Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier: HQZQ4Rq6xR9hwGnBIBZw1IpQcVwAt8PlOKNVvBl2z8g=
Subject key identifier: FF:1C:AF:41:FF:64:5F:08:2D:2D:DB:95:B2:6A:A7:F5:14:0A:EE:92
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial: 0194BC051F8615F05A1116AEB5E5304119EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number: 0732
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: 5z9gGdsQawwq0bcVZBAiGJhyok9o/vEvv3Rcr6mrrlw=)
2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1f:86:15:f0:5a:11:16:ae:b5:e5:30:41:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=ff1caf41ff645f082d2ddb95b26aa7f5140aee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:49:eb:12:27:e6:d9:05:17:05:75:13:7b:
32:96:98:01:33:1f:ee:bd:3b:2b:9f:0a:a1:3c:0f:
71:ce:89:5b:28:f2:e7:6b:51:58:2d:af:3f:8a:6a:
ff:89:e1:7a:89:12:90:f3:30:18:64:f2:95:d3:c7:
5b:d4:6e:8a:5a:35:10:73:9d:2f:c4:79:13:81:3a:
5f:f4:e4:85:f6:c9:29:e6:79:52:cd:96:f4:80:dc:
c3:16:97:56:41:0d:92:52:ef:b7:0b:61:03:1b:19:
6a:9c:2f:f1:e9:1b:a2:1f:0b:70:71:d3:85:fe:22:
90:8c:ba:d8:c3:fe:49:a9:60:a0:c9:04:81:0d:55:
64:df:ef:1a:f7:f0:70:e8:d2:8c:e2:92:d7:11:e8:
60:4d:f7:95:c1:73:4b:b7:29:14:c0:dc:af:41:ba:
17:da:21:60:10:a7:d1:11:06:23:ff:02:30:06:79:
95:54:32:ca:d1:d9:f8:d7:7b:36:42:15:4d:aa:15:
81:ab:7c:ce:58:18:18:e0:1f:52:5d:53:86:f0:4a:
15:9c:5d:a4:1d:87:ea:98:7c:42:d8:5a:23:ad:3f:
30:6b:0d:53:c8:da:49:8f:03:b9:30:5d:aa:ea:8c:
13:db:5d:41:4e:66:9a:53:69:76:f0:e3:0e:8f:81:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:AF:41:FF:64:5F:08:2D:2D:DB:95:B2:6A:A7:F5:14:0A:EE:92
X509v3 Authority Key Identifier:
keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c1:f9:ed:fd:ea:0d:fd:e4:4e:0f:1d:cf:38:01:b0:6c:21:
2c:72:c8:60:39:f1:f5:4a:f4:e4:f3:0a:68:10:06:07:16:16:
7d:9f:15:8a:ac:6a:cb:ec:d1:09:f8:be:00:41:bc:f5:73:f9:
d0:5f:53:fc:73:d1:c9:63:41:30:b1:60:ba:e1:a9:14:c2:7f:
6d:5e:62:dd:0b:6f:12:1e:b2:06:ac:5b:5d:fd:3b:8c:26:8c:
b6:28:4d:e6:ed:79:73:36:48:86:be:5b:8c:8f:3b:df:d5:4a:
48:1f:d9:63:cb:7f:c3:97:9f:fb:d0:47:7a:e1:ba:8d:b8:81:
4d:57:ad:c0:87:37:bd:27:4d:76:5f:bc:97:83:b5:d1:01:0a:
de:3e:1c:32:44:b4:db:38:e8:4c:d1:01:29:e9:8b:39:1b:17:
a0:1b:60:33:ba:44:ba:72:2f:ab:6d:b2:33:f0:7c:f2:38:a0:
ab:f0:95:74:a8:71:19:b2:5b:dc:59:9b:aa:3e:04:bf:8b:ba:
36:d4:ee:e4:ac:c9:57:82:40:e2:1d:8c:14:81:4d:44:a5:b9:
3a:95:85:c0:2d:a3:09:12:47:f7:bd:d3:2b:3b:3e:53:3f:5a:
5d:c6:b5:a3:ca:ee:f7:eb:72:81:31:5e:32:28:a1:23:d7:0f:
44:f5:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:30 2025 by rpki-client