Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier: eCjE+jdlkjz54ezSZmKkYfAGHjJDvEBlpC/lDmx/Jg0=
Subject key identifier: 08:8C:74:68:34:A8:7F:8B:89:34:2D:4F:91:A0:A3:9D:75:00:11:57
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial: 0194BCE098A157844E3ED3C2080842EF3656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number: 0851
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: Z8wnA2itVPR9zxxfqnLX_eyTvXY.roa (hash: N7iRDq2qhJARhENgYS1Gobu76hKcgsCLnrDoJ7LMXdA=)
2: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: GglxBRgvdiJ1lvyM+qADc32lUfj2ShKaKv9zb5CtCUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:a1:57:84:4e:3e:d3:c2:08:08:42:ef:36:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=088c746834a87f8b89342d4f91a0a39d75001157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:59:5f:d9:9c:f9:97:56:06:13:e5:9f:c5:
28:6c:f1:b8:e1:25:ef:d0:7d:ce:e3:53:98:40:7c:
56:c0:28:e5:cb:66:5c:3e:82:f8:82:49:88:59:8c:
0d:f3:cd:13:00:1f:5b:15:ee:21:a2:ab:45:dc:25:
89:51:cc:65:fc:ca:27:e5:44:f3:2d:2a:0b:81:48:
a0:18:79:7e:74:b9:ce:68:90:b2:81:8e:27:61:1e:
40:2c:eb:93:16:96:01:27:51:b8:29:aa:0a:f4:26:
f8:d2:f0:41:a1:47:4a:24:44:f8:fb:d0:54:57:c4:
ee:63:62:9f:f8:17:d2:8e:a2:dc:48:0b:25:26:d0:
7a:13:47:61:60:97:3a:db:60:63:02:31:e9:b5:b8:
f2:93:a7:db:8c:67:4b:81:76:f3:eb:22:81:47:cf:
89:9d:0c:1b:f1:a1:0e:b4:d2:60:4a:f8:8c:75:de:
1f:48:75:40:bb:3b:ca:ee:17:db:00:fc:e7:26:40:
04:5d:b1:78:cf:f1:ca:83:0f:69:9d:82:54:df:b4:
b2:8e:92:a4:ad:17:9a:68:1e:05:ea:25:8a:25:61:
fe:91:12:4a:34:4e:af:d4:97:f4:de:c6:d8:6a:63:
6b:a0:00:45:fb:a4:09:df:0b:2b:81:98:87:bb:5c:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:74:68:34:A8:7F:8B:89:34:2D:4F:91:A0:A3:9D:75:00:11:57
X509v3 Authority Key Identifier:
keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e6:72:7c:87:1f:41:df:76:39:2e:f8:6f:2f:d0:c7:32:ab:
28:c2:ca:2a:ee:da:ba:0d:84:a1:90:c2:21:30:96:66:6d:5f:
85:32:70:34:86:d8:ee:18:a8:d1:35:66:84:eb:26:c6:98:a7:
e8:34:79:f4:c9:68:c7:8c:e8:aa:d4:18:cc:37:00:4b:5d:89:
e0:d9:8c:b2:68:c8:16:ec:4f:2d:1d:7f:2c:88:86:46:be:7f:
95:64:f0:00:d6:88:c7:1a:0a:a9:98:76:9c:a5:5c:15:23:4e:
38:9a:93:60:b8:9c:d9:ef:41:e6:c1:af:4d:51:31:c7:53:87:
98:68:33:a9:31:6f:94:8d:7f:3f:ed:a5:7c:99:66:3e:e9:ae:
17:c6:71:66:c8:77:57:f7:25:37:2b:49:1f:ae:23:b1:98:1a:
6c:b3:fd:fe:b9:08:92:e9:7f:f2:84:7a:7e:94:2e:ab:f3:30:
09:b2:5a:a3:85:4b:6f:17:23:af:63:34:d3:16:52:9b:b9:e9:
b2:da:43:fe:ee:f9:55:20:c2:59:3b:75:88:5f:f8:b7:49:e3:
b0:79:7f:12:ef:3f:33:e4:14:b8:18:b7:49:31:61:01:91:2e:
a3:cd:86:3f:d0:09:6d:2e:51:fd:a0:29:c7:4c:b9:3a:50:49:
e2:bc:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:02 2025 by rpki-client