Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: 5nTySxfSXolWAcHdPkoM9LjQYOTdvmdG9yMtNCmXt7w=
Subject key identifier: AE:24:48:ED:70:CA:19:9B:29:2D:D5:90:51:FF:9F:09:03:59:BA:CC
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 0194BC3C0BDE19F3CF93A99D2E7E80CECB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: 6hchZMKbjCyy/RkAGiU3+7EKlXkowAa5Mt/dWE5tmPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:de:19:f3:cf:93:a9:9d:2e:7e:80:ce:cb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=ae2448ed70ca199b292dd59051ff9f090359bacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:47:1c:48:28:43:eb:94:23:fb:82:76:5f:
bf:6f:91:92:54:f6:e0:e4:86:e8:63:13:92:16:5c:
5b:c4:82:20:19:04:63:8d:7e:25:ee:b4:70:44:01:
39:5f:b7:89:28:4a:94:e8:81:db:92:d8:0c:e5:96:
2c:20:ae:ad:fb:5f:17:6f:58:49:ae:96:02:4d:d1:
ca:50:2e:c7:ce:a5:8b:6f:b0:43:ed:74:d1:7d:ed:
1e:34:d9:12:48:8e:62:cf:b4:9e:44:be:95:e9:46:
46:fc:f3:b0:81:49:04:39:42:a0:37:19:9b:72:14:
16:e8:fd:1e:a8:2f:6c:f9:4e:bf:ed:06:25:aa:d8:
5c:61:fd:e7:9a:73:53:55:a7:cf:6f:6f:2b:8d:32:
02:0e:44:36:76:0e:b2:ff:7f:ba:2a:c1:56:84:ce:
e2:02:11:35:dd:7d:0f:36:ac:a7:c5:9b:3c:da:7a:
22:e0:b4:be:90:a0:ef:71:50:be:c9:7f:de:4f:15:
75:db:29:a7:55:df:13:dd:8e:02:1e:c0:21:38:8e:
3a:23:95:ad:d7:15:24:42:5c:2c:dd:00:68:1d:90:
f2:b8:e4:e0:70:bf:e8:b9:e3:ee:47:79:50:e1:f3:
5a:19:e3:58:a6:2a:d8:c2:e9:b6:9e:74:9d:0d:9e:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:48:ED:70:CA:19:9B:29:2D:D5:90:51:FF:9F:09:03:59:BA:CC
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:85:f6:16:71:99:d1:7f:12:f4:fe:e3:d2:e1:23:3f:c0:82:
15:dd:d1:d3:9d:ae:4c:17:76:b3:b8:07:b5:4c:58:53:7a:be:
2e:56:c1:6f:b4:ab:67:ad:b3:0e:a4:3d:fe:d9:7a:f0:47:6c:
1c:7a:f9:7b:3b:34:06:dd:49:79:8f:2e:bd:d1:48:a0:83:79:
73:e7:c1:0f:54:29:3b:27:62:cf:fa:d6:fe:d5:69:3c:29:a6:
00:5c:e6:89:c6:4a:69:a1:f6:94:ba:81:ef:09:c3:d9:70:22:
dd:87:54:4b:7a:02:eb:cd:08:4c:38:cd:62:0d:3d:9d:d3:a3:
cc:a4:78:e7:b0:db:2e:c9:98:24:89:28:2d:a2:ee:3a:e6:69:
7e:8f:1f:4f:09:39:e7:b1:61:33:19:b6:4d:ce:39:0e:d9:14:
55:99:b0:ef:eb:9f:93:ea:37:cd:f7:e5:4d:9b:5a:12:ea:f5:
5d:2c:d4:b3:0d:11:77:d7:f4:7f:6c:d9:a8:a9:fa:22:8f:b9:
93:44:6f:88:37:71:4a:42:66:c2:8a:72:06:3e:20:f4:90:8c:
1d:75:80:80:3f:d2:b3:90:2e:aa:21:97:f7:05:e7:b6:c3:09:
91:f2:8a:b9:9a:ec:35:7e:0c:d6:2f:6a:c8:4e:3e:f5:f8:47:
c5:09:a6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:36 2025 by rpki-client