Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: 8BNCFw3wGV/aBLvRdQyZkCAOphVAGxYGp+r0bFWcWH8=
Subject key identifier: 94:5B:E5:31:49:64:E1:0A:63:D9:5E:FB:66:75:1F:22:2A:19:2F:92
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 0194BD85912BD37BC0C8F6557FCCF1971306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: EGDW/qlCgC14krt1HBH5DxDir3x1FrBgAw+czvhKLWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:91:2b:d3:7b:c0:c8:f6:55:7f:cc:f1:97:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=945be5314964e10a63d95efb66751f222a192f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:c3:22:3f:73:bb:76:db:4f:23:02:d1:d0:
f9:16:62:f7:00:21:46:d2:c3:0b:d5:bc:65:d0:f2:
fb:ce:d0:66:7c:f6:9a:4d:f5:90:27:b5:b2:0f:fb:
d4:ba:3a:c8:c6:77:4a:bc:c9:af:70:be:01:90:2d:
c7:cc:b7:0c:10:b3:80:8a:f6:76:ad:86:14:54:35:
e0:f6:c9:b4:1e:f8:70:8a:c8:e6:e8:fe:87:a0:3a:
78:e0:01:12:30:98:18:85:4b:4b:3b:1f:a3:8b:37:
c0:a8:85:85:19:df:81:5e:40:6c:4f:d2:b6:a3:b2:
de:81:5a:6a:27:67:a4:54:c7:3c:e5:ab:63:45:c1:
d6:b1:89:09:b6:b4:36:49:94:f3:2f:ef:4b:e1:0b:
22:70:0e:11:79:82:5d:3c:ba:93:2f:b1:6f:46:f5:
3f:b1:bd:3a:27:e0:d0:55:c9:81:8e:1b:18:9c:90:
3b:bb:c9:8e:c2:d3:a4:0c:98:38:43:27:1e:ea:c7:
63:f7:cf:10:c4:a4:8e:5c:b2:64:36:e0:c8:b7:81:
c7:5f:ac:b3:0f:fb:c6:79:4d:02:60:d1:be:9e:08:
c4:cb:99:b4:0a:ed:b6:81:eb:0c:37:e2:3d:14:cb:
ef:fc:1a:a0:09:5f:0d:3c:74:6a:a4:45:b0:d1:8f:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:E5:31:49:64:E1:0A:63:D9:5E:FB:66:75:1F:22:2A:19:2F:92
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ed:33:45:ae:91:21:3b:ef:31:07:dd:f0:95:ba:1e:5f:39:
9b:a9:74:bb:2a:f6:f0:b4:43:24:aa:94:3f:dc:96:f8:16:3e:
33:6e:8d:00:4f:25:c8:25:11:d9:84:df:d8:02:b0:a7:d2:9d:
a1:a1:8e:7c:9d:47:36:2e:27:03:7a:e7:de:6e:e4:ed:ce:55:
96:27:1c:d8:a4:e0:ce:6d:64:d7:21:e5:c9:32:78:3d:87:95:
a6:6f:7d:bb:40:76:c1:89:f8:9c:74:5e:81:99:b9:a8:f9:72:
13:61:fc:4a:59:e9:1f:00:92:21:a8:b0:1c:87:6d:fe:d2:64:
c8:f0:84:0b:26:3e:3c:d7:83:9e:80:c6:b3:ec:e1:aa:e2:d0:
0f:4b:d6:f2:b6:ad:77:48:39:09:55:f3:d5:f6:6b:14:fb:d4:
65:b2:4e:6d:d2:02:79:a5:4f:71:af:04:e6:f2:16:86:fd:2c:
a1:29:ba:6b:8b:3a:af:d3:93:da:4a:f5:1c:60:09:d1:60:a1:
b2:2b:c1:88:d4:6d:f5:bf:df:95:b2:97:a0:e8:59:65:82:2f:
6c:2c:6f:41:fc:2b:ef:49:85:9c:a4:eb:6d:14:eb:4f:8b:99:
b2:32:9b:50:8b:aa:0c:cb:7c:bf:c3:67:36:fd:e1:0c:4b:f2:
6b:ea:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:22 2025 by rpki-client