Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: FZ854U0MCNUQP6p3DHRP/H+PF28GhCZtO4pknjLzh0Q=
Subject key identifier: 8B:7E:B6:C1:08:EC:27:DE:67:17:ED:7D:33:4C:03:05:99:3A:01:77
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 0194BC3C0A8889186574C6B97FA233DF14BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: nLMss2dfekROvBNHpsUmNU8U++nBfMsjNWSBCQW94lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0a:88:89:18:65:74:c6:b9:7f:a2:33:df:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=8b7eb6c108ec27de6717ed7d334c0305993a0177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:64:de:58:43:1b:a2:5e:3c:85:ce:c9:61:
4f:f0:5b:d4:14:67:07:e3:70:fe:ad:99:b8:a5:a0:
be:c3:77:4e:88:f5:9d:d4:c7:78:cc:37:84:a2:17:
a0:a9:63:fc:ad:39:88:0f:17:18:b9:10:d0:8a:33:
ae:9c:f1:50:36:a4:34:41:83:90:6e:56:7e:4e:e5:
f7:21:03:bb:48:46:f8:54:87:6c:5f:66:8f:2b:2d:
f3:9c:1c:a5:95:ef:b5:f5:d4:15:39:1f:4b:5b:20:
26:76:fb:e5:ce:35:a0:ff:17:59:c6:a2:73:76:45:
be:0f:3c:fc:87:b2:da:eb:6e:b3:5b:86:dc:fd:e4:
e0:00:71:3c:97:2f:c7:84:08:73:77:ec:99:eb:da:
a7:2d:33:39:92:6d:15:f1:0f:c5:c8:8d:75:f7:ab:
2e:02:4d:04:74:2a:22:10:94:c0:2f:ef:d5:81:18:
38:8e:c2:11:66:60:ba:b2:c3:2b:9b:00:d4:cb:db:
1b:34:10:de:d1:27:c4:11:8b:50:64:9e:8b:20:e6:
d9:42:94:5b:dc:c7:3e:f3:2c:21:e8:26:cd:05:ff:
04:d6:ed:19:d8:6f:ba:72:13:db:13:ba:9b:8e:26:
e3:8a:bd:0a:e0:30:4e:3d:ac:57:b7:3e:98:67:20:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:B6:C1:08:EC:27:DE:67:17:ED:7D:33:4C:03:05:99:3A:01:77
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cd:27:39:aa:dc:81:08:88:47:cf:78:21:75:73:56:51:c6:
64:d4:15:f4:17:44:fe:66:0d:04:4a:61:eb:2a:bf:0a:40:a5:
a6:52:c3:74:ab:cf:89:fa:eb:b8:74:7e:cd:86:64:9e:76:68:
b6:1b:e2:6b:c4:f3:71:7b:96:36:df:f1:c2:6e:0d:46:26:a6:
e6:a1:52:83:19:3d:ef:85:d5:e9:d0:46:9f:e4:fd:52:72:95:
83:93:a6:71:d1:94:90:f5:7e:5a:cf:57:73:76:eb:b1:be:e8:
61:80:fc:53:d5:5e:ae:bd:97:0e:5d:4b:d5:63:ea:30:86:c7:
b0:28:b8:50:43:35:ac:01:52:c7:9b:52:15:77:64:d8:ca:89:
17:43:de:7c:20:7d:3f:98:01:61:db:be:5c:8e:5c:79:9d:be:
50:5a:7b:a9:0c:7b:14:0c:e4:f0:80:21:c8:4f:1f:16:08:22:
b6:59:0b:d7:d5:06:d9:4d:12:c0:21:cb:d5:f8:f5:87:29:58:
5d:24:d4:6d:32:09:ed:46:83:4e:22:bc:9d:05:b2:08:b6:eb:
b9:71:23:e2:e2:f8:37:b8:09:b5:17:c4:27:d8:d8:d9:94:e0:
96:f4:e9:ea:f2:c9:78:76:25:60:56:3a:ba:a6:03:d3:90:f9:
ef:18:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:46 2025 by rpki-client