Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
File: iKlKQUDhmzIGP8bnefWTFKdKDFE.mft (raw, json)
Hash identifier: H/rOdSOlMwhYaBZLY9ya2IibZcuQigToTU2r0v1LL3M=
Subject key identifier: B2:03:F4:76:1F:4F:E2:A1:FC:10:CF:72:D7:5E:1C:1B:5F:5B:E2:59
Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
Certificate issuer: /CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Certificate serial: 0194BC3BFCEA40B92B40CC6F1EB250DE55BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: S1kW1dWYYAUdp34Ffvr3hqq6tx4.roa (hash: HPlJ0x+8hEc9+twnaORN/j75RT2RjTnSkW49RshA3cE=)
2: iKlKQUDhmzIGP8bnefWTFKdKDFE.crl (hash: a9CCn2u+1ECKCPyUgogI+75z5oLBD+f4Pu8OfakYWoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:ea:40:b9:2b:40:cc:6f:1e:b2:50:de:55:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=b203f4761f4fe2a1fc10cf72d75e1c1b5f5be259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:19:1a:62:66:6d:cc:39:68:08:b7:02:31:
5a:32:18:91:b5:d3:16:2a:6a:5c:8a:87:90:ad:72:
47:6a:12:f6:d7:4d:47:8c:de:e0:e2:bf:5e:b9:a3:
df:0f:06:aa:16:83:b0:88:4e:79:20:45:06:f9:0f:
97:af:92:d4:69:8b:ab:4e:9c:45:c4:95:58:70:de:
3c:5a:a3:f8:8e:ec:57:08:9f:97:54:fd:88:5d:d9:
e1:65:d0:f2:a5:65:00:ee:d2:b5:40:56:c8:0d:db:
f2:bb:c9:3d:31:ab:68:4f:ee:0a:58:16:bf:23:5b:
60:af:e2:f3:18:91:16:86:d1:a0:2d:47:74:f8:f9:
1d:c5:e0:da:13:99:9e:29:ac:80:43:50:6d:be:22:
af:0a:91:1c:a4:37:37:4a:67:8c:1e:b5:cd:ea:2f:
46:bb:cb:de:32:d3:08:2b:32:c4:5a:20:0f:db:84:
5b:2c:35:c4:16:6d:6f:08:db:ca:e5:40:b7:ce:57:
6e:28:f1:59:d3:39:79:21:79:99:e5:7c:68:a1:96:
da:a8:75:42:16:7f:d4:ff:7a:59:86:ae:54:56:0a:
e3:8e:cd:8b:17:35:4c:85:99:3e:4e:e4:dd:f7:57:
12:d8:c7:45:39:e3:e0:19:38:e6:7f:8b:91:1c:e5:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:F4:76:1F:4F:E2:A1:FC:10:CF:72:D7:5E:1C:1B:5F:5B:E2:59
X509v3 Authority Key Identifier:
keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d7:89:a5:2c:c2:1b:32:7a:8d:ed:70:ec:3a:2b:9f:ad:28:
1b:08:2a:86:32:5f:9f:db:b8:56:21:97:53:40:3b:7c:8c:5a:
34:60:c8:d2:7d:f9:6c:04:ee:cc:09:27:69:39:52:2b:f8:b3:
19:d1:62:e2:78:4d:bc:5c:1d:84:90:97:ec:09:45:df:f4:c6:
f6:6c:00:c9:9f:6d:f2:e6:82:84:42:22:76:e7:37:a2:9b:8f:
e7:03:19:f3:87:13:35:84:f6:c8:87:8d:e7:5d:19:b3:20:d2:
8e:3b:f1:50:b1:a4:05:71:57:f0:72:2d:19:9c:09:aa:16:31:
c4:28:f5:58:7a:cd:38:3b:f4:9a:b3:be:42:ba:b5:0c:32:34:
7d:a2:3b:f9:c2:b9:02:af:19:fb:ba:88:1e:13:cd:0d:03:ea:
47:51:bf:be:d2:b3:a7:4a:44:c0:31:bd:d9:c2:db:84:6f:c8:
8d:22:7d:49:8c:82:37:d9:7b:31:04:6a:ec:3d:89:6b:83:8d:
37:8b:f1:a7:da:94:a5:b3:44:40:cc:53:84:f5:ad:49:8c:10:
31:f5:52:1b:44:49:7e:3d:c8:06:a2:26:76:9a:be:ed:c7:07:
4d:9d:a3:7b:d1:b7:d8:ed:f0:63:89:0a:10:95:12:45:64:37:
5e:b1:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:56 2025 by rpki-client