Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier: UCsiaQ4aNQZz2lyUTlRLqciI4SRoxWuqq+i1Ae5t+08=
Subject key identifier: C9:57:AB:DB:07:5A:B1:CE:3D:3B:A6:16:E1:06:E7:AC:DA:1E:AF:E3
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 0194BC3C376CDF90ECB3D2228F2536337402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number: 0C98
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=)
2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: C6bY7NC1uCTSjONtAxgwyYspHtk6/4N1dyKacgzYj7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:37:6c:df:90:ec:b3:d2:22:8f:25:36:33:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=c957abdb075ab1ce3d3ba616e106e7acda1eafe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:ca:5b:40:3e:a6:5b:49:06:63:72:ac:72:
2d:78:39:b6:f8:33:1c:ae:2f:d3:c6:36:00:2f:4c:
70:60:b7:69:0b:8f:12:4d:38:2c:aa:82:a8:4b:dd:
20:a1:82:18:6f:3e:c8:f1:2c:03:6d:38:97:2a:9c:
4c:94:80:ff:da:ec:f9:53:56:ab:a7:c4:97:57:98:
68:16:ba:fb:cf:1e:46:89:56:76:e4:99:1f:75:8c:
02:b6:c7:e2:17:a6:b9:4c:20:7c:ee:33:68:fd:37:
81:6b:b6:58:a8:d4:7a:f1:d5:e2:09:aa:cb:45:b7:
37:77:71:31:73:cf:16:4f:32:3c:e0:7e:cb:dd:bf:
d2:3a:42:83:a6:14:a6:2a:58:a0:c9:7c:b4:c3:f2:
ee:2a:ed:f8:b0:5a:10:8b:fb:97:7d:74:bd:13:8d:
c1:db:6d:ee:69:01:eb:1d:e8:6e:84:e5:d4:38:79:
c4:60:de:85:54:ad:96:a2:39:97:14:0c:07:d4:bb:
57:aa:de:26:a9:76:71:0b:17:de:b9:e9:d4:06:2b:
f4:18:77:7e:01:22:5b:16:e2:12:f8:ab:10:5c:2c:
38:ad:ab:55:bd:d8:f8:fe:3d:9f:25:d5:19:fd:36:
7b:e1:be:3a:ab:ed:14:cc:82:9e:a2:b1:4a:93:76:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:57:AB:DB:07:5A:B1:CE:3D:3B:A6:16:E1:06:E7:AC:DA:1E:AF:E3
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e6:79:e3:95:0c:e8:0c:08:23:b1:1c:61:ef:d0:50:af:2b:
ef:6e:c9:6d:7f:22:7c:50:34:ab:1b:74:b7:62:65:5d:d1:da:
1f:0f:e2:5c:c3:ea:91:17:f5:c2:cf:1a:1b:d6:03:f3:06:f5:
63:ec:4b:32:fa:e4:c6:07:b1:55:45:aa:38:f3:af:84:86:4b:
5f:0c:fc:88:5a:de:02:33:6c:2a:6d:2a:48:5c:f6:4f:fa:77:
ce:18:39:05:9d:8c:6f:32:b2:bb:bb:d0:e7:b0:cb:07:c2:43:
a3:7f:89:a0:06:e3:ab:0b:fa:7d:49:a8:4c:4c:a5:bb:d4:d4:
a5:2c:8e:af:54:f2:29:a5:f4:c2:88:85:39:b0:63:c7:da:c4:
91:47:8b:1c:f4:d8:d7:2e:6d:aa:1a:69:0f:0b:c5:28:8f:4a:
58:76:aa:bb:74:c6:a9:7a:59:0d:b2:5c:86:6a:e3:19:16:d1:
c4:d4:34:7d:bb:49:f8:ed:1d:47:dd:29:8e:ad:26:46:e6:08:
ce:db:3b:e8:ca:b2:45:72:b5:02:c2:bc:49:49:74:76:c1:47:
76:e5:d6:a9:72:84:5c:67:af:a6:54:c5:77:f6:84:3e:d4:bd:
5b:5f:a2:43:94:19:28:ac:59:f2:59:79:4f:3c:7f:eb:6d:b3:
8f:a6:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:44 2025 by rpki-client