Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier: u5ElgSB8wu66VJ/lL2ZY6D5qpYVNOzm+g8H2tC63zX0=
Subject key identifier: 19:1F:0B:CD:2A:8C:7F:AB:69:7A:67:E8:8F:25:53:40:4C:B1:6D:44
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial: 0194BC0516772C89780F25DD613712DE2F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=)
2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: woEq7u3VKbZFTTrbHlmX4SXPS39R+tvfS88fkaAeS7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:77:2c:89:78:0f:25:dd:61:37:12:de:2f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=191f0bcd2a8c7fab697a67e88f2553404cb16d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:56:3d:75:77:81:c6:b7:ed:87:34:1a:e1:
c0:15:cb:d8:df:9b:28:31:69:98:1f:69:4d:e6:4d:
6d:fe:f7:53:b5:15:5e:a3:3b:7f:5e:15:52:d1:83:
7f:e3:21:03:fc:60:81:ef:52:0d:92:f7:0e:41:f4:
d4:46:9f:8a:ce:bf:da:dc:3f:93:52:30:35:85:fa:
02:2f:bd:8a:47:9d:be:ca:3e:5f:8d:92:ac:5c:4d:
ea:d7:9a:04:c0:2d:a7:45:79:24:5f:95:da:10:31:
03:40:b5:6b:ed:ca:7b:64:37:b4:c4:92:e7:4f:25:
53:95:73:23:4b:da:fe:4f:c4:c4:98:1e:1e:75:52:
0a:ca:4c:13:ad:94:1c:09:95:54:58:6a:4a:86:8e:
8c:f2:60:38:2c:5f:f5:54:47:0f:d2:9d:61:00:db:
3a:69:11:d5:57:45:13:81:8a:49:38:ca:27:9f:fd:
6b:78:a7:9f:3e:68:3f:e4:a1:94:c8:3b:cc:ae:3a:
1c:d7:0d:de:e5:08:4f:24:44:5e:37:d4:58:13:2b:
51:9f:6e:74:74:6f:9d:03:56:57:ec:1d:bb:da:a1:
de:5a:0f:7d:27:e3:44:4e:e7:99:0b:3b:6b:5f:0b:
4a:4b:e9:cf:de:f3:1f:0d:96:0d:f6:86:c7:25:49:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1F:0B:CD:2A:8C:7F:AB:69:7A:67:E8:8F:25:53:40:4C:B1:6D:44
X509v3 Authority Key Identifier:
keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c6:84:c7:4b:ce:6a:4a:a3:75:5e:6d:de:d8:1a:99:46:ce:
9a:16:97:95:0e:d5:f5:13:15:d1:29:18:bc:78:b2:ea:7b:e2:
78:a5:bc:b0:12:9a:14:39:94:26:4b:be:76:d1:a4:10:1e:77:
9a:e5:78:cb:c5:d5:d9:3e:d7:ed:66:0b:d8:46:bd:79:3b:a4:
02:bc:29:62:86:67:8c:22:71:4c:7c:8f:d9:43:a9:ce:a3:f4:
06:2a:26:58:5f:ac:2d:58:d8:ee:f1:03:b8:9c:22:dd:16:83:
74:3f:e4:92:80:46:52:f7:bd:1c:3f:7a:9d:8b:f1:9c:27:af:
c5:9e:1c:bb:51:7c:10:13:ff:16:dd:c0:43:aa:6e:ef:98:5e:
e9:50:61:58:17:60:4f:4f:f0:84:d9:a6:72:97:8d:49:36:6c:
3e:eb:1b:3c:f8:e7:99:4a:02:24:ed:c9:24:ee:9f:bf:5a:2d:
a4:d4:12:43:db:44:d3:50:e9:a9:4a:b5:a3:ad:76:fe:b2:6f:
aa:fb:bb:0d:ee:21:78:ff:ea:66:8f:c3:3b:0b:43:e7:d5:74:
45:fb:29:0e:5c:a9:c4:9f:e6:30:9f:91:6b:f2:d9:ac:71:b4:
54:c6:68:0b:4f:49:72:bb:39:2b:05:6a:58:01:d9:94:dd:74:
8c:6a:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:44:36 2025 by rpki-client