Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: IOS/oUWoo6QP7iTkAtVW2KCzPK8s/mMGzDoLalSlgfU=
Subject key identifier: 86:E5:26:74:FC:6D:CC:B6:49:85:87:45:71:FB:B5:D1:01:31:76:B7
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 0194BC733C97C0B317550154A90AA0C955F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 10CB
Signing time: Fri 31 Jan 2025 13:00:56 +0000
Manifest this update: Fri 31 Jan 2025 13:00:56 +0000
Manifest next update: Sat 01 Feb 2025 13:00:56 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: VzrsZJgLRuzEr4nXyhp+mg3pqMXSwzqs7JoUfq0FfqA=)
2: bwWK7STk8JGeZNNeiu45q2N8QGc.roa (hash: IHej2lyZuUlDH3fMmYrRdwCcTBeweBqee1xUvWcQAO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:3c:97:c0:b3:17:55:01:54:a9:0a:a0:c9:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Jan 31 13:00:56 2025 GMT
Not After : Feb 1 13:00:56 2025 GMT
Subject: CN=86e52674fc6dccb64985874571fbb5d1013176b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:1e:3a:a7:1d:7e:f3:5d:af:fe:ca:0e:24:
7f:6c:3e:00:a1:85:59:a8:56:b4:3c:7f:eb:c7:42:
3b:e5:7e:61:d0:5e:dd:9d:23:39:af:9b:bc:0d:24:
ae:94:8a:c0:78:4b:87:63:ee:d2:74:b8:0a:02:1f:
86:71:b3:8c:68:c0:d6:51:50:bd:d3:26:62:de:a7:
d4:1c:6d:d0:cb:18:59:90:f2:6c:2f:21:cd:4f:10:
93:54:14:99:20:6a:08:a1:af:b1:5d:db:a4:cd:04:
9f:c9:13:fd:6c:cb:3c:f6:95:8f:5e:8f:3a:67:c6:
e0:98:7e:63:c8:60:74:12:27:19:0e:2f:af:1c:dd:
87:00:2f:4a:8a:08:20:5e:4b:04:b4:27:70:de:96:
79:a8:0a:c4:3f:b8:46:d8:14:e3:80:c5:4f:6d:78:
81:70:84:d3:80:ae:c4:96:3d:af:a1:f3:d1:2b:3f:
59:cd:05:e4:0c:d4:6b:e4:77:f5:8e:26:75:13:3e:
91:fa:32:9d:ed:77:f4:38:d4:e6:84:cd:96:0f:48:
86:29:1c:5c:49:00:1f:3b:9a:a3:4a:69:e9:c2:75:
7c:84:11:be:80:cc:39:c3:75:45:25:d9:41:bf:63:
25:0f:ab:1c:bf:36:0e:08:0a:f5:68:3e:67:89:8d:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:26:74:FC:6D:CC:B6:49:85:87:45:71:FB:B5:D1:01:31:76:B7
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:04:bb:3c:64:91:68:89:9e:00:95:82:be:9d:a0:8c:b8:70:
6e:31:20:47:35:14:c1:61:e5:b7:dd:60:6a:8f:a3:dc:33:f1:
4f:12:32:39:49:2d:ba:92:70:4b:69:43:11:d6:ef:c4:47:c0:
f3:54:13:c0:e9:b1:ae:de:27:a4:38:91:36:46:de:22:4d:7d:
a2:a1:56:a6:36:9d:07:3f:42:c5:0c:dc:db:41:66:47:3e:be:
e7:91:b3:e2:e7:86:f1:5f:46:b1:44:e9:28:d6:1b:0b:04:30:
90:57:f8:76:4c:b2:c6:8f:83:4a:48:a1:35:8e:b2:5e:f9:2c:
6a:ae:a6:f6:4d:e3:cb:8d:7b:54:40:c3:89:ff:ec:5c:51:9f:
c9:d3:b7:a3:0d:78:b7:5a:97:ad:0f:de:f9:67:ea:8c:38:9d:
fc:3f:44:e4:df:cc:75:74:42:7f:fd:38:d6:d7:c4:83:96:9d:
d9:88:1d:8c:4d:d8:95:eb:cb:58:85:9b:95:ec:18:57:e5:fb:
67:88:97:82:fd:f8:9e:8c:0f:1c:1f:37:58:f0:a9:be:c3:d0:
d5:44:4e:b4:5a:46:01:9f:f3:e2:62:2f:84:27:e5:b2:d6:50:
00:1c:2e:5a:ba:23:8c:ea:c6:1b:0e:a3:79:ac:0e:80:af:c3:
30:d3:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:44 2025 by rpki-client