Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: upa35YKlZh1XHy9QwgtlQKc02bSjOEJzavCf+nWFl6o=
Subject key identifier: 99:1A:F8:E7:14:E5:88:FD:71:84:A7:BB:0A:FA:B2:65:07:26:6F:4D
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 0194BD17AAC0B514FB87699C4FCD79AEDEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: xu4YzeCBDuQif4mMf4Cf61LnrRmkzkxsH9gwXgimJsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:aa:c0:b5:14:fb:87:69:9c:4f:cd:79:ae:de:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=991af8e714e588fd7184a7bb0afab26507266f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:dd:50:59:00:bf:85:f5:58:e8:70:12:29:
ea:55:4a:85:2a:8d:67:61:b7:8b:ee:7a:3d:27:f2:
d0:61:ce:22:be:ff:70:82:79:47:4c:e6:f6:01:8e:
3e:37:42:18:b5:9d:86:c6:00:1a:6c:0f:3d:e4:5d:
6c:6f:27:cb:9a:bc:77:a4:de:5b:82:81:60:d2:f1:
e9:0e:7b:ba:a8:11:cb:ee:95:4d:99:bc:4b:5e:85:
a0:f1:e1:db:4e:58:0a:a2:c2:ae:d2:af:66:a6:5b:
a8:d6:d7:69:81:63:75:d1:db:56:a1:84:12:3e:19:
31:74:49:47:9d:9f:af:90:17:1a:03:cb:b6:aa:3d:
25:64:66:0f:e1:c6:c0:1f:aa:44:6d:99:3e:32:a7:
1f:48:bd:e1:d9:34:6c:79:fd:86:b8:b6:8b:9c:ee:
ec:b2:9f:b8:8b:e0:04:0b:30:82:fc:57:a0:5d:27:
69:ff:a8:42:c2:71:e3:0d:78:81:6a:37:cd:45:d7:
2c:95:ba:2a:6b:81:cf:3b:e4:bc:b3:59:2a:45:9e:
f8:40:9b:c5:fd:0e:e1:0f:6c:a8:83:15:cf:5f:f0:
ba:dd:4e:31:8f:4c:3f:d6:d8:d3:25:fb:aa:e4:b4:
ce:97:04:a1:26:8d:2b:ea:15:43:6c:47:9e:dc:d0:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1A:F8:E7:14:E5:88:FD:71:84:A7:BB:0A:FA:B2:65:07:26:6F:4D
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0a:ff:ce:21:d4:48:1a:98:88:43:26:9d:78:74:b8:d9:13:
f2:8a:ab:d6:7d:53:d7:6f:f9:b2:1b:01:f6:11:4b:c8:d6:2b:
4c:d6:b1:49:c6:2b:b5:66:4d:eb:93:50:0a:14:27:19:a7:bf:
86:23:b1:4f:e2:8f:11:c1:24:df:af:1d:c0:2f:7a:a1:00:5f:
34:5d:32:00:45:58:c8:61:0b:3f:4e:7b:64:fe:f9:65:7e:6f:
dd:c6:64:b0:c4:e5:4d:29:33:4c:f4:fb:09:9e:44:9b:bb:cf:
f0:ae:2e:67:76:3b:bf:bd:2e:3a:6b:43:c3:d4:74:21:ff:4b:
bc:06:70:05:91:01:91:7f:5a:c8:da:26:db:67:67:c8:93:7a:
85:e4:c8:2f:57:53:9e:03:52:31:3b:be:58:88:36:c5:51:d9:
07:17:b8:9d:dc:8a:98:0b:74:73:0b:f4:97:3b:90:01:e3:df:
fc:38:a1:6e:fe:e8:cc:de:e1:04:b5:ba:1d:e5:57:29:12:c4:
f5:c3:98:a3:e1:4c:02:63:18:61:40:a4:c8:ed:d3:02:08:ea:
cb:af:24:b7:47:73:21:8d:ac:17:15:10:db:e5:a9:b9:a4:be:
85:ca:5a:27:5c:29:c7:d9:5d:f8:97:c4:47:2e:e8:61:72:1d:
34:3e:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:47 2025 by rpki-client