Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: AnW0dEcs2NsGZnAEQ9JLhp3LV48G2h3l/bcm3FFLvrM=
Subject key identifier: 9E:4F:93:EB:66:97:26:04:B1:FA:3B:C0:25:28:7C:82:FD:DF:47:24
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 0194BD17CBE250C582BEF273D19BB643BC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 0FD1
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: KSItTKLuFX190tCd6bc2fdUOW70.roa (hash: 1weGkaA0gywc6E/5RozsskcFkH9K8y0MKO+pixoaT7s=)
2: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: 7lEkyxvmqTkgSJqmTbWdqhta1DoEP6gn0lbkCALJwx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:e2:50:c5:82:be:f2:73:d1:9b:b6:43:bc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=9e4f93eb66972604b1fa3bc025287c82fddf4724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:80:80:d7:3d:57:81:08:58:70:25:94:65:
c8:81:90:53:86:70:5f:60:02:9f:9e:7d:e3:0b:ce:
87:94:3a:3c:b9:09:f4:c8:c7:56:fe:52:3f:5e:f8:
96:4b:3a:0f:fd:40:f1:9d:9e:3a:f9:16:ed:00:be:
bf:60:7a:78:51:05:5b:76:96:3d:97:be:68:ff:9c:
30:b8:23:8d:76:6b:84:19:9f:72:1e:b4:94:35:cb:
82:5c:77:a6:fc:91:73:18:ff:9b:76:09:ea:a4:57:
66:79:ef:07:78:18:e4:7d:80:7f:13:ca:2e:66:85:
ec:5c:bb:44:6c:e3:2a:4e:a1:f5:e9:81:16:99:c6:
08:fd:44:cc:f2:a3:c2:f9:23:50:e6:cc:2e:7e:31:
b4:f0:3f:f3:7d:2e:36:b8:bb:23:05:44:b9:1b:7d:
e2:b9:cd:d4:db:c0:5e:9e:89:26:7f:85:24:38:76:
cf:33:fb:10:9f:e3:79:8e:a4:de:b5:8c:b2:30:cc:
b9:24:74:74:ba:e3:89:de:a2:db:ca:6b:38:b7:29:
2d:47:3d:a1:cb:fe:bd:6e:e2:c1:c8:c0:d6:1c:64:
12:2e:db:3d:d8:0d:a6:11:da:bf:e4:cc:68:e0:e6:
3b:97:fe:d4:22:a7:14:2e:05:1d:28:8c:24:78:b2:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:93:EB:66:97:26:04:B1:FA:3B:C0:25:28:7C:82:FD:DF:47:24
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:66:75:1e:cf:3a:62:9a:8f:d7:f4:b4:6c:39:26:95:dd:90:
e7:a4:00:d9:90:25:67:3c:60:27:94:cd:f4:c5:5e:de:5d:7d:
4d:8a:7c:03:6f:10:78:96:4a:f4:8a:c2:db:d3:3c:60:55:52:
74:bf:cb:42:ca:45:94:2f:49:57:13:6e:47:e8:dd:56:1d:56:
af:19:08:ff:17:db:63:cb:98:37:b1:20:ae:45:7a:ba:dd:7f:
c4:12:6a:90:25:d4:af:09:4a:ac:a6:db:fd:66:d0:70:99:ee:
0d:3e:96:ba:03:4b:9e:2c:0a:3f:bc:10:18:28:e3:6d:68:32:
b9:c7:e5:1a:df:2d:53:19:c1:9c:47:55:06:38:cb:b1:70:6b:
0e:86:bd:ca:04:94:2e:23:e6:1d:33:d7:ff:20:a6:17:18:84:
ae:32:a9:7e:55:58:24:4c:06:23:82:93:98:72:ec:fd:66:7a:
fc:df:0a:3c:ff:69:47:5d:cd:ca:56:08:3f:8e:ab:92:7a:39:
10:80:3f:3b:89:2b:8b:31:2a:8b:7b:f1:9e:d6:27:71:ad:11:
cc:f2:bd:41:0b:53:5e:67:5a:a4:36:d2:cf:ae:bb:1f:39:74:
dc:27:d2:07:ab:ab:62:76:6d:93:d1:fb:d5:6b:ae:de:5f:c7:
ef:ad:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:29 2025 by rpki-client