Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: CbXv2YQIrRhyEzRP1N0wZBlLJHygH5+u7MSQz7Y31WI=
Subject key identifier: 78:20:B1:E7:FB:56:F2:34:E0:20:3A:5B:DD:33:55:F3:22:DA:F6:FB
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 0194BCA9A0DDBF31EBDD49FA0B8D19F5FD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 0517
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: ImTxGl9OrPXhdRySxNrlf8qjZKcKldFKUBnYyefa3+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a0:dd:bf:31:eb:dd:49:fa:0b:8d:19:f5:fd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=7820b1e7fb56f234e0203a5bdd3355f322daf6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:bf:3c:2b:6e:53:28:8c:ff:45:5a:4e:b2:
36:98:8d:e5:fe:80:b2:0d:c7:8e:f0:db:9b:3e:03:
3c:bc:90:a8:dc:58:df:b8:2b:44:e8:e4:68:ab:97:
47:0f:7a:5f:f5:3e:fd:ba:7d:8c:4b:f1:de:cf:e2:
68:07:2f:49:29:dc:28:35:59:f4:cf:14:20:47:4e:
18:99:db:59:e3:6b:3e:89:a2:09:98:c3:9d:51:df:
d4:79:b9:41:98:e2:74:a0:a8:a9:ac:49:3c:15:d9:
d8:48:01:c7:ad:6e:0c:d4:fb:20:f9:45:62:bc:e9:
5e:20:99:b3:ab:6c:78:65:65:06:6b:8c:a2:30:4b:
7d:68:07:cd:05:f1:ce:8f:2b:34:7f:90:a9:82:1a:
14:02:1e:08:72:56:01:dc:23:28:ee:8d:c7:d4:6f:
94:5a:d1:fc:c2:36:38:d0:6e:8f:eb:91:69:d7:ef:
3e:00:d8:cf:54:3a:e0:74:98:b8:92:86:6c:0a:ac:
78:b7:61:ae:30:db:8d:99:6e:ae:d7:99:7f:0a:02:
f2:78:49:01:9f:44:2c:c9:ba:97:c9:f6:0a:41:aa:
8c:03:9e:ac:eb:8d:fe:31:13:47:e4:2f:13:dc:1a:
3c:56:00:c3:73:46:a4:97:22:23:cc:b6:71:75:88:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:20:B1:E7:FB:56:F2:34:E0:20:3A:5B:DD:33:55:F3:22:DA:F6:FB
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:97:4f:16:9f:b3:de:ea:e5:ed:ab:b2:9d:ba:f8:4b:86:6f:
b6:d8:a3:ea:9b:85:2f:2d:45:d5:d5:9a:04:89:a0:fd:60:ee:
91:df:0e:c7:0b:18:7e:ed:9e:71:67:15:81:e4:12:37:26:bb:
88:cd:1f:1a:eb:f3:89:18:01:02:25:98:14:b9:f0:8b:80:05:
72:33:46:bc:f8:44:00:fb:3c:6a:7e:e6:a1:10:0f:7f:f7:18:
ed:6a:ee:02:d6:04:22:44:e7:af:00:16:de:1a:d1:d7:b1:0b:
01:e6:04:0b:dc:f1:84:f5:45:2e:ab:09:0a:98:11:0d:e6:d7:
43:a9:e5:d6:fd:00:bd:be:e8:02:72:8b:fe:6b:30:da:96:7d:
42:2e:d1:89:7f:6b:48:a2:08:0a:c2:ee:93:30:9d:be:04:51:
34:57:df:25:41:02:e3:69:9e:bd:c5:0e:b0:5b:39:80:2c:d6:
0c:3a:56:c7:f0:eb:69:91:f9:a9:65:09:2a:a9:f7:ae:7f:1b:
4b:0d:03:5e:dc:13:58:9a:cc:71:6f:1c:51:d2:dc:56:3f:5a:
80:21:2e:82:ae:72:67:96:e0:86:bc:c9:d9:10:3e:5b:da:c7:
cf:04:77:01:02:4f:6e:6e:ae:83:6c:b9:39:f8:5c:92:3e:a5:
70:ef:a9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:59 2025 by rpki-client