Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: O8DonHHnXANt6w77Hh3xtV1EmGRBRkf40O2Bo+Mm2/M=
Subject key identifier: A3:25:97:F6:02:29:F9:0A:83:0F:18:94:51:7F:3A:5C:EE:24:DB:22
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 0194BC04EB955C9A916B05591ED4169A1FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: xS3r8T3u32z3B6uk0yibXZ/LCz7tWk6MGWRFOlvZ/jg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:eb:95:5c:9a:91:6b:05:59:1e:d4:16:9a:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=a32597f60229f90a830f1894517f3a5cee24db22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:f6:7e:94:38:d1:f7:00:c4:96:54:25:de:
83:67:04:f3:58:be:ff:a2:80:b2:67:b2:d0:87:d3:
f6:b1:92:6b:69:39:73:5f:50:b1:1e:ac:a9:35:1d:
71:61:82:ed:42:c8:54:2a:2a:2d:b3:35:c7:7f:90:
47:53:92:89:41:28:bf:48:0a:af:01:90:80:e5:2e:
39:fa:93:95:d6:23:e3:f7:bb:d1:9a:ca:fb:71:16:
5d:3c:e3:6e:2f:07:b9:26:aa:b3:ec:e6:36:dc:16:
33:2b:53:ac:9b:eb:21:4f:a4:bb:10:02:d7:89:f7:
cc:ce:5b:db:fe:78:d4:c7:27:9d:6f:5e:db:3e:59:
61:0a:29:fb:1a:c6:01:81:ff:3e:26:cc:fa:2f:5e:
73:d0:10:40:4a:45:ec:ca:82:5f:df:ba:16:4a:e3:
80:5a:e2:a9:c0:0b:99:56:34:e3:77:22:58:eb:d0:
39:ca:66:6e:be:26:6d:7e:9a:99:44:2c:c1:b5:b3:
ed:26:11:30:76:31:31:12:22:b8:29:eb:ca:2b:23:
4c:00:20:88:62:8b:e9:08:dd:0f:03:32:4f:7a:b9:
ed:9c:cb:5d:1f:e3:1f:d1:5f:c7:a9:30:39:89:3e:
78:10:b4:6b:f5:82:03:e2:c2:ba:97:dc:cd:ab:9a:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:97:F6:02:29:F9:0A:83:0F:18:94:51:7F:3A:5C:EE:24:DB:22
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:2a:17:db:32:f2:b5:d2:f0:fd:7d:6b:94:8c:e7:8b:03:
ca:fe:cf:a0:33:39:c9:c1:9c:a3:63:78:d2:8e:2a:23:d0:e8:
08:c8:f5:df:ed:fa:28:c3:ea:f8:52:61:59:9d:6a:f1:46:39:
10:a4:56:f2:c5:7e:58:a9:94:4a:20:6b:ec:f0:1a:b9:5f:f8:
c8:0b:cf:79:a2:f0:36:5d:b2:05:9e:9f:06:24:dd:2a:ef:16:
3f:46:67:c1:46:71:6b:f4:c2:30:c9:a8:04:6d:60:55:c4:de:
6d:a3:a0:59:d7:16:b8:27:ab:6b:e4:77:b2:7b:36:bf:fa:e7:
7c:8a:f3:85:17:1a:50:4b:1a:82:e4:08:18:4e:40:28:f7:96:
40:39:12:9a:54:a8:ee:f2:63:77:87:e9:8a:e5:1b:d2:b4:1b:
fd:4f:65:46:c5:61:e8:3d:13:47:f8:95:25:e5:eb:b2:21:c4:
c1:78:3a:d5:d6:9a:89:90:bc:f1:21:20:56:d4:1d:0f:e6:75:
3a:4f:a0:5c:9e:1b:4a:f7:13:60:eb:f2:ac:ce:7a:18:74:d0:
f9:55:5d:89:21:4b:62:1e:30:47:16:bf:26:86:c2:e9:32:b1:
a0:6d:5d:e3:27:e4:20:90:18:ec:5c:73:f1:48:af:9a:97:27:
85:8d:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:38 2025 by rpki-client