Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: O8cWj19VsWEJWXgpjkU0nt5zA2/uvownlDUGxMJOJsA=
Subject key identifier: BA:61:10:9B:92:52:5F:CF:12:03:DD:E3:CF:B8:67:AE:79:2B:E5:0B
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 0194BBCE35918256BBC587E9218893E7A229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 1089
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: r9/vII2/KONfaVbRmikEjocxna8lIFiW4SL0FS7dPbI=)
2: bx8_btKMe43qSHo68HgBXwRlGoI.roa (hash: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=)
3: py8Xp3ZpBIK97blq7xFJULbGTm4.roa (hash: DKAaoIesnSnsaGeSYQPo4HMqtcREs+GQ8Vs9Wa1cfK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:91:82:56:bb:c5:87:e9:21:88:93:e7:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=ba61109b92525fcf1203dde3cfb867ae792be50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:44:24:d0:dc:b6:59:f4:eb:96:a7:12:ad:
03:01:a8:ca:7f:be:2c:5c:de:6c:0c:68:9f:0f:fa:
b8:cb:cc:4f:42:88:08:1b:eb:e3:57:5a:96:52:15:
5c:32:6b:5a:a7:8b:9a:59:da:95:01:7e:5c:b7:7b:
6d:cc:ad:8b:a5:ae:a9:88:f7:ae:f2:bc:87:71:1a:
78:4c:67:72:46:6d:f2:fb:d7:ba:fe:f4:d9:42:f9:
6d:a1:9f:6a:d5:7f:ef:8f:8c:81:87:16:58:fb:5b:
cb:31:ba:55:17:b6:2c:64:a2:dc:6e:17:af:54:9f:
d7:35:0a:61:19:41:71:27:25:34:d7:0e:7b:0d:c1:
fa:be:bc:a7:d0:11:57:75:4c:13:1a:d9:e6:9d:6c:
a8:fb:8f:8f:c7:bb:a0:4a:81:73:fb:e8:4f:41:f9:
94:9e:92:89:1b:b6:2b:9c:c9:51:8a:78:88:23:03:
70:48:ca:2f:02:2c:d6:77:ce:96:92:85:47:e0:0e:
57:32:dd:2e:ef:91:24:85:29:5d:d5:a2:52:3a:c3:
6b:cf:0e:93:54:7e:91:8e:63:4e:e0:5d:9c:e8:cf:
a1:0a:58:4d:64:83:0f:e5:19:dd:45:93:bd:ce:3c:
5c:f6:eb:d0:e2:62:14:35:75:39:f2:44:17:15:3b:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:10:9B:92:52:5F:CF:12:03:DD:E3:CF:B8:67:AE:79:2B:E5:0B
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fc:89:30:55:5e:85:31:f0:6c:b5:dd:cd:08:9e:81:dc:ad:
41:e1:bf:f4:1e:4e:a4:fb:32:1b:a1:85:38:ff:f0:db:43:4b:
26:c6:fc:0c:28:8f:99:68:65:da:95:7a:2f:0a:2c:b1:fc:54:
33:11:df:d5:bf:84:24:2c:9f:e2:ad:42:47:7b:d1:51:97:7d:
eb:01:2a:6f:a2:3a:1c:24:20:06:5b:26:34:0b:6f:ec:55:4b:
d4:97:ec:46:02:9a:9e:e5:05:f1:5d:14:95:c6:97:d9:7a:0b:
b6:42:05:d1:f9:44:59:b8:74:11:98:81:30:41:6f:35:22:66:
69:2f:1a:8d:e6:b4:98:8f:7c:ea:86:e4:dd:94:a3:7e:72:28:
6e:a9:f9:9c:7c:d1:f1:c0:5a:6b:7f:6f:28:7c:a7:2d:f0:c0:
a6:8d:a5:36:6b:74:29:6c:20:33:69:77:34:22:8d:84:aa:4c:
36:71:a1:93:78:61:63:ee:c8:cd:6b:09:b7:7a:96:86:b9:82:
15:41:5d:48:dc:60:27:ce:c6:b4:44:1d:4d:f5:57:20:9f:10:
5b:ae:aa:e3:eb:78:35:1d:56:12:75:f9:b1:59:24:77:c2:fd:
69:a6:5d:f6:11:3c:ac:51:d7:c6:31:7b:13:f7:62:26:55:86:
94:31:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:42 2025 by rpki-client