Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: noquzozA5x6+vjY0ZVG2d5ZYDoLLbRq4E88eV6kOvy0=
Subject key identifier: B3:BA:DB:6C:20:A0:40:3A:63:89:A1:09:B4:58:DC:91:95:D7:50:E5
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 0194BC72A0DC7D80ECD04D8BA05621AFDFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 33
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: W9WF2WaasL+ZYTphnO/nN96QrKoFtZeUvbpGot9HQ54=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a0:dc:7d:80:ec:d0:4d:8b:a0:56:21:af:df:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=b3badb6c20a0403a6389a109b458dc9195d750e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:9b:72:37:14:dd:2a:a9:bb:79:b9:b0:2b:
7a:35:84:d3:b4:c4:fa:38:be:b3:f8:15:47:ef:20:
0d:de:14:0e:4a:bb:14:ba:b3:b5:bd:67:6f:07:ba:
80:b0:e2:c0:cf:76:f5:91:0d:d8:d7:26:07:1c:ac:
ad:ff:0e:59:af:b9:a5:f8:5a:a6:e3:33:d4:8a:d6:
cf:ad:66:40:3f:3a:cd:34:f2:16:04:f8:3f:5b:87:
3f:d2:9e:48:ca:15:20:1a:4d:1a:c5:96:27:2e:eb:
97:ed:b8:0f:54:f8:70:79:e4:2b:95:2a:51:5f:59:
82:72:2d:eb:48:cd:54:05:27:1b:ff:fb:80:10:ff:
f0:57:00:44:5d:84:29:af:a2:43:20:ef:99:e7:af:
24:9e:ba:0e:b9:51:6a:ac:5a:40:e5:89:3c:ae:86:
c2:78:e1:02:08:91:11:a1:aa:b4:5c:97:5c:44:56:
bb:83:84:87:58:19:bf:be:f1:8b:d7:fc:83:2e:25:
09:20:4f:fe:af:50:6e:37:57:d4:ec:9d:9e:1f:35:
2f:cf:8c:f4:0f:77:e4:2a:fc:f1:66:00:27:55:ef:
50:3a:a0:d7:46:af:06:42:ff:9f:f4:10:df:3c:37:
7a:dd:ac:aa:4d:28:99:5b:11:8a:b9:e2:5a:65:8b:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:DB:6C:20:A0:40:3A:63:89:A1:09:B4:58:DC:91:95:D7:50:E5
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:a3:97:2b:7f:c9:a9:e6:20:82:5d:09:4b:5d:70:f0:e1:
9e:7c:0a:33:6a:b1:55:f4:09:1e:98:67:fc:47:5c:9d:8e:34:
2a:57:3b:e1:95:75:27:53:a5:7b:69:23:09:0b:8d:56:98:98:
c9:6b:c7:22:27:f8:ae:8e:36:0d:11:82:f4:04:1a:41:4a:2f:
2e:b7:53:fd:8e:23:fb:f9:78:fb:17:70:62:9b:9f:b0:ff:16:
4e:34:3b:2b:dd:68:dc:35:3f:b2:ba:ac:33:3a:a2:e3:1c:06:
7c:f0:ae:d5:44:60:cb:e8:51:5e:fa:c4:69:e3:28:da:f6:db:
d8:6b:ea:0d:c7:9e:5f:23:2b:d8:16:08:b4:c0:8e:0b:ef:36:
00:1a:3c:ef:21:4c:65:7f:db:71:dd:f5:e6:0d:6d:cb:89:a1:
4f:ff:8c:8f:2b:ad:15:20:6f:55:11:97:74:3c:e0:cc:09:f0:
39:ae:ec:0f:a9:be:c4:a1:3f:5d:d8:01:ee:6b:ca:d6:84:24:
bf:5c:ed:95:7b:9a:7b:f1:6d:45:97:f9:80:f7:1a:b9:63:ec:
03:aa:0a:e5:51:68:fd:50:e6:4d:7a:38:15:aa:d7:f5:f6:79:
49:fc:52:d4:41:b9:6c:23:a6:b1:30:3d:4d:bd:8d:6c:13:a5:
12:75:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:08 2025 by rpki-client