Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: POUCKQzBB5M4H0ODzxvwnzQlz6sOwo/4BAgOfTpkLbQ=
Subject key identifier: 1D:DF:F5:9E:C9:35:E8:AF:02:C4:35:C2:D3:2B:41:E2:3E:74:CB:CD
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 0194BBCDD2B1B8646008EB45D3CAC904215D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 0CF0
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=)
2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: U4XyKUPCdAPiHM/NfbOzfLlnpCuJbvKM7lrbHCCmRXA=)
3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=)
4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d2:b1:b8:64:60:08:eb:45:d3:ca:c9:04:21:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=1ddff59ec935e8af02c435c2d32b41e23e74cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:37:05:44:e3:b6:05:f6:18:6d:ce:86:8c:
70:65:58:dc:91:ce:39:8d:d5:10:4b:f2:ff:0b:4a:
0e:62:70:53:59:77:4a:b3:08:99:5c:9e:94:e0:6e:
2c:e9:b6:25:6b:27:54:e4:3c:32:7a:18:96:91:04:
d1:04:f5:a0:6d:27:fb:1c:a0:bf:e5:18:e8:c3:19:
62:36:c2:fd:0f:78:76:d1:e3:46:3e:d6:47:3c:6d:
70:18:92:f0:d8:9b:a7:fb:be:24:69:1e:bd:71:0d:
09:3e:ca:b2:cb:00:89:18:39:ba:ad:c2:2f:75:86:
cb:ed:7f:61:df:4d:a7:67:14:1b:aa:09:ec:be:8e:
bd:93:98:1c:fa:fa:98:8e:a6:ae:c3:7c:9c:93:db:
2b:9b:ed:d3:82:b8:a0:75:14:4f:4e:35:22:0a:aa:
a9:88:92:26:83:77:9d:6e:bd:f5:22:76:bf:17:20:
ed:91:3e:ec:1e:d4:ff:db:18:8f:af:7c:3f:26:36:
39:90:c8:ae:30:34:d6:0d:50:c7:9b:58:ea:ea:c8:
57:82:aa:07:e3:60:43:d0:9f:3a:aa:c5:2d:0d:d0:
b0:89:65:4a:4d:6b:ff:04:6e:7b:a2:f1:f2:fe:a8:
07:28:3f:fb:47:9a:0a:02:ec:fa:79:5e:c5:ed:42:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:F5:9E:C9:35:E8:AF:02:C4:35:C2:D3:2B:41:E2:3E:74:CB:CD
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:da:3f:a7:c5:38:cc:ec:a7:da:74:58:b9:95:dd:65:a4:88:
8a:ef:8d:0a:41:3e:d6:b6:51:ae:1b:fb:f9:8f:fe:a0:51:1c:
cd:63:3b:fb:f0:69:f0:95:e6:19:8e:87:7c:8c:cd:2d:60:d4:
70:08:21:df:1a:ac:62:d1:17:85:5d:80:50:14:af:38:cb:1c:
b0:a9:f1:a6:2b:de:54:15:af:5b:2a:9a:63:0c:26:19:04:8b:
f3:8e:9c:e5:f7:dc:b0:22:df:02:18:0a:47:d0:c4:f6:b4:e1:
b1:23:cd:be:31:ef:8a:cc:12:21:fb:9d:fb:23:87:14:b3:09:
e8:0c:cf:bb:2e:65:7a:c3:c7:1e:57:e3:db:69:7c:ab:11:3e:
12:89:ef:44:c8:43:8e:99:d8:39:17:67:6e:4b:eb:50:a9:85:
4a:fd:91:76:ca:e0:9d:9e:3c:3e:30:47:86:50:89:89:1c:32:
94:51:32:9a:cb:f7:5c:3a:74:50:cd:f6:26:84:a6:42:b2:0d:
99:99:f2:cc:e3:04:17:64:ff:b1:76:60:30:cd:44:a4:09:59:
dc:dd:cf:ab:24:14:e0:5c:45:b2:7b:bd:d2:47:5a:1a:71:01:
e9:5a:e9:b6:9e:14:12:19:d4:de:d2:12:62:ec:e3:97:a1:31:
48:9f:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:39 2025 by rpki-client