Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
File: IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json)
Hash identifier: 8d1QD6N4iqPSShqtgq4fuAOpaX2AFapOtFH4y03gwVg=
Subject key identifier: DF:EF:48:1B:EA:E9:CD:5C:67:20:D8:8C:AF:CB:AE:C5:8A:89:A4:62
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 0194BC73258ACA69607B73F6611568D1F226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
Manifest number: 096D
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: FnxY1zc/5lEXSjWsVfD2gn64P4h/REOuNhfzdH6FFmU=)
2: Uyg4_Ozw9Ipj9uu784y9KAfEr7A.roa (hash: PWFMCOTkx94rFl6c7QVt2h1VgycYcWOsnSvIAK4MJo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:8a:ca:69:60:7b:73:f6:61:15:68:d1:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=dfef481beae9cd5c6720d88cafcbaec58a89a462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:c8:76:d0:91:30:e9:d8:4f:77:b9:20:14:
f1:c3:38:9b:d2:5e:b3:12:3b:24:46:8f:7b:e1:78:
c1:ef:40:b8:92:ec:5b:42:81:0c:b3:b4:c0:a5:98:
ce:4e:52:0b:b1:1b:a9:24:7c:3f:fc:8d:2f:db:6f:
a0:da:7f:19:61:51:09:80:63:de:5b:ae:8d:3c:d4:
f0:e7:4e:9c:c5:28:3b:fe:e5:60:52:2d:fe:ac:35:
b7:ab:bd:f5:23:fa:91:51:22:b0:98:6d:66:64:81:
3b:b3:fb:81:1c:75:69:0c:99:09:bb:dd:03:af:63:
84:a3:e2:da:a6:bd:c7:ab:8d:b6:1e:0e:15:0b:3d:
d1:8f:71:73:42:76:66:e4:11:ab:c8:34:1f:fb:89:
6e:03:ee:e3:41:f0:8c:82:42:96:fb:a2:aa:ec:90:
ff:00:1c:60:62:a6:7e:cc:3d:99:a2:28:07:f8:e3:
55:d8:59:f3:46:ba:41:93:96:40:9c:6a:3b:99:0d:
bb:72:d5:90:d9:28:47:a2:84:ba:ad:6c:be:41:17:
ae:03:51:59:83:3d:aa:cf:47:4d:96:95:2c:ba:e6:
15:53:6b:fe:ab:34:10:2e:74:8b:fc:d6:14:54:e0:
3b:5c:a0:fb:6a:2a:f2:b4:48:67:cc:4f:47:16:a6:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:48:1B:EA:E9:CD:5C:67:20:D8:8C:AF:CB:AE:C5:8A:89:A4:62
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0a:1b:3f:ed:61:9e:03:4f:67:e2:0b:7e:9c:6e:eb:61:a7:
e3:07:a5:90:aa:a4:68:55:de:cd:6f:7b:42:82:de:c8:7b:2e:
60:de:ec:66:a3:4d:92:d3:70:ca:e2:c1:04:31:82:6f:7d:2c:
50:c7:5b:59:f2:5d:92:5a:68:f2:ca:08:3d:87:a0:e1:09:00:
71:1b:8e:20:f8:31:11:1f:c6:9d:65:a7:15:c4:38:f3:5e:70:
78:dd:41:23:10:ac:c5:3b:10:0d:71:4e:3f:b2:94:a9:00:ab:
18:87:ab:59:3e:3d:07:83:1b:05:cc:54:88:1c:b1:2d:c5:d7:
1b:07:81:92:05:4e:d3:0e:e3:15:68:49:7a:cd:c6:8d:30:29:
9a:79:ca:cb:ae:2b:39:97:3d:c6:36:43:8d:97:01:fb:6a:f3:
9e:e9:d3:20:69:98:d8:ff:d2:ce:9f:83:a9:fe:42:ca:96:f9:
64:8e:ef:ca:e9:4c:ef:5d:c9:72:12:82:a6:09:a9:4d:89:5f:
b2:80:94:2e:91:28:54:57:f6:7e:eb:61:74:89:43:02:7a:d3:
dc:4a:fc:13:8b:d5:ba:70:d7:58:e0:79:f1:3e:3c:d9:d6:3f:
d9:18:2f:bb:b5:38:61:ff:dc:2d:b6:bc:55:b5:b4:b6:64:f2:
4c:e1:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:02 2025 by rpki-client