Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File: iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier: haHAgx7IA17tj/xuf2iQzeDohz5AH2cv8hinonNQJlc=
Subject key identifier: AC:33:31:EB:2C:07:1E:8A:79:D5:1C:A4:C4:4A:FF:31:7D:44:17:F3
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 0194BBCE4B5AEEF171A25E2957E6C2072934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number: 082F
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa (hash: Zv3WTepDDuaUMOjNvNkUTX961SONZOKhWmA3prVMCew=)
2: dHQ6Roue5q9X2_27RVBRZx-M-bQ.roa (hash: t+ioWkczf1JQly8pemKFH02i8Om48BMCFauXqqk2WAE=)
3: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: wCHMvkcYQ5SDwxKqN6Wq5T9Kin8XHoqOiwvI6cUwSEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4b:5a:ee:f1:71:a2:5e:29:57:e6:c2:07:29:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=ac3331eb2c071e8a79d51ca4c44aff317d4417f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:7c:09:9c:85:ff:92:9f:f3:37:c1:99:0a:
b7:f2:17:be:56:69:ac:d8:cc:51:62:ff:f2:32:b1:
2c:42:8c:8c:c8:15:7a:01:bb:e5:ab:b8:98:11:44:
2e:47:41:44:ed:d4:0d:91:06:fc:2e:57:ad:ee:13:
a6:d9:a4:e5:64:c3:4e:ed:ac:0f:b9:2c:21:b4:12:
d0:df:47:a4:29:48:d2:46:c4:5d:05:54:71:06:49:
de:30:47:7c:ba:2b:be:1a:20:92:75:03:e3:95:3f:
68:fb:28:37:89:b3:f5:9f:59:0b:93:17:51:6f:33:
ed:e4:2d:2a:59:9f:ce:d9:cb:3d:d3:0d:5e:b2:a1:
da:99:ec:2a:a4:5c:ea:e7:2a:88:03:0b:54:40:5a:
3b:5b:34:20:ea:9a:05:8a:81:63:8d:4b:7a:8e:db:
71:2f:a2:13:d5:99:45:b7:c3:8e:9c:26:ca:05:9b:
ba:ed:8b:21:5b:0c:e2:14:82:f8:35:25:27:24:94:
c5:8b:5a:fc:08:06:19:87:4b:cf:d8:d7:5f:8e:b8:
e8:54:e2:5f:ce:6a:68:a1:68:47:0f:4a:3f:f0:b1:
6d:df:ab:80:9d:99:41:46:49:58:63:89:a0:42:c4:
5c:6b:1f:c5:99:3a:87:2d:87:64:8a:0e:64:8e:8a:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:33:31:EB:2C:07:1E:8A:79:D5:1C:A4:C4:4A:FF:31:7D:44:17:F3
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:25:dc:70:58:17:71:c7:c2:b7:d2:35:a0:ba:02:57:ed:27:
be:dd:db:0e:42:c8:f6:62:18:e0:24:8e:20:14:2b:38:91:88:
cb:bd:7a:e4:11:d8:95:21:c5:7b:50:60:81:c1:7b:2f:25:10:
ff:70:02:75:7b:62:b3:f6:82:f8:83:66:dc:98:56:f2:89:cd:
a0:46:a5:6b:52:ad:40:d5:6a:92:cc:65:df:99:ec:ef:55:b6:
26:2d:bf:4f:24:48:14:af:e7:cb:7b:a1:c2:7f:95:2f:6a:33:
4e:fd:6f:cb:57:38:2e:c3:69:ad:22:0d:cd:23:a3:3c:8c:6a:
43:9e:d7:e2:80:a2:d8:1e:c2:c4:cc:07:ae:95:2b:18:1e:1a:
b3:f0:ec:82:a5:17:a5:12:70:21:d6:92:a2:53:c4:f2:7c:a1:
b2:f0:13:ef:0a:8a:1a:98:2f:bf:a3:de:a7:ff:3a:64:4d:5e:
95:69:eb:32:d9:4e:4e:c6:73:fd:bf:3a:cc:0d:19:b9:7c:d6:
8b:a2:62:9b:0a:3b:79:69:e3:39:0f:45:02:c8:a0:67:7a:55:
e1:c9:89:b5:22:3f:76:ec:91:a5:ab:93:79:ff:99:f2:a6:54:
b9:5b:55:88:8e:30:89:27:5a:cc:50:0d:20:62:10:aa:e4:5f:
d4:de:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:34 2025 by rpki-client