Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: SZrZqnPN1aIWcfTBJTaJ/kYzpWNkLupDR2WRWKxbMQM=
Subject key identifier: F5:24:35:1B:C8:DD:07:1E:D6:49:2D:31:94:1C:CB:D7:E2:5F:1D:62
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 0194BC72D0CA4750610C9F732531F17C3970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0953
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: iowVcuMkxNOcgiD3CluudVWYcXnZMwTWScH42Pl7M5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d0:ca:47:50:61:0c:9f:73:25:31:f1:7c:39:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=f524351bc8dd071ed6492d31941ccbd7e25f1d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:dd:44:c8:ae:c4:10:5f:9d:f2:b3:c7:e0:
f9:6a:f7:86:cb:95:aa:ea:ec:a6:12:a3:69:57:f1:
a9:18:40:56:71:bc:d1:a7:81:cf:ab:e1:b0:5c:ca:
9c:10:1d:88:70:45:59:19:fd:9b:de:28:06:2b:a5:
7c:01:dd:29:59:f5:94:77:68:77:65:ca:31:a9:7c:
83:85:92:4e:e9:b1:84:e0:4e:58:ac:0b:1a:84:a0:
c3:7d:6d:7c:8c:c5:f6:4a:18:cc:3a:dc:22:01:91:
14:5c:cb:9a:17:0c:91:35:d2:94:b4:76:49:02:fa:
5a:ef:1a:ff:db:e1:fd:da:93:2c:7c:44:71:95:fd:
0c:f5:43:69:31:ba:6e:94:5c:14:85:b8:f4:bd:b6:
3f:53:84:d7:bc:2b:04:5f:f2:ac:f3:64:21:a8:03:
22:a0:21:29:4d:55:4d:97:9d:a4:7b:d1:d1:24:0f:
1b:06:07:62:54:cf:9a:66:56:b6:6b:79:fb:57:57:
a4:3d:89:3f:2f:36:b2:4d:0a:d0:0b:43:7b:89:8f:
00:b5:59:7f:21:50:ae:48:af:2a:08:0f:4b:ee:93:
b8:20:92:85:e2:9b:64:9a:7d:bc:38:70:90:1d:14:
92:ed:09:dd:9d:a9:26:7d:8c:dd:98:02:1a:81:88:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:35:1B:C8:DD:07:1E:D6:49:2D:31:94:1C:CB:D7:E2:5F:1D:62
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c2:bd:8b:13:d1:82:49:5f:f4:0f:ed:24:8d:03:96:58:0c:
58:f7:0c:8b:2c:11:ad:47:75:b4:4a:c6:b8:8d:d5:b8:42:83:
4c:03:32:9c:34:b4:da:24:30:ab:78:69:10:d3:ad:f9:d2:6b:
ba:cb:58:66:1c:4c:77:b2:c7:16:94:54:ef:ac:7d:34:b0:39:
f9:54:87:70:6f:52:15:d7:4a:0d:ec:47:ba:84:bd:c5:54:f7:
6e:fb:46:79:d7:4e:d9:fb:d6:9f:2b:7d:80:a0:6c:82:fd:d3:
7f:9c:98:af:7e:ff:9b:26:02:fc:c7:d6:6d:a9:ca:c0:ce:c2:
8a:fc:2d:88:c2:9e:5b:fe:32:36:8b:b6:6f:ee:1a:e9:fc:33:
e1:17:07:ee:dc:dc:f4:5c:86:0f:e9:03:43:8f:1b:7a:6c:00:
8c:a6:ce:a4:69:f4:ac:7a:7a:49:76:40:bd:9d:96:9d:c3:61:
34:9b:f7:29:d6:4f:d6:bb:13:37:67:38:80:1d:55:aa:ad:53:
ea:41:a8:4e:19:28:fb:3f:d4:9f:3a:b1:2f:0f:3a:92:b1:ef:
c4:39:1b:bd:64:33:57:8a:c5:35:76:5c:33:24:75:f3:69:3a:
a9:8a:fe:4d:8e:3f:1b:04:f8:e8:46:9e:a2:69:59:82:18:2a:
ed:29:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:01 2025 by rpki-client