Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier: 5Y/jU8Sr3VBr8hKJt3iXgU2HdjtCm98g5X6QQpdlGFE=
Subject key identifier: 8B:34:77:D5:67:FA:3D:F5:99:36:A2:35:90:B8:C2:DA:E2:47:FE:42
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 0194BC3BCCDC2C2FD63EB57FDAB8C6E35549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number: 115C
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: IMotTLPla10plwqX_GResv1odqE.crl (hash: aKh/7YDIo2CLhc+4+E9/9miXyKx6w9fvfsvxIVzaYG0=)
2: XkB9FyUrl_hEf3t16Nf8MwiEenY.roa (hash: 5GPl48iaR95a+Okk+L+GbhS4ryo9ZnK1AHkg6Sf4x5s=)
3: bSEsv80VTIqhxykqIB8M44nU7N8.roa (hash: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cc:dc:2c:2f:d6:3e:b5:7f:da:b8:c6:e3:55:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=8b3477d567fa3df59936a23590b8c2dae247fe42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:c4:8a:d7:75:ce:c7:16:21:f5:68:fb:30:
4a:5e:a9:21:d8:87:db:fa:5c:4c:6d:ed:a0:6b:13:
74:a3:21:d1:f3:b5:24:f5:e9:11:8d:ec:8d:16:33:
1e:62:ab:3d:3f:a5:09:56:59:cd:6c:42:97:3b:4c:
71:1b:d1:79:63:bc:75:e0:97:c0:75:b6:0d:4d:d3:
53:d3:a9:ee:bb:75:e7:b8:2c:28:f1:ba:10:77:b0:
9e:9f:b6:04:76:ea:17:4d:36:a9:a3:c7:da:d2:a6:
b0:69:d5:fa:24:ff:56:8e:d8:5b:1f:97:1c:f5:18:
26:08:20:b3:3b:0b:dc:97:89:1b:e8:c1:e4:07:1b:
52:ad:7e:5d:a4:89:62:28:cf:b6:35:98:c8:7e:99:
e3:fd:ad:6b:ff:c1:d3:11:47:7b:d8:f6:59:62:9b:
5e:a0:99:22:17:8f:c0:4f:e5:9c:39:09:3a:97:ff:
ef:c4:4d:0e:88:de:2d:a3:fc:1b:aa:5f:fa:af:3e:
d7:a4:76:6b:49:52:c0:09:19:d7:85:e3:99:53:ff:
e6:0d:24:30:3d:e4:d8:d2:f1:15:f2:46:2f:ef:c1:
be:f9:26:06:a5:6e:c3:27:95:1b:4e:e3:74:d7:1f:
a6:25:d8:5b:12:5b:3e:80:fb:b3:fb:e5:95:6a:55:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:77:D5:67:FA:3D:F5:99:36:A2:35:90:B8:C2:DA:E2:47:FE:42
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:88:44:fc:4f:ef:9a:51:f6:e9:ae:06:03:f5:40:ec:97:f7:
ba:33:fa:06:43:19:78:f0:c4:06:2d:ee:90:a5:e9:9d:d0:d2:
9f:ad:66:8b:02:30:3b:74:b7:ff:53:e5:d1:fc:2b:14:e0:4d:
ef:f5:df:69:0f:44:5d:5d:95:58:98:6d:76:a8:d3:15:da:ef:
58:26:6e:2a:95:78:38:49:f2:c6:aa:52:ad:11:f1:72:d1:a6:
1c:29:ec:b6:0e:b5:21:8c:40:ef:41:68:89:69:14:81:e8:f6:
94:9f:c8:e5:85:da:c0:9d:4f:be:5c:5f:dc:40:f2:b2:fb:da:
3c:4f:51:3a:5d:37:14:5f:bd:83:09:24:4d:0a:96:a7:48:fa:
a9:c1:18:44:00:b0:82:1e:3c:a1:48:da:68:be:4a:27:3f:5a:
1a:37:36:a8:74:0e:11:40:e1:fa:91:6e:2b:03:0c:cb:bc:a1:
d2:e4:a9:a4:33:a3:07:ce:32:35:cd:6c:45:12:27:7e:79:c4:
ef:2f:eb:18:24:8d:e6:bf:1d:b7:2f:cb:69:bb:45:c3:a5:22:
2b:cb:70:f0:ea:8a:d8:a4:93:69:f5:94:25:1b:28:79:bc:3c:
7f:9a:25:9c:d0:f2:3a:50:8c:9c:cd:4a:79:f8:ec:26:2e:fe:
91:45:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:15 2025 by rpki-client