Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: 0viMWt1+7POkP/Ehb1oRMjfAHL626EGmC0uMIKu9OsE=
Subject key identifier: 68:34:C0:1E:87:2F:0E:59:7C:5D:D4:CF:0C:0F:50:E0:42:E8:CF:D8
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 0194BC3C6416D95D7AFBFC88C845A2672860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 02B6
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (hash: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: 9bUkmwxCfiEJYSp4Kj2BYj4m9PaXTPs5qmYty4qaoho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:16:d9:5d:7a:fb:fc:88:c8:45:a2:67:28:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=6834c01e872f0e597c5dd4cf0c0f50e042e8cfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:f1:0a:ed:ee:21:d1:78:60:b3:cc:d9:b1:
3a:cb:dd:9c:c5:fb:ab:52:74:e7:bc:28:cd:e5:1a:
62:c1:5e:69:4c:5e:64:52:13:11:3d:89:00:74:10:
01:7c:48:eb:82:b1:55:8a:66:b1:98:17:b0:3b:6e:
0f:35:0a:3d:2d:be:fa:0e:29:19:a5:de:7f:af:64:
2d:cb:dd:6a:24:dc:47:46:ac:6b:65:8e:1b:dc:84:
b4:56:6e:8f:5c:86:34:9a:10:38:b9:0e:69:5d:8c:
23:6f:8f:4d:32:d1:28:b9:f6:79:a0:8d:f2:5f:ff:
af:71:23:34:9c:6c:71:35:ac:9e:ec:26:3e:cb:fd:
8f:29:44:2a:a3:81:97:89:79:a3:15:01:86:5c:58:
10:a9:ba:b8:a6:c6:9a:3b:23:c2:71:18:49:80:1f:
67:68:df:c1:42:8d:79:b8:6e:16:e0:c1:57:f6:1f:
b9:db:7d:dc:49:50:ce:da:df:57:e9:53:95:c9:66:
56:96:1b:6b:66:d1:e4:4e:6c:3c:15:7e:25:db:5b:
8b:c9:3e:d0:86:2f:31:13:7f:d7:a2:7e:00:d4:e0:
4b:9f:35:93:29:77:cd:ee:90:7c:0d:cb:d9:c2:e2:
b9:11:68:cb:72:5d:95:70:23:d0:44:29:f3:60:cf:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:C0:1E:87:2F:0E:59:7C:5D:D4:CF:0C:0F:50:E0:42:E8:CF:D8
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2d:c3:b9:3c:1e:f7:c9:3e:ae:3d:3c:dd:2d:4e:00:e2:d0:
b0:07:f7:ff:bf:15:a8:e6:82:7a:b3:dc:a7:5f:4e:73:5a:73:
8f:39:4b:9e:5a:66:c5:ba:2e:7f:8a:46:02:9f:26:98:eb:51:
34:7c:b9:9c:f0:83:f2:36:f4:3b:67:97:1c:85:13:44:c8:d8:
21:40:78:2a:f8:5e:5b:97:12:4b:e8:db:e4:85:5b:39:7e:15:
68:a5:19:4a:61:2c:93:ad:4c:9a:5b:f7:b5:0c:3b:be:13:d6:
6c:eb:09:5a:6d:5a:f4:4d:b4:ae:ee:63:6a:84:7c:4e:27:e1:
cb:10:c4:cc:0a:fc:2f:1a:60:38:54:d2:7f:ec:e8:03:45:ee:
47:9f:0d:e7:a1:19:44:73:4d:aa:14:f0:88:28:93:4c:07:9a:
0d:9f:53:f3:88:23:40:0d:8b:e1:2d:c0:61:ec:62:3f:7b:74:
b9:02:41:d5:17:f0:a6:27:11:b7:61:bc:cc:f1:57:fa:b0:82:
27:0d:14:e7:19:1a:53:6d:cc:33:e1:88:51:23:1c:67:d2:a3:
b9:4d:2b:8c:47:35:53:93:23:fd:ad:de:4d:56:8d:e4:8e:5e:
5f:ca:86:92:04:53:fe:0a:31:e0:c0:eb:d9:bf:b4:55:07:d9:
b5:f5:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:41 2025 by rpki-client