Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: FiP12OioBy9WGq6tqhhDcq10sByqH5hqx/tm7xSaqJ0=
Subject key identifier: 5C:B5:08:78:FD:32:16:DA:81:31:DA:D0:B3:5C:E0:CB:9C:B4:F7:13
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 0194BBCDFD1C561493B401E095A0B64AC721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa (hash: 1dbsSquUR6918Zz6dymdjZNTTgaYfI6MWJh2pSzjXy4=)
2: fweRbovLWdF9pH6rb4wkNI7Qa5A.roa (hash: Ij1i47Q8RIaDs08CnmY/mVxyR0aEzscrR4GtWWkDV3Q=)
3: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: 0NCMpQGcz98JIDYr5sQaX2bWTCo++qotaR5S5UFdAJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fd:1c:56:14:93:b4:01:e0:95:a0:b6:4a:c7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=5cb50878fd3216da8131dad0b35ce0cb9cb4f713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:59:93:75:a8:b7:94:98:98:69:65:b2:57:
55:e6:68:bd:27:9f:37:ba:f3:f0:ab:ca:24:dc:95:
85:1a:19:4c:68:32:c5:70:cb:a7:cf:c8:a6:4d:1d:
5a:a0:e7:89:81:d2:c1:e7:da:11:75:7c:e3:c3:22:
f2:eb:50:4f:77:65:2f:ac:c3:b1:3c:30:b1:ea:ce:
c4:57:ff:48:1b:ed:85:b0:6d:9c:2c:00:c9:ce:b7:
05:de:25:6d:e3:e8:c0:97:85:20:3c:ba:cc:50:ec:
53:ec:c5:1c:09:09:ca:c0:51:f5:47:61:13:43:e7:
e9:fb:79:18:78:80:22:be:3e:44:e7:f5:73:69:6d:
ab:d8:75:03:f7:fe:b3:8b:4b:47:7a:75:79:9b:55:
21:fc:d4:29:48:bd:fa:95:ab:f2:c8:e5:88:ff:cd:
0f:3a:b4:87:6c:16:5f:e4:56:33:75:cc:7f:a1:81:
93:b8:fa:38:7a:73:a5:ac:9d:52:d2:52:96:c9:ec:
37:25:33:b0:b6:e9:b8:89:99:e4:80:29:76:db:d0:
dd:33:a3:65:88:e1:9c:d6:4d:bf:80:bb:b5:73:a2:
51:bf:3c:d2:d3:de:70:22:d6:5e:c1:cc:b4:f4:e1:
6f:3e:f1:aa:96:c6:5a:79:9e:b5:b0:92:d7:71:e7:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:08:78:FD:32:16:DA:81:31:DA:D0:B3:5C:E0:CB:9C:B4:F7:13
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:dd:35:10:2d:8f:58:d5:86:50:02:34:8a:69:32:72:64:
8d:cb:be:27:f8:cb:85:cd:49:7d:67:1f:12:c4:54:db:58:66:
11:98:90:f3:da:81:77:ee:34:aa:73:9a:f9:99:cd:32:4e:d6:
26:32:f3:a1:e3:21:e2:6a:52:73:33:2e:6b:1c:76:9c:03:d9:
e6:aa:5d:3e:74:56:25:d4:f2:1c:c3:a5:0c:7a:6e:ef:65:bb:
85:b0:31:df:1f:df:5f:27:68:97:3d:96:57:20:1f:45:fa:e1:
c7:6a:46:83:f8:2a:d7:24:e0:34:7b:9c:55:24:85:ce:6f:65:
5d:23:ff:01:81:ff:1b:18:a8:87:1c:12:7e:0f:f1:45:94:5e:
fe:fb:11:2c:5b:4b:19:16:1b:d8:6d:9f:ed:5f:a7:a0:d9:3c:
b6:a7:ae:87:15:ee:7e:36:f4:a0:be:c6:b0:f9:e5:22:46:20:
73:40:df:54:01:4e:e5:45:24:ea:66:dc:a6:6b:49:ca:e6:6d:
7b:54:b4:7a:73:85:29:38:f1:35:af:7a:d4:cc:1e:37:5c:ec:
10:89:5a:2b:84:ec:9b:44:6f:74:54:0c:9c:6b:b6:32:70:7e:
55:ee:6f:1f:21:6d:69:46:9b:d0:98:a8:a7:90:25:93:07:b0:
4e:c0:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:21 2025 by rpki-client