Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: hPG8sEEcj2HLxPoIHGB0PwCUHX45mZzVtFQG6NyTzwc=
Subject key identifier: 2F:0E:75:F3:0C:1B:6C:C3:57:AC:C1:00:4E:C7:3B:1D:39:35:2A:AE
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 0194BD4EC99126FE2F7ADDB436A013EB3CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 11F7
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: VlXWvyE9FnGz3QclrhViO8YfGFQtlnq+hXyZSXqU1Cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c9:91:26:fe:2f:7a:dd:b4:36:a0:13:eb:3c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=2f0e75f30c1b6cc357acc1004ec73b1d39352aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:06:d1:8e:34:4d:92:db:c4:d3:c9:e8:73:
2d:75:61:7d:7a:15:7d:26:02:e0:8c:c3:a0:a2:19:
95:bf:06:91:0f:1a:fe:97:0d:75:1b:be:05:6a:cf:
d6:4d:f4:a8:55:16:8d:a5:31:8a:c6:00:e3:c0:b4:
ec:a8:70:e9:06:e3:2e:da:0b:e8:43:73:21:5e:48:
79:af:75:2b:82:9a:f2:b0:d5:0a:a1:98:27:5f:42:
7f:b7:4b:00:87:d4:9e:30:6b:5e:23:14:d2:ba:0e:
2e:7f:b4:8b:bc:bd:0f:8c:41:76:72:a3:cc:07:ff:
bb:db:17:3a:8e:f4:fe:6c:52:db:e9:fe:a6:8c:45:
cd:43:c9:cc:43:86:a9:3b:fe:a2:13:c8:e4:a2:7d:
a5:0a:b4:7c:dd:36:75:e5:85:1d:43:ea:2c:94:48:
70:39:46:5b:de:24:f9:2e:0f:1a:ed:03:0e:50:a5:
4e:30:53:9e:a3:74:b5:8e:a2:e9:c7:81:4c:47:f9:
ec:58:ce:01:d3:b8:57:ae:15:78:d6:d6:80:c2:58:
18:f5:ad:9e:e4:2f:e0:68:f7:9c:d3:96:b6:04:50:
91:ff:20:2c:46:28:ee:a4:26:5c:d5:f5:a9:5e:21:
12:d3:a5:eb:49:52:68:93:61:2d:49:34:d4:10:4a:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:75:F3:0C:1B:6C:C3:57:AC:C1:00:4E:C7:3B:1D:39:35:2A:AE
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:a3:29:a7:2e:e8:d3:1a:de:c8:52:82:ac:d5:a0:bd:39:
69:6a:ca:e5:67:88:0a:04:47:d9:4c:91:e3:8c:4c:a8:f2:56:
40:b3:90:43:65:7c:e0:c5:aa:76:5b:1b:47:6e:0a:ac:c5:d3:
05:c0:0a:bb:d0:a2:97:94:d6:80:5a:b8:10:01:bf:80:a9:42:
42:b9:1e:f8:d6:c1:d9:08:91:de:8b:bf:f7:81:55:6c:a8:07:
b0:26:81:50:a6:80:5a:62:ed:55:98:9a:bd:5d:6b:c7:c5:1b:
cf:42:ee:c9:2b:5c:30:f5:65:74:c8:06:ea:2a:3f:0f:5e:36:
c1:4c:6b:92:42:5c:45:87:78:f3:7b:62:92:a3:22:4c:bc:b4:
26:86:ce:e1:3a:60:24:02:d6:42:8f:7f:da:93:c2:5c:ba:92:
11:78:a3:e7:b8:a3:ef:6b:8d:fe:9c:5d:5f:63:cc:5e:2b:ec:
08:e6:9c:73:b1:3b:fd:0d:86:ce:4a:38:a6:2e:b5:b5:10:bb:
0b:5e:f0:0c:be:e5:03:e3:0b:18:c7:75:fd:50:32:d7:fa:05:
5a:d2:87:17:99:4d:c2:20:14:bd:41:76:bf:c4:f6:41:12:0e:
bf:f1:ee:30:28:50:83:36:01:ee:f1:07:3b:d5:65:73:49:d5:
72:e5:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:05 2025 by rpki-client