Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: xHiIzypqTAfZJE8VrejST1589p6PrbABBrEmFcTWLqM=
Subject key identifier: 82:DF:19:F1:52:1F:4F:7C:EF:B6:23:65:3E:E5:F9:50:B5:B7:42:57
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 0194BC727DB2F8CED1AEE1063059AC0F5371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 2D
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: 4pc5EnH3esUV9r8zD8jqVBt5VAO4EAA6RKEn9PqcSIU=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7d:b2:f8:ce:d1:ae:e1:06:30:59:ac:0f:53:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=82df19f1521f4f7cefb623653ee5f950b5b74257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:32:af:69:ca:54:e0:30:80:a7:30:1a:7e:
8a:57:73:10:fd:cc:76:23:90:04:3d:39:89:33:9b:
27:cc:02:7a:97:14:fd:47:9c:f0:f0:7c:98:37:cc:
48:29:ab:dc:12:13:ec:5f:81:95:8a:94:c3:fd:fa:
82:d4:4f:fa:06:b8:64:f8:ff:55:f0:f2:90:4d:e2:
bf:de:ac:15:1b:46:6d:73:3e:ad:c1:bd:31:ed:9f:
ae:29:cd:56:1e:7c:57:e5:b2:4a:bf:b4:bc:8f:df:
00:c8:72:ea:69:8f:b3:69:eb:d1:69:ce:dd:4e:31:
47:46:83:cb:c9:f6:de:f7:80:05:e5:50:c7:a6:43:
de:bd:79:25:f9:bc:9b:68:a9:99:cc:c7:cc:6e:8e:
9a:e0:3c:0d:11:83:c3:2b:53:19:1b:7c:81:31:54:
ab:f0:b7:52:4a:04:d1:08:c5:03:8d:e6:e1:97:a6:
32:dd:a9:3d:70:0b:c3:66:08:92:d9:cd:4b:8c:6b:
21:fe:64:46:2a:cc:c9:83:ff:d2:c4:89:b3:d0:c0:
c9:58:5e:a5:0f:21:8c:18:7e:86:9b:d4:6a:89:9a:
ab:82:b6:d1:5f:19:fc:80:ac:8c:3c:40:00:bc:d5:
4f:a8:2e:89:6b:18:df:2a:45:0a:b7:6f:11:dc:74:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DF:19:F1:52:1F:4F:7C:EF:B6:23:65:3E:E5:F9:50:B5:B7:42:57
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:fe:ac:26:68:51:ea:0b:9c:4e:ad:4f:f1:54:be:84:3a:
cf:0a:33:5b:08:36:8b:4a:a7:57:b0:b7:7f:0c:3a:e8:c3:4e:
fe:02:46:80:47:45:2b:05:8b:e4:38:c2:7c:f2:e1:f3:60:ff:
73:88:73:e3:ce:00:f1:d1:39:89:96:86:f8:78:b3:31:7f:34:
90:69:0e:cb:9d:06:11:c8:9d:0b:a1:87:f2:ad:79:0f:09:02:
6d:ee:bc:cd:c7:a3:9c:e0:64:10:ac:6d:b1:5a:dc:c4:a2:f0:
ab:77:54:22:64:84:f9:4e:84:da:2b:c5:f4:a5:24:22:9d:48:
26:cc:20:f4:9d:bb:e8:98:c0:9e:9e:4a:fa:91:09:66:8e:b4:
94:b8:c0:ee:7d:dd:0e:be:e9:6e:45:0f:e7:b1:ef:94:36:58:
2a:2b:25:0b:64:ee:e9:14:f5:3f:b9:b0:35:ff:ba:52:2e:52:
de:06:f2:54:e7:1a:5a:d0:81:4c:f0:08:87:a7:14:7e:ee:82:
d1:96:72:01:b3:1d:02:17:46:32:6b:15:41:81:47:02:02:a7:
9d:4e:95:58:17:3b:ef:40:65:86:d4:94:77:dd:d7:be:16:16:
67:83:fe:e7:50:a8:c0:b5:d9:8c:51:84:da:90:a9:4a:a7:69:
4e:f9:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:43:57 2025 by rpki-client