Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: 6vv2QBl/dq0WviOOZHWkcrIiTEiENAaqlpUt1bxkSqo=
Subject key identifier: 3E:B6:89:7C:62:76:EF:06:DA:40:05:6A:12:49:CF:90:AE:FB:07:3E
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 0194BCAA1D3D487F0E528646E64F27BEC084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: 3o1DC9dMO8rgpddo1MHgrYltbPHjjMuAHi/9kT0f4Cw=)
2: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
3: zLAtB_XUh2RgBcOqYFSC3nkEPvs.roa (hash: J/EQLsSRdti9PSX43YyMwUnwNWj4OyzAjeXQoWkVFcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1d:3d:48:7f:0e:52:86:46:e6:4f:27:be:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=3eb6897c6276ef06da40056a1249cf90aefb073e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:ca:8a:ec:24:8a:3e:c2:d2:57:63:3a:7a:
ed:8c:7b:27:3a:27:e0:dc:6b:f7:4c:7f:d4:ff:50:
10:22:cb:80:b0:c1:8b:0a:2a:da:50:72:70:17:0e:
fd:1d:dc:7b:73:f0:fb:8e:84:44:60:0e:ee:d1:4b:
a8:0c:73:65:4e:26:f5:7f:79:eb:ea:e6:67:dc:da:
1f:69:ec:43:9e:e6:d6:1f:5a:9f:90:ed:26:5b:97:
5a:be:1f:a5:c5:77:5d:57:3d:95:1e:04:36:e9:74:
5e:24:74:ea:75:8d:f3:5a:8e:c9:49:75:fc:2d:f3:
f6:54:d0:9c:0b:19:64:27:0a:ad:a7:a5:1a:47:59:
d9:9c:40:b0:95:9e:cc:3c:32:ce:8b:22:7d:c2:ea:
9f:5c:e8:fb:c2:62:39:01:e1:3f:be:c4:84:3d:fb:
51:dc:9f:60:d4:30:3c:43:7a:cd:64:b6:b9:2a:7d:
30:72:be:d9:1a:c8:03:39:2f:94:43:f0:1d:68:5c:
ba:a2:d5:5d:9b:a7:89:d4:01:1a:14:3d:67:34:32:
4e:0b:4c:cc:de:1d:c9:f8:47:93:13:42:09:42:9c:
65:3a:1f:c8:f4:04:26:38:3e:68:79:5b:97:cd:8a:
1f:0b:7b:b5:8f:ae:1c:7f:f9:67:b7:85:73:78:11:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:89:7C:62:76:EF:06:DA:40:05:6A:12:49:CF:90:AE:FB:07:3E
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a2:25:45:01:ad:0d:cb:78:e0:ce:a0:19:b4:77:cf:43:4a:
23:e4:03:81:63:06:8a:6f:af:5f:43:2b:53:9c:03:cd:f2:fe:
6a:35:46:b7:9b:30:75:ac:49:cd:48:48:07:1a:1b:4e:62:cb:
c8:51:66:f4:44:d0:db:8c:03:d9:d7:f8:0b:bb:da:70:49:04:
92:d2:a9:0c:f1:32:1c:ee:ea:c2:22:17:17:5d:48:be:46:b3:
b9:a2:2f:33:67:1c:03:38:ba:07:c3:d6:e2:2c:47:85:60:0c:
4f:74:69:9c:e6:25:32:f6:16:fa:8b:63:8a:ac:80:c1:7f:b5:
02:3a:46:b8:30:dd:98:11:56:df:56:9f:81:f8:38:30:7a:da:
18:3e:eb:85:d5:94:df:62:64:f4:3f:41:14:b8:60:b2:3a:f1:
79:8a:3d:49:17:3b:c5:d6:c8:f4:00:ea:16:2b:c6:bb:44:36:
0e:97:8d:6a:2a:9c:01:c5:fa:ed:70:e6:da:db:21:53:60:a9:
18:c4:c7:ab:a7:45:2a:f8:60:e1:12:5f:11:1a:7d:12:21:5c:
f2:9f:1e:7d:e5:6c:a7:60:bb:c9:2e:96:43:01:2d:c4:69:72:
c9:f2:11:00:23:07:de:f5:db:ec:65:a9:bc:c8:2b:92:ad:64:
38:32:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:34 2025 by rpki-client