Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: CfqFa2exUD+DqK5pHDDIaLKCG3uj5Py+DxJjQmH5qCM=
Subject key identifier: 18:CE:55:64:7F:16:C4:41:42:E2:36:81:F9:75:5C:CD:30:D1:7B:C1
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 0194BC3BF37BBD191084DD9EDE2433D7A989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 116A
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: lZSflUUk5A8HXTzkOq9K6QbeYa1+Uy0Hk/xCdmV/Hik=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:7b:bd:19:10:84:dd:9e:de:24:33:d7:a9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=18ce55647f16c44142e23681f9755ccd30d17bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:f7:8d:37:99:e8:e4:88:fe:6c:06:f3:18:
93:86:83:16:45:17:18:e7:f6:96:f8:bd:fa:5c:69:
64:82:9e:ee:3b:b1:25:c0:6e:1f:71:bb:01:2a:10:
ca:e5:64:67:28:a7:0d:33:c3:f9:b4:be:7a:ee:1e:
e6:62:23:f0:7c:57:77:1c:33:55:19:da:91:6c:a7:
51:2c:06:1f:48:5e:c1:43:58:34:17:93:6f:d5:22:
2a:e0:9b:f8:9a:47:49:71:7d:cf:c5:e6:af:43:e2:
65:bb:0f:42:3f:06:1e:3b:ae:3e:78:fd:fd:4e:8b:
ea:c1:6c:b4:85:e1:ad:76:00:b3:b3:1d:ec:21:7e:
20:63:9a:6a:d8:e9:99:24:92:58:3c:c5:88:d5:73:
89:ba:1e:47:26:8a:64:5c:30:89:5e:62:eb:41:ef:
b4:35:65:3e:5a:d5:90:82:08:52:cb:ef:25:45:c1:
e5:2d:df:e5:cd:9b:c0:22:ed:2f:c3:cb:4c:84:9a:
67:46:dc:81:cf:3d:db:a5:c3:80:1c:06:ab:10:33:
97:f7:03:c5:02:ac:e7:19:1d:82:75:5a:6c:fd:11:
d1:69:87:ac:70:15:65:f2:62:24:84:34:04:13:fa:
2e:f1:9f:b5:2a:5f:36:29:57:b5:e4:94:88:9d:a0:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:55:64:7F:16:C4:41:42:E2:36:81:F9:75:5C:CD:30:D1:7B:C1
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:76:c2:1c:47:59:5e:ea:57:51:14:37:cd:f6:3f:77:93:
2f:4a:80:6f:fb:0d:a1:81:7e:d8:86:30:3c:f5:3c:b4:8c:3b:
95:a9:df:9b:fb:35:ef:03:ac:a5:ff:7f:d3:27:48:fd:10:5e:
f1:91:eb:45:85:6f:4e:9a:e4:56:9a:db:2c:30:d1:9d:33:a9:
6f:b9:58:66:b4:dd:6b:27:46:cc:b1:26:aa:25:86:bf:f4:86:
04:6b:26:63:0d:cd:16:a0:75:04:6b:8f:94:b3:ff:9a:95:b2:
f6:44:82:58:54:a6:33:6c:0e:19:57:b4:09:db:b8:e1:cd:88:
56:96:8c:05:c2:03:22:a1:f2:0c:ad:18:db:83:96:89:27:11:
f4:e4:2f:ba:50:d5:2a:57:02:bc:e8:bf:ec:67:d4:7d:dc:ff:
d2:7d:94:45:ec:c2:83:37:a3:ab:69:6d:f0:95:4d:ef:76:3e:
5f:5b:be:6b:bf:d9:c6:aa:33:51:6b:18:e2:63:e5:03:25:31:
75:98:5a:ed:cc:b6:89:27:ef:2d:93:95:ed:86:b8:a9:ae:bd:
75:b4:cb:18:a1:5e:3e:18:93:9c:40:33:0c:f5:2e:c0:93:18:
0c:fb:f5:ee:5a:6a:d7:1f:75:a4:db:b5:b0:14:9c:86:08:63:
ac:44:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:26 2025 by rpki-client