Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: JE8XkYuy3EbO64k9U4R9gkQv/1kkaGCE6OyH1Hm0zU0=
Subject key identifier: 10:C6:4D:FE:FC:40:6C:96:34:27:9A:8A:76:48:72:EB:8A:37:41:B7
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 0194BC04DDB18D3D80AAE990605EFEB7A6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: Qcl2vs10wHSBRRZAEkQdrXKauw7Jr9ocBryegtydR2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:b1:8d:3d:80:aa:e9:90:60:5e:fe:b7:a6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=10c64dfefc406c9634279a8a764872eb8a3741b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:02:c5:2e:7b:b3:d4:de:9a:26:5d:10:d1:
42:93:c5:94:0b:75:41:83:c8:d1:6b:bc:24:6f:b6:
5c:55:3d:98:64:d7:e4:1b:65:78:1a:e4:13:ef:97:
ad:01:35:1f:04:32:e4:23:d9:d6:b5:e4:4e:64:37:
81:ed:57:38:cd:c6:08:be:a5:13:b5:d3:12:9a:27:
8e:c6:83:bd:ee:94:0e:d2:eb:fc:6a:97:50:7b:a2:
96:4a:89:26:29:72:5f:95:e2:a8:04:b1:42:76:04:
d3:4f:37:8b:6e:d1:b5:a9:c6:f7:e2:e4:bf:db:ed:
7f:41:b4:56:6b:f9:80:e7:ea:ae:94:b0:49:f6:fc:
46:dd:57:ae:9d:29:19:de:7b:12:31:2e:56:00:ec:
04:9a:97:11:e4:0d:d8:19:64:a8:dd:b2:b4:f2:85:
ec:61:a0:80:69:0a:4e:ee:33:ae:ac:da:8e:5b:ee:
0d:6d:a6:55:ee:18:bf:da:19:34:37:9f:b0:a1:9f:
5e:4c:22:37:de:83:81:b9:60:fb:6c:4f:3d:35:e8:
c2:92:b8:3f:ae:e8:54:76:0d:51:9b:e4:c5:75:cb:
e4:39:41:80:cd:58:ff:9a:c5:34:0f:69:7e:e9:56:
8c:22:a6:0e:47:69:3a:f4:03:2c:48:c2:f8:6f:2c:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C6:4D:FE:FC:40:6C:96:34:27:9A:8A:76:48:72:EB:8A:37:41:B7
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:02:4b:b2:62:de:73:b7:06:30:70:d9:c0:50:a6:95:03:82:
8b:d4:9e:4e:63:92:48:a2:4a:b3:6b:c4:57:41:64:39:ae:55:
33:85:6f:7f:b6:8d:68:69:8a:5e:e5:7c:d7:c0:cf:5b:fa:34:
b9:05:62:fa:c1:08:12:99:8d:9b:68:68:d2:81:58:74:0b:89:
2c:40:93:a5:2e:f7:b3:7e:b6:ab:b1:9c:29:11:72:86:35:1a:
6a:0f:6e:ba:c0:1d:7e:7a:e3:9b:1d:13:8f:0e:aa:8d:70:09:
94:9e:d3:9d:7b:8a:bd:29:b5:f4:59:d8:6b:c8:72:a1:af:01:
59:b5:c1:9e:5a:3e:de:21:69:e8:6a:6a:33:84:fe:4f:84:19:
62:d6:38:8b:1a:23:84:e0:58:7e:b1:ac:ce:a7:d2:ed:ef:c4:
da:2b:f8:25:92:0c:10:3b:8b:da:76:f6:19:2d:a1:c7:58:1d:
34:7d:c2:cf:48:35:86:7c:45:72:5f:a9:ec:77:7a:d5:e0:17:
d3:5d:c0:68:92:ff:ba:e6:69:fe:2f:72:b3:d9:8c:6c:16:ba:
0a:2a:ac:7d:69:2c:12:27:e3:c7:c6:8f:7d:d4:73:66:11:48:
12:88:17:5c:7e:5e:1b:d4:b0:97:27:73:8e:73:14:ed:09:6a:
76:28:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:13 2025 by rpki-client