:b6:4d:85:6a:60:7b:02:
a0:48:48:1f:39:a0:a7:8d:33:2b:25:9a:68:dd:fd:
73:2d:8b:f7:d5:f8:16:dd:a5:2a:ca:33:cd:57:29:
84:64:bc:f0:bd:67:10:5a:ca:81:87:37:66:9d:a3:
65:ff:de:05:91:0b:cc:16:ac:82:31:db:df:04:f6:
9b:ea:c8:62:09:a4:64:60:e0:c5:3f:b8:9c:c1:02:
0c:f3:11:0e:78:5f:aa:52:f9:30:c9:f0:c3:e9:4b:
91:02:01:3f:36:1c:2c:40:d7:a7:2a:51:bf:30:47:
44:e0:8c:0b:34:cc:d1:dc:d7:60:e1:11:50:f2:cd:
9c:c9:a0:f9:a4:b0:9a:7c:bf:f1:44:f2:95:cd:b1:
57:2d:59:93:19:8b:fa:96:74:75:03:c1:01:c7:35:
69:42:3c:c3:b7:52:39:89:6c:2e:ff:03:bb:9f:d9:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BD:88:6B:98:A2:61:5A:E8:3A:70:9F:DD:F8:D0:36:EF:52:F7:A5
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a3:76:2a:10:6b:aa:24:38:1d:e4:57:62:fb:6c:99:45:fa:
86:33:3a:0b:4b:fd:4b:c2:18:09:61:0d:12:0c:26:03:97:3f:
87:79:c4:cf:a2:b4:dc:ed:3c:d5:e4:ba:3a:26:eb:60:2a:a5:
38:75:9b:03:65:2c:d2:78:cf:65:08:96:19:bd:89:f8:71:85:
63:7b:b4:b9:e1:fe:dd:a3:6d:21:fc:c6:80:7b:eb:a0:e5:d3:
6a:90:2f:7d:71:57:f6:1e:3d:10:76:ef:73:ad:a7:2c:a3:18:
a6:c4:f8:e5:d2:a3:e5:a8:0f:fc:1d:b8:66:ad:db:a8:61:b3:
d6:10:69:e3:6b:7f:30:eb:a5:09:5b:74:fe:2a:89:eb:27:77:
71:d4:88:47:9e:23:69:35:a5:bd:e4:a6:82:f0:d2:88:57:19:
b5:45:4e:45:00:d6:2d:72:26:9b:c3:5f:f5:6b:34:1c:9e:ec:
b7:9c:09:5c:c5:7b:b4:37:ff:b8:de:79:0c:c4:a4:38:4c:ce:
5f:ca:07:b1:9c:ed:7e:77:f6:2a:8e:ec:59:00:01:30:36:9d:
40:a7:fc:10:00:33:bf:93:0b:70:c8:34:0e:94:b7:9c:8f:d3:
d0:98:1e:44:c6:8a:b8:60:6e:ca:90:32:6e:3a:59:5f:f2:ca:
87:ac:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:38 2025 by rpki-client