Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: GJrPAkQSQkq1XeWMBPlDwz5ZdeB9UcTK5Fqv/RyfiIM=
Subject key identifier: B2:AF:19:82:27:97:C0:44:48:05:27:C2:EF:8A:74:DC:A6:17:42:1B
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 0194BC3C18A752AF982C4A311494608350FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0823
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: LVPozNPjLFqSiv/y42xyHdbuvPNCUSZ8fh1iEXTG8gA=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:18:a7:52:af:98:2c:4a:31:14:94:60:83:50:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=b2af19822797c044480527c2ef8a74dca617421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:d7:11:25:ad:3a:38:86:4b:cc:e8:5c:b6:
3a:15:79:4e:12:e6:89:7f:16:02:71:42:17:6b:d2:
ef:99:9b:a5:b1:1c:1b:fc:19:d9:e6:a2:d8:bf:65:
aa:57:0c:e3:03:ff:d1:66:6b:cb:0e:76:ca:6f:0f:
a6:24:48:08:ee:a3:2f:11:e0:1d:0f:e5:01:3d:79:
c0:0a:4b:31:9a:37:43:f2:25:9d:60:45:4d:96:0a:
9c:ed:46:ac:16:86:dd:6d:d0:a2:6f:8f:f4:8a:75:
fd:60:8b:33:d1:f3:07:58:ca:96:57:f2:d1:09:62:
a3:19:be:a3:d6:bf:66:a9:96:68:89:e0:f0:a9:88:
9b:f5:0d:c5:2a:6f:18:94:d1:23:35:29:9a:5f:b7:
a4:9f:70:81:28:38:e6:a1:69:02:f3:7f:60:d5:e3:
be:19:1e:2b:c6:e5:9c:81:95:7f:1d:7e:e5:41:07:
85:1d:32:67:a3:3e:ec:3a:f3:42:73:f5:58:3f:ac:
2d:4a:f8:30:4b:62:69:59:70:1b:13:fd:6b:1d:29:
b3:70:57:2b:fe:87:31:16:e2:8f:db:57:6c:1f:6c:
2e:35:90:40:ab:ab:66:2b:fa:83:7f:cf:e5:48:d8:
70:8b:12:f7:f1:72:ed:64:4f:d1:c7:d9:bd:55:e5:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:19:82:27:97:C0:44:48:05:27:C2:EF:8A:74:DC:A6:17:42:1B
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5f:84:5f:a1:56:1b:45:22:47:c9:ab:b2:ff:40:4b:97:05:
77:52:d9:90:d8:20:84:19:56:6c:97:92:f1:aa:c9:a5:71:c4:
30:ca:0d:4f:21:33:3f:65:2d:18:99:80:b7:6b:be:c4:6e:e6:
94:6c:fe:9d:ff:c6:24:d0:bc:cb:f2:75:2a:86:62:ff:39:57:
cb:55:76:b9:dd:7d:d6:14:0b:98:93:ea:64:2b:e5:0d:3a:fd:
20:ad:2f:19:ea:57:81:72:e5:a1:b1:25:d6:84:e3:46:dc:6f:
c7:61:ec:73:91:33:ae:8d:d6:2c:a2:3f:fd:e3:8e:c1:5f:ce:
ab:0b:8e:71:20:2b:59:7a:0f:86:18:a1:6f:69:0e:59:db:c8:
76:a4:d2:30:30:e2:3a:d5:6c:b9:d2:48:33:b4:e9:ea:ea:ec:
5c:55:fd:e5:68:d3:38:e1:07:93:9f:1f:d7:bb:d1:00:3c:f6:
60:fb:31:5c:fb:2b:89:5e:a3:74:97:20:7a:59:40:9c:3d:3a:
b8:24:e7:96:94:fa:5d:71:1c:a3:60:c0:42:b6:d4:3f:44:b2:
81:df:7d:10:7d:86:ec:bc:ab:7f:fc:4d:a3:e9:8b:10:43:a6:
a7:59:ec:9a:08:fa:c0:3b:c3:ce:cf:4e:5f:cf:fd:79:6f:2a:
fd:d5:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:07 2025 by rpki-client