Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: 5fMBeEGdfL+Y0L7GFyJ7gin58dKkat0QC96w3r0NY58=
Subject key identifier: 1A:55:01:0A:04:DD:A8:DC:6B:CE:A5:59:68:28:B3:6A:C1:80:92:B9
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 0194BBCDB3C97DD37F40C55C89AE6E277143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0AFB
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: HiRWLuATPN1Jck1XLpx8xvtUBGOHj1Ac7i2PZNy3m1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b3:c9:7d:d3:7f:40:c5:5c:89:ae:6e:27:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=1a55010a04dda8dc6bcea5596828b36ac18092b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:da:83:6c:cb:ee:90:58:d5:81:c6:d3:52:
70:c5:08:8b:be:65:41:c3:87:4b:9b:c3:1c:35:89:
34:b7:cc:59:f0:38:76:fc:5f:2f:1f:1a:0e:63:ab:
d2:cb:87:c6:2b:b8:df:62:b0:05:e7:b4:e1:6f:16:
3a:58:58:63:ef:26:aa:b4:cb:e7:7d:07:18:f3:7a:
db:46:46:cc:47:e6:4c:3e:c9:8f:cd:e1:03:bb:cb:
d9:e1:be:36:0d:47:3d:43:ae:8c:9a:04:ec:5d:e9:
7c:23:14:81:bd:87:fd:21:80:b2:b1:84:ca:62:b5:
c4:c5:24:f9:bb:0c:69:e3:09:a7:53:d0:39:ef:50:
0e:76:d5:00:07:2a:d6:2b:aa:fd:83:17:c2:f7:22:
a7:dd:70:e8:dd:6d:d9:8f:e9:8e:4c:f4:e7:e7:cc:
51:eb:fb:8a:60:38:9d:74:5a:90:e1:09:72:ae:e3:
10:9b:e4:a5:e7:da:c3:d2:32:65:51:e8:f6:8b:11:
e1:dc:cb:ad:47:25:73:23:84:27:84:d0:67:00:a9:
4b:41:10:82:c5:3b:dc:a5:ad:3f:0b:34:fa:52:ab:
c3:5b:3c:1f:33:08:c2:d2:7b:1b:78:ce:2a:c8:fa:
03:e0:8b:3c:fe:df:cd:db:c2:3f:c4:56:27:18:89:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:55:01:0A:04:DD:A8:DC:6B:CE:A5:59:68:28:B3:6A:C1:80:92:B9
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2e:43:07:45:84:c1:2b:87:72:65:b6:80:6d:0a:53:6e:5f:
ac:1b:e9:ec:c1:31:41:5e:c2:6e:2b:a3:bb:5e:49:f0:9e:f6:
67:35:a3:48:84:3a:4d:86:a9:26:a4:1d:ae:51:b2:e2:9a:09:
aa:91:40:74:6a:fc:73:d4:5c:67:27:2f:4d:be:c9:29:c1:9e:
01:f6:32:23:2b:c2:4f:1f:29:4b:ac:e5:c4:84:e4:08:97:84:
24:0b:c2:81:c6:86:6d:dc:4e:49:ef:93:2e:72:94:de:94:ad:
de:4e:6a:f4:eb:d4:13:ea:14:4a:dd:f6:8d:23:cb:0a:18:c3:
a6:d0:65:0c:6f:e2:7d:7a:40:56:2d:d9:d8:56:2c:39:5b:eb:
53:c5:ed:fa:35:32:03:da:a2:d8:11:75:7b:f7:e1:e3:24:cc:
8d:e4:55:81:09:a3:17:b8:c5:5f:de:92:7e:0c:57:57:61:d7:
96:ca:d2:82:4b:17:26:3d:9c:5f:05:df:49:7b:8d:f9:62:fe:
fa:ef:d3:0f:c6:32:ca:9f:00:88:0a:86:2d:07:34:ec:3e:cf:
3e:cc:c4:76:3e:82:ac:03:13:37:49:5a:9b:b9:3d:96:36:87:
51:fe:38:ce:b7:fa:70:0c:b4:f9:4d:b0:4c:c5:01:7d:45:7d:
38:8e:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:43 2025 by rpki-client