Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a19618-186f-484d-ad46-42d34f31f7b7/1/iPQ6AwKMaSsVNCOBaFtCgOsXDuU.mft
File: iPQ6AwKMaSsVNCOBaFtCgOsXDuU.mft (raw, json)
Hash identifier: hVysIA7jOSG4nH3cNH+ONLs2ZBjGdans6X2pF0062SA=
Subject key identifier: E8:06:DA:CC:1A:B3:FE:75:8A:C8:27:D2:5E:7D:25:3B:84:E3:69:BF
Authority key identifier: 88:F4:3A:03:02:8C:69:2B:15:34:23:81:68:5B:42:80:EB:17:0E:E5
Certificate issuer: /CN=88f43a03028c692b15342381685b4280eb170ee5
Certificate serial: 0184A824EF1DC131D6EFB018E66E688D0019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQ6AwKMaSsVNCOBaFtCgOsXDuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a19618-186f-484d-ad46-42d34f31f7b7/1/iPQ6AwKMaSsVNCOBaFtCgOsXDuU.mft
Manifest number: 0B89
Signing time: Thu 24 Nov 2022 05:38:23 +0000
Manifest this update: Thu 24 Nov 2022 05:38:23 +0000
Manifest next update: Fri 25 Nov 2022 05:38:23 +0000
Files and hashes: 1: Vm0s8tE4k_7exEfdJ23x9qqpRO4.roa (hash: YauLOZ4D0NPrq9Hg8wU2rFlUjbJNftVcMVlSdIRh3z4=)
2: iPQ6AwKMaSsVNCOBaFtCgOsXDuU.crl (hash: X24nndC8roSRZIkZdtuQJqU+Uhp6RwdQcun9FUhYiH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:24:ef:1d:c1:31:d6:ef:b0:18:e6:6e:68:8d:00:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f43a03028c692b15342381685b4280eb170ee5
Validity
Not Before: Nov 24 05:38:23 2022 GMT
Not After : Nov 25 05:38:23 2022 GMT
Subject: CN=e806dacc1ab3fe758ac827d25e7d253b84e369bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8a:fa:80:bf:46:cb:c4:9b:9b:21:c4:5b:d5:
c8:99:0a:3f:06:22:fb:67:41:25:ea:2d:f8:f2:45:
f9:e9:82:3c:24:f9:45:d0:3b:f4:5f:2f:f2:f9:a8:
c3:5b:a4:f9:9c:71:64:cc:06:44:65:66:63:56:fb:
ae:79:ca:17:21:54:b8:f3:52:4d:18:f8:f4:d7:48:
0e:d2:52:99:6e:c9:06:2e:b2:ed:5f:e2:18:03:5c:
24:22:c8:31:85:71:61:c9:81:04:06:24:ad:98:9a:
4e:4c:8c:60:e8:f7:b4:8e:41:86:3f:20:c2:7d:cd:
5b:5f:d2:d9:35:1b:93:30:e6:f6:a3:1a:31:0e:54:
0f:e8:49:99:60:c3:92:0a:d8:b2:85:09:21:b7:13:
9e:4b:ff:d0:0e:02:a9:1b:cb:67:d0:d4:1a:12:38:
b7:c7:8c:01:1a:54:8c:6e:ad:d8:19:15:12:b2:d8:
a2:34:03:b2:77:69:22:17:53:20:5e:4a:9c:49:4f:
32:57:61:68:5e:92:cc:91:4c:c9:4e:1a:b3:23:17:
93:2a:a1:2e:98:b4:d4:f6:e1:77:3a:e9:b5:6f:91:
95:5e:52:32:c8:52:f8:50:6e:3d:35:62:92:3b:d4:
41:8b:5b:b0:c5:0c:71:30:96:bf:7e:15:6a:61:f7:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:06:DA:CC:1A:B3:FE:75:8A:C8:27:D2:5E:7D:25:3B:84:E3:69:BF
X509v3 Authority Key Identifier:
keyid:88:F4:3A:03:02:8C:69:2B:15:34:23:81:68:5B:42:80:EB:17:0E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQ6AwKMaSsVNCOBaFtCgOsXDuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a19618-186f-484d-ad46-42d34f31f7b7/1/iPQ6AwKMaSsVNCOBaFtCgOsXDuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a19618-186f-484d-ad46-42d34f31f7b7/1/iPQ6AwKMaSsVNCOBaFtCgOsXDuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d9:fb:83:a3:76:f3:e2:4c:27:a6:5b:51:ae:0b:2c:90:21:
14:b7:fa:1e:37:2c:7d:54:29:18:8e:60:e9:91:1a:5c:ce:29:
e1:cd:dc:bb:8f:46:91:ad:2b:d9:8f:fc:7f:a8:bf:39:a9:2f:
6b:8f:84:70:b8:b2:16:ab:59:24:a6:3f:a2:0f:9a:9a:9d:44:
c5:f1:74:1f:85:a3:96:a2:79:2a:c3:9c:8a:39:e1:34:0a:92:
7f:3c:39:df:2b:d9:ec:b2:3a:4e:66:c6:94:ec:e2:21:68:9f:
2b:92:bb:4c:d1:46:54:1e:0b:13:00:9b:10:dd:42:93:bc:95:
da:3d:41:b8:6d:14:ad:a1:ac:0f:b5:f8:ee:99:fa:9d:a5:cf:
a0:33:1c:8a:86:1c:d7:14:b2:25:95:b5:fd:7e:e1:4b:2e:f7:
5a:54:60:7b:8b:34:74:0a:6a:e0:62:79:e2:2b:bd:fc:98:2e:
09:21:cc:1c:d1:1a:bf:c8:27:f7:a7:60:ff:dd:98:e5:65:49:
3c:01:50:f5:8d:a1:47:4a:da:13:03:5e:60:d6:ad:45:b4:5e:
a0:3f:81:db:89:de:ff:b5:b3:3f:bf:a5:1e:1c:9d:ca:5d:e8:
94:aa:eb:bc:65:6d:84:53:a3:fe:c4:51:ec:00:26:87:1c:ec:
67:51:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:21:02 2025 by rpki-client