Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: AvxcyuKKnGPO7N8OEIKY8L6QR7wO4yzOt1RTCV3ksyI=
Subject key identifier: 98:5C:6D:22:4D:7D:7C:74:EE:51:5D:C8:C3:8E:11:C6:15:1F:59:66
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 0194BD1801BFAD35517554331CB5F79CE0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 1139
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: 0t82xilpVnlxnOIJNywzORDfPYhzGVjaVc8Q8p+N/y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:01:bf:ad:35:51:75:54:33:1c:b5:f7:9c:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=985c6d224d7d7c74ee515dc8c38e11c6151f5966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:a6:1e:3f:51:6d:56:c2:4c:8c:f2:4e:cf:
20:4a:70:5d:7f:37:46:0c:e6:cc:1a:a4:75:1d:45:
98:dd:ba:9a:64:5a:81:37:df:a2:0b:3a:1e:0e:25:
49:e5:bb:d5:4a:f3:da:e5:22:a9:b1:6b:3f:12:5b:
0e:0d:eb:29:b8:e2:92:60:cd:45:53:8a:6d:a4:d9:
33:22:c0:89:9f:b2:a3:e6:18:31:92:12:bc:fa:29:
90:f7:0e:05:3a:39:13:8d:a1:5d:71:82:19:a2:30:
dd:79:23:5e:03:d9:b8:2e:fa:d3:ca:30:6f:89:60:
e1:65:d4:9c:92:af:07:28:84:19:c7:16:e2:b9:35:
fb:26:3a:7c:f9:8c:3d:dd:8c:e7:c3:ee:04:f5:45:
64:15:69:1b:de:10:1e:ca:66:3c:a5:56:a1:8b:6f:
2b:7d:26:cc:c3:3f:eb:ac:dd:c9:ab:f7:59:57:f7:
67:99:e1:8a:e0:33:47:9d:5c:58:83:86:5a:ae:6c:
cf:12:67:b4:da:72:ed:30:cf:12:ba:49:c2:f8:ae:
bc:90:50:d6:6c:2c:39:5a:17:38:63:96:cc:36:a4:
5a:73:04:17:3f:b6:22:99:48:d0:05:ab:8d:e6:2e:
cd:6c:28:20:d4:2a:6f:1f:e7:d7:60:83:08:94:9d:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:6D:22:4D:7D:7C:74:EE:51:5D:C8:C3:8E:11:C6:15:1F:59:66
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:b0:18:9e:1a:0c:c7:a4:74:ec:55:2f:60:bc:a6:ae:96:
85:d0:f9:fb:6b:5e:d2:41:f8:53:ac:be:6c:64:59:90:97:10:
7e:a1:2f:a3:55:fe:f0:29:37:ff:da:6c:d9:1e:d2:c8:dc:57:
3a:ca:03:ab:35:7c:59:1d:5a:36:ef:b2:15:b6:a6:a9:62:92:
68:d8:85:a4:ef:2c:83:4a:12:21:bb:89:cf:cd:81:97:94:0d:
90:89:70:14:6b:13:c9:d2:db:57:54:b6:98:01:2b:53:1a:c3:
dc:41:21:88:e5:9b:b7:01:7a:22:f0:ca:c2:53:03:ce:4e:33:
01:5c:25:ef:55:84:a7:57:24:71:16:53:45:38:ae:f7:d2:c7:
83:a9:8c:d6:ba:ec:2a:02:a8:f1:20:ee:56:58:0f:fa:9f:9b:
1c:04:ee:63:25:83:20:e6:ce:4c:23:99:67:2c:46:6c:81:21:
50:20:24:36:3d:63:92:a7:f3:ce:6c:f9:75:52:f9:e8:2f:57:
53:52:15:01:fb:76:87:06:7d:bf:4e:ba:57:63:f6:b1:1e:40:
25:38:0c:0a:80:a3:ff:09:05:02:0d:8d:9e:af:74:58:6d:05:
8e:5e:68:bc:1a:67:2e:10:01:6a:64:ac:cd:24:de:dd:ac:b6:
01:d3:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:06 2025 by rpki-client