Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: 07P4oIWFdGbxPztxE7glJoK7IylK+JduJNwJVGHTNVA=
Subject key identifier: 02:DD:66:01:23:A7:7D:A9:9A:AD:38:0C:7E:2E:21:5F:2C:71:22:16
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 0194BCA9EA36C0ADEA99D9311681E5C75F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 075D
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: WA4ekLSliGY+4HBmlK9qrSgiohNbPMaIRTePyBvDFRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ea:36:c0:ad:ea:99:d9:31:16:81:e5:c7:5f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=02dd660123a77da99aad380c7e2e215f2c712216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:f1:5b:48:96:b0:4a:fb:59:31:11:2b:b4:
ca:89:e2:df:14:3f:43:19:9f:f0:53:d2:b5:00:09:
cd:64:dd:43:08:0f:2f:d9:3e:01:be:6b:f3:34:41:
63:ca:bd:f0:6a:26:63:f0:08:20:74:0a:0e:7b:2c:
e2:8f:da:98:14:ce:60:83:8a:31:92:c2:04:8c:ca:
45:b2:87:37:99:9e:e2:13:b4:71:33:d9:bf:70:42:
5a:ed:62:a5:0b:3d:cc:08:19:e5:41:70:1c:6c:60:
ea:fe:e5:c2:61:88:97:86:70:5a:af:df:af:2c:0c:
3c:a6:1c:c9:d1:09:f9:6c:52:15:ea:71:a2:f4:9e:
ce:48:dc:1c:4c:a9:91:ed:b7:d1:e2:2c:a8:55:f8:
34:13:29:e9:7a:00:5f:28:ab:0f:e6:e6:ae:96:1d:
6b:0e:01:d6:b8:f5:b1:62:0d:0e:bb:ee:79:82:3a:
0d:20:02:18:76:27:e1:fa:94:65:b0:be:0f:c4:96:
dc:ea:1e:55:76:f4:58:e6:5d:92:38:1b:40:07:ce:
44:60:17:b1:1e:0a:89:8a:3b:b8:b2:ef:21:9c:81:
ed:24:2f:01:cd:a0:19:7d:a7:b9:0f:de:15:b5:75:
f1:8c:bb:71:1d:f8:2a:d5:1b:02:70:27:49:46:cf:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DD:66:01:23:A7:7D:A9:9A:AD:38:0C:7E:2E:21:5F:2C:71:22:16
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:54:c9:73:b3:cd:5e:02:f5:88:5b:e9:4e:c1:c7:7b:74:70:
ff:94:08:0a:f5:33:ab:22:2f:82:f6:7c:87:a8:26:32:7a:7d:
1a:cb:53:a1:0c:44:b1:93:a3:27:46:ff:3d:98:a0:7b:62:83:
21:5b:a1:05:0a:41:a5:96:e0:8e:24:ef:a4:c4:59:6b:0d:7c:
20:74:c8:64:55:2e:50:af:0c:22:9c:47:29:d1:35:e8:f7:84:
4f:b4:28:d6:38:fa:ca:07:d0:c3:fb:8e:30:03:90:1f:24:58:
5c:08:5a:54:e8:8e:e2:df:35:bf:ce:b1:c6:8d:09:8a:e6:86:
2b:84:0f:c5:92:95:4b:47:91:95:a4:83:6c:1d:02:a6:dd:a3:
18:32:35:07:d3:ea:8c:fa:bc:fa:00:04:ac:ee:fe:10:27:7f:
17:ba:37:d5:43:ac:46:f6:04:dd:08:1c:88:44:e7:2c:9e:7d:
4b:af:7a:d9:4c:86:31:0b:38:cb:57:2e:30:cf:02:74:12:5e:
1c:d4:42:2b:08:59:01:ea:cf:16:19:1a:59:d7:35:1d:b7:0c:
56:cb:bf:e6:1b:48:c0:2b:09:01:3a:63:93:fc:10:91:b1:1f:
24:3c:52:42:b5:8a:b8:bd:4e:20:6d:62:8e:b8:e0:ac:67:c1:
69:b9:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:31 2025 by rpki-client