Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: ZKdnihUUgzafB2h5BvqlAKm6A0nIpLJ0f1KdK+ip03g=
Subject key identifier: 9F:16:89:72:B5:4C:AA:4D:E7:AD:F8:09:B1:D0:10:BA:42:D4:0B:B3
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 0194BC04B94338816BCF894414FA5E49090D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 056C
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=)
2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: O92nZyw2IDaKAgQ2VTktGtXN8+wJWqNsToWg0sylFY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b9:43:38:81:6b:cf:89:44:14:fa:5e:49:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=9f168972b54caa4de7adf809b1d010ba42d40bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:9e:5e:e3:05:95:89:bb:0d:7e:7c:cd:75:
75:3f:43:60:5b:98:7f:b7:f7:86:aa:66:9c:81:b9:
3d:00:95:e4:58:c9:f6:6f:84:35:c5:6c:6e:49:6b:
c8:80:e3:5a:13:e1:f6:fc:f3:de:10:07:47:e7:ef:
30:c8:67:4b:94:c4:11:1b:13:8d:23:b4:59:65:0f:
ab:b9:f4:6c:f2:bd:d7:04:26:94:ad:c7:d2:ab:cd:
db:b8:23:02:56:f8:16:0e:03:e3:47:71:76:64:3c:
67:c3:cc:61:50:84:cd:d6:5c:ad:a7:b2:af:00:88:
9a:6c:ee:bd:ea:0c:7e:62:c0:c5:d8:de:52:c3:3a:
f0:c0:15:3e:02:02:b2:84:c5:9b:b8:63:2f:fb:98:
7c:f1:e5:6f:52:a3:be:ac:43:f1:56:22:b3:d7:93:
1f:7e:2d:0a:cf:49:1b:84:75:18:c8:9f:d5:c5:65:
17:7b:27:4e:05:6d:90:b8:af:c5:88:e0:a6:45:a4:
c4:78:14:b8:5d:58:ba:f5:98:23:f3:3a:75:0c:5c:
22:87:64:8b:36:26:8b:bc:19:31:8b:80:75:c2:e9:
75:d9:7a:f4:e2:11:18:c7:a3:94:c5:88:ac:59:78:
0a:e2:5f:71:41:08:06:16:77:1e:f8:a7:ad:34:58:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:89:72:B5:4C:AA:4D:E7:AD:F8:09:B1:D0:10:BA:42:D4:0B:B3
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:28:5c:20:cf:bd:c7:9c:1a:d0:bf:27:32:15:71:65:55:25:
f9:02:aa:7a:d8:18:e0:95:32:6e:41:0b:d2:21:3d:c3:93:93:
02:1c:d8:75:55:fc:4d:1d:67:13:19:39:eb:3a:a6:14:c8:5e:
99:fd:b8:a7:55:06:dc:9f:57:ce:22:70:e1:1c:1d:fe:0f:ac:
0b:a2:f0:cd:bc:1f:0d:74:80:88:e7:92:fa:7d:11:bd:b5:90:
61:11:07:06:a3:82:a4:40:1f:96:92:d3:23:30:0f:a9:22:76:
f8:8a:35:1d:c4:4b:89:5b:ca:61:b6:07:9d:67:b3:f3:bd:2b:
ee:df:90:fb:f4:7f:2a:59:f4:f9:22:b1:fa:3b:bd:f4:b3:90:
be:4e:73:6b:0b:4e:77:af:3c:f4:b9:79:ae:b3:1a:86:f9:53:
55:64:12:8d:ce:4c:5d:82:87:36:97:b5:09:bc:36:b6:97:6e:
da:5d:b1:2d:4e:79:ba:b6:19:c0:96:a2:10:57:9f:07:c5:ba:
12:65:3f:d0:27:56:e6:26:77:77:f8:69:88:9b:0d:b2:bc:4e:
cd:9d:2e:db:0c:55:f4:88:dc:e7:ad:d0:c3:b7:90:f9:cb:86:
2b:8a:e8:04:25:0b:f9:51:c8:e7:d5:ff:85:26:4a:a5:99:e4:
92:82:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:26 2025 by rpki-client