Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.mft
File: _IVpUg4Np9h6poISSid01jZmteg.mft (raw, json)
Hash identifier: pesLVuiHGNlUcFshuORvW+s9msvUYwPG5hdj5PE6s8I=
Subject key identifier: 5B:92:7F:33:49:C3:C6:9C:0A:46:8F:5F:91:18:2C:70:8E:6A:FE:1E
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 0189CF8BE4C46808A7DA14EBECF134521DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.mft
Manifest number: 088A
Signing time: Mon 07 Aug 2023 10:29:58 +0000
Manifest this update: Mon 07 Aug 2023 10:29:58 +0000
Manifest next update: Tue 08 Aug 2023 10:29:58 +0000
Files and hashes: 1: X-yutswq4r0Xiudu27lFdmZ9h68.roa (hash: ZegUYrw1SE/XDfFnpS/gRDMw0CjWjTGjgneqOHRNs5Q=)
2: _IVpUg4Np9h6poISSid01jZmteg.crl (hash: 7qCdFtU7235od5ZdZNmi+HAcB01+Sz9iY8N6reueXF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:8b:e4:c4:68:08:a7:da:14:eb:ec:f1:34:52:1d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Aug 7 10:29:58 2023 GMT
Not After : Aug 8 10:29:58 2023 GMT
Subject: CN=5b927f3349c3c69c0a468f5f91182c708e6afe1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:3f:ff:61:ba:ee:e5:ce:d3:12:3c:fa:89:
95:6a:ba:d4:5c:7b:7c:72:2c:ad:d0:4f:d5:3e:f3:
b9:92:c4:ed:16:e1:54:d9:16:f4:fc:96:d9:fb:54:
9a:c1:f3:28:e6:14:c2:05:7d:81:3a:ca:51:fe:9c:
5e:30:09:11:6a:50:03:13:94:29:2e:ea:dc:96:67:
67:47:6f:08:06:9c:83:34:54:1d:90:c3:04:eb:7a:
6c:92:06:b0:8f:c1:28:8e:be:11:a5:19:7d:9f:27:
1b:da:39:ff:23:e7:c9:2d:4b:85:82:6e:21:0a:d9:
55:44:18:6b:df:6a:b9:8c:90:33:9a:90:cb:68:ea:
6a:36:df:66:9c:af:34:4a:69:ac:74:7d:d3:79:9d:
ba:dc:a6:2c:4c:7a:96:9a:5d:dd:e7:f4:51:2a:56:
80:43:aa:dc:03:9f:a4:19:b3:a9:b8:ad:0f:39:3b:
a4:c3:24:2d:a9:f5:ff:be:09:ab:a8:f2:a8:f8:c8:
00:5e:ec:a2:ce:7a:84:26:11:29:ce:f3:05:6b:4c:
6b:a4:7d:93:22:f2:93:10:8d:d2:36:bf:4f:81:b1:
c5:59:1e:7e:78:a5:88:05:b0:6c:70:06:d7:fe:36:
87:19:66:10:53:88:14:cd:c4:1e:62:70:26:38:cd:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:92:7F:33:49:C3:C6:9C:0A:46:8F:5F:91:18:2C:70:8E:6A:FE:1E
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7a:9b:54:6d:8b:4f:2e:32:8c:88:02:3f:4b:28:09:98:c2:
c2:a6:70:5c:77:f8:b9:12:c0:c8:7e:d0:1d:b3:40:fe:b1:42:
4e:89:df:9d:cb:98:7e:39:64:b1:cd:76:a0:56:e5:e9:e4:f8:
8d:5d:57:74:c8:0c:01:97:72:01:06:30:ec:5a:5f:b9:c4:26:
7d:26:ec:f1:61:a2:17:b4:8b:d1:a0:60:29:a7:7d:cd:a1:d9:
e9:85:d9:17:71:77:8f:53:fc:14:78:e8:6d:8c:06:66:a1:ba:
2b:c9:f7:d4:cc:74:bd:da:95:57:bf:d2:75:95:83:0f:30:ad:
08:2f:f5:ad:05:da:c2:9e:52:3f:24:52:f0:d3:75:1f:34:d0:
03:95:9f:9c:a5:5d:c0:6d:0e:5d:a0:be:d0:80:bd:bd:f5:67:
7d:e9:5a:6f:48:f4:f0:25:41:dc:a4:15:de:4a:67:8f:55:d9:
3f:04:f3:93:d1:73:b7:d4:43:25:d1:1a:89:26:53:4d:4f:60:
1e:8a:b9:68:cc:2d:f4:ea:e8:ac:5e:22:f4:c2:1b:95:78:7d:
be:f4:ad:59:c3:17:8d:54:ac:a3:17:ed:1d:d5:b5:ca:98:0f:
b2:e5:a9:cb:4a:bd:24:e9:2e:9f:f0:f7:49:4b:27:34:52:fc:
85:39:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:26:17 2025 by rpki-client