Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
File: iloI9Bw3MCfggbXByoqAC_GFXZ8.mft (raw, json)
Hash identifier: dlXip1RMsDBGgNo3LkM6ijtqxDhpFCozuDyS3M444BI=
Subject key identifier: 97:5A:54:D1:55:BC:06:61:7E:31:AF:8F:EB:A1:8B:F5:77:F4:1C:AA
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Certificate issuer: /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial: 0194BC04EB8048BB2C3D1F62C07925B87D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
Manifest number: 07F0
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: ErjG8PzRqBjeDZcaFGNcBuUeEUE.roa (hash: sN5KyroEA4/9YU1zLDTzNIFkGV6HdbsDCYD+xFVzoWA=)
2: iloI9Bw3MCfggbXByoqAC_GFXZ8.crl (hash: DE5fJeLQqPbV3RwFeGqvzP41H4pK9gqGcvijV4UDCIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:eb:80:48:bb:2c:3d:1f:62:c0:79:25:b8:7d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=975a54d155bc06617e31af8feba18bf577f41caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:03:4a:ca:a9:38:90:d8:74:72:97:44:5c:
29:a4:23:a0:5f:71:dd:1a:ee:95:c2:f0:7b:39:0a:
de:9b:70:94:e4:22:82:46:3a:df:5c:0d:f2:4c:06:
fb:e5:ef:e0:26:58:b8:85:f0:06:6c:37:01:0a:78:
d7:7c:01:e8:66:db:65:e7:3c:55:cf:5e:c9:ed:27:
b8:e8:cb:04:6c:75:c1:07:71:6f:9c:33:16:81:0e:
93:10:10:66:b9:30:5b:e8:8f:5d:a1:0d:61:59:06:
64:21:f0:4d:f9:de:13:d1:a4:a1:e8:7f:ed:d0:82:
8b:05:d8:5f:6e:43:e8:2d:e4:e9:ab:14:e2:78:a0:
6a:8f:d3:d4:93:48:9f:3d:17:47:67:66:3c:39:58:
22:86:c6:32:25:fe:0f:68:a1:59:64:92:05:ca:fd:
72:70:22:03:1b:44:07:a1:7b:93:d9:fe:8f:5f:e6:
f6:c6:9c:e5:b8:ce:95:3d:16:0d:28:44:16:01:a6:
b6:5a:3b:c7:d1:6a:19:33:01:58:a6:1d:06:1c:f3:
97:b5:7a:27:b7:2e:10:02:f8:f4:18:e4:b8:c9:7d:
c4:e7:97:87:9e:46:90:e1:3e:d9:ac:a1:6f:95:a6:
c6:19:02:4d:f9:7c:7e:4a:2e:ae:7c:a0:7a:10:ce:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5A:54:D1:55:BC:06:61:7E:31:AF:8F:EB:A1:8B:F5:77:F4:1C:AA
X509v3 Authority Key Identifier:
keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:22:ea:00:92:6c:df:30:a7:7c:8b:d6:1a:2a:9b:89:d5:2d:
c3:62:45:f0:c8:5a:48:84:53:21:3d:01:e5:89:07:2a:81:08:
bc:22:a9:ec:59:00:56:67:b1:9b:47:a9:8c:3b:2e:3d:c5:9e:
86:74:71:16:80:56:d1:dc:8d:de:38:40:e2:28:16:a4:4a:d6:
0a:8c:cf:43:94:1b:88:bd:a6:e7:dc:6e:4c:4e:f7:83:8b:ac:
2c:73:7a:61:ec:99:cc:83:0a:05:27:64:23:4c:e7:2c:70:59:
56:09:e2:07:65:d8:0b:bd:ff:d5:66:b7:44:db:7c:7a:2a:70:
cf:21:85:36:4e:76:e9:15:ae:ff:26:ec:69:8b:c0:73:cd:3b:
82:41:24:80:99:02:a0:7e:28:e0:95:ea:79:4e:96:a9:8c:21:
fd:b2:97:de:c8:02:fb:ca:fa:3c:e9:1f:ea:ac:28:35:d7:7c:
c7:9a:a6:aa:80:ae:10:7e:35:48:30:66:87:c6:1a:8b:f7:75:
90:93:4b:d5:62:c6:17:15:54:2a:1e:56:c1:7a:6a:35:df:94:
c6:43:c2:6a:64:21:58:85:25:93:0f:b8:99:af:e4:be:6f:2a:
2d:fd:1c:d1:18:59:02:3a:9f:60:54:73:e6:6d:65:76:30:c7:
77:f4:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:08 2025 by rpki-client