Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: I96IclsiU9Wf+bSD5XiSrMIhCdu+AcMxoX0pnmoLlPw=
Subject key identifier: AD:A5:D5:0D:09:A4:D1:A3:FB:6F:E8:77:3D:65:16:BB:B7:61:E8:B5
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 0194BBCE623C90EFC67A241BE79227036C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 1089
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: HCJKWjYL3wVgmIBdtw6NkfLSXAkPREKhIe4d6gZ5oLc=)
2: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=)
3: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:62:3c:90:ef:c6:7a:24:1b:e7:92:27:03:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=ada5d50d09a4d1a3fb6fe8773d6516bbb761e8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:62:45:35:19:ea:f1:69:3c:5e:ea:2a:68:
b1:8c:3f:5a:1f:92:c3:0b:54:b6:dd:4b:3a:e4:6d:
03:6a:a4:e4:4f:f2:80:fc:e9:fc:d4:2b:63:86:24:
3d:98:b8:8a:4d:6a:04:27:5d:eb:a9:5c:76:f3:96:
6c:78:80:7a:62:44:ed:77:4a:b6:0c:42:a4:e3:c4:
5b:70:9b:9b:d0:6e:82:c8:9d:2e:3a:3e:43:63:4e:
65:0a:f2:70:83:a4:8f:76:47:7d:e2:8b:f4:2a:6e:
07:7a:b5:d9:93:95:fd:6a:99:ee:eb:d5:96:8c:56:
d9:13:8a:ae:7d:f9:ce:51:f6:84:c4:0c:8c:fa:fc:
11:30:04:27:dd:72:5a:89:3b:bf:eb:2e:37:3a:c1:
e5:2a:27:09:50:e3:fa:77:ba:de:2d:a8:d4:3c:ef:
d6:46:18:44:e0:ff:7d:47:00:79:1b:e7:de:28:27:
ad:ae:3e:61:f3:a8:7f:9e:4f:1a:6f:8a:70:b0:cd:
54:60:1c:62:a3:c5:1c:ca:f2:4e:3d:e4:53:86:9b:
8a:d0:8f:a6:12:6a:8b:dc:c0:79:20:9c:9e:25:55:
75:f7:9f:49:92:f6:83:d5:72:fd:eb:fc:12:a4:b7:
4f:4a:12:99:61:0c:39:31:46:e4:7a:a3:49:7a:1d:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:D5:0D:09:A4:D1:A3:FB:6F:E8:77:3D:65:16:BB:B7:61:E8:B5
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4a:cb:61:28:09:2c:83:82:9f:2a:b6:a9:1c:4e:83:35:5d:
39:61:03:98:17:b7:02:78:a8:3f:1e:7e:97:f4:6f:4b:23:5f:
9a:d6:09:23:7e:ab:cd:25:8a:fd:d2:e8:2d:df:49:c3:41:6d:
1e:6b:09:b3:1f:1b:5d:24:6e:d5:20:2d:47:6d:10:5a:98:14:
9a:75:74:4f:40:8c:8e:47:57:95:03:70:b0:f7:0f:59:3b:b9:
ed:89:b3:94:aa:81:0c:b5:f3:02:a2:0c:8a:0c:ef:a4:24:a6:
eb:db:79:66:f7:fd:d1:88:08:6c:ec:c2:39:3c:24:ca:05:21:
42:31:44:c1:8b:36:c6:26:99:44:ba:2b:59:a1:33:77:95:37:
4f:e0:a6:96:37:87:03:f9:41:f8:09:34:94:49:d1:c9:2d:5a:
f4:4a:a9:06:12:16:05:57:56:65:af:24:0c:02:65:45:97:53:
79:09:c4:fa:81:e2:b7:e8:2d:58:92:e8:88:63:1c:1a:28:8a:
66:0e:e5:09:f2:dd:b7:9d:89:4b:2b:e2:7a:19:1f:fd:f9:e2:
bb:df:ce:05:2f:c8:5f:f3:41:df:74:7b:d7:3d:10:ce:a6:64:
7a:e3:04:91:d0:24:33:32:02:14:35:a9:70:37:9d:23:23:b9:
36:b4:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:49 2025 by rpki-client