Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: EpKcjxawIZ8f5gKrawn6qUHi3FBNZQz8Wy2YjOzont4=
Subject key identifier: D6:D7:73:4A:80:83:64:AC:17:B6:FA:F2:D5:A6:FD:74:A6:13:A3:82
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 0194BC049FD54008C313E970F78881A4563D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
2: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: HW3TcOxD8ySsaXf3BL0+OlpPWS5B8jqfaaI4r4pG6GE=)
3: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
4: vY38gDLjFKiK75NJGeaz0i6stfk.roa (hash: uuSdHdX31krOryeonad43D65auaiUMJP9di9S2Ue1wE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9f:d5:40:08:c3:13:e9:70:f7:88:81:a4:56:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=d6d7734a808364ac17b6faf2d5a6fd74a613a382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:5b:80:bc:31:16:8d:74:0f:a2:8e:80:48:
38:f2:f9:71:f7:16:12:b3:74:e9:bb:cf:13:ef:9d:
03:70:2d:08:2e:40:ff:1a:5d:9e:84:3a:3a:f2:b4:
8c:4e:c3:a9:9a:7c:18:2f:e2:84:f6:3e:16:ed:8f:
f2:5d:2a:43:d5:c8:5c:9f:52:43:63:78:40:8f:ca:
8d:18:62:d7:f2:3d:db:88:fa:5c:09:6b:bb:02:76:
6a:90:91:19:4a:44:75:a1:ec:a1:46:fa:1d:d4:72:
ae:fa:04:34:78:e6:76:ac:11:89:cb:6d:15:15:38:
1a:11:f1:03:a8:bf:e6:a9:21:8a:ea:6c:d8:97:bf:
74:4a:ee:70:c2:ac:66:7a:5c:e7:d2:08:f8:03:3c:
f0:0f:23:85:87:43:d9:e4:45:49:bb:c1:27:88:d9:
07:d9:be:2e:0f:62:13:20:bf:fe:21:01:fa:dc:8f:
08:bd:52:96:12:da:a4:ce:14:7a:a2:25:89:40:ee:
88:e4:6f:6c:bc:6c:0c:c2:9c:6b:43:88:ca:4b:df:
ce:22:ae:75:42:38:9f:c5:34:a1:f0:e6:02:fe:25:
c0:40:35:80:26:74:53:70:06:85:3f:6b:05:35:26:
9a:26:66:ff:4d:32:57:e8:81:8e:a1:6a:2e:e1:c3:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:73:4A:80:83:64:AC:17:B6:FA:F2:D5:A6:FD:74:A6:13:A3:82
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ba:18:bc:7f:46:be:65:72:01:dc:78:8f:70:88:14:10:3a:
0d:a8:7a:60:64:cf:be:8d:a6:08:de:6d:7b:ab:a3:dc:46:d4:
63:f5:71:b0:f1:66:b1:a3:e2:b1:28:91:e7:e0:c8:ff:33:12:
27:3e:46:55:8d:f4:5d:a2:90:b2:66:98:aa:04:a5:8d:96:ba:
2c:ae:a3:32:c8:21:71:33:e2:38:4c:3b:71:24:36:ab:ed:28:
0c:34:03:30:a2:bc:f4:c9:f5:73:f4:e7:75:1d:b4:64:bc:ec:
23:a4:f1:c2:e2:0d:1c:48:6e:ab:bc:af:ac:82:c3:be:2a:5e:
be:71:6e:df:eb:cb:b5:da:9c:22:ca:9c:53:71:ab:56:c0:0d:
98:15:29:49:74:2a:3d:12:14:b4:8e:76:02:b4:e0:2f:ef:0e:
64:aa:b0:60:f0:83:db:6f:03:2a:cc:b6:95:50:96:86:12:11:
b7:ab:70:d1:9e:a2:73:3f:27:3d:02:81:59:ca:97:ff:14:df:
c1:e6:af:56:03:39:78:9c:09:59:bd:88:e9:28:a0:fb:95:c3:
73:7a:0a:26:59:61:30:a6:d3:1a:26:ae:71:e0:6c:ff:07:a3:
32:0e:c6:2f:b7:1f:85:4f:46:d3:fd:40:c3:57:ec:31:e6:09:
a9:5a:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:35 2025 by rpki-client