Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/iP87prYNOa0QX_hcJp1ibIFXZV8.mft
File: iP87prYNOa0QX_hcJp1ibIFXZV8.mft (raw, json)
Hash identifier: QGQf36va+lCqYZHi7rza+wJ/WPswCTTE4JvSpFeaOAw=
Subject key identifier: 08:9E:54:F3:BE:9B:50:B4:B5:0A:93:43:5C:C4:FA:FB:FF:8C:89:02
Authority key identifier: 88:FF:3B:A6:B6:0D:39:AD:10:5F:F8:5C:26:9D:62:6C:81:57:65:5F
Certificate issuer: /CN=88ff3ba6b60d39ad105ff85c269d626c8157655f
Certificate serial: 0192D7B82C28EBD8FCE03C760ECA67FFF2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP87prYNOa0QX_hcJp1ibIFXZV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/iP87prYNOa0QX_hcJp1ibIFXZV8.mft
Manifest number: 1128
Signing time: Tue 29 Oct 2024 10:00:24 +0000
Manifest this update: Tue 29 Oct 2024 10:00:24 +0000
Manifest next update: Wed 30 Oct 2024 10:00:24 +0000
Files and hashes: 1: UhOYA3GdVhgHP3mSeqShXm3RYfQ.roa (hash: YXz9nPmINowxLZMRazxlF6BHgCYO2CYuza2YnlyO/b4=)
2: iP87prYNOa0QX_hcJp1ibIFXZV8.crl (hash: dY/rPGCpV7oE3rCIbQytZQcfuV8/UAxfA+j9l8OD3d4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:b8:2c:28:eb:d8:fc:e0:3c:76:0e:ca:67:ff:f2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff3ba6b60d39ad105ff85c269d626c8157655f
Validity
Not Before: Oct 29 10:00:24 2024 GMT
Not After : Oct 30 10:00:24 2024 GMT
Subject: CN=089e54f3be9b50b4b50a93435cc4fafbff8c8902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:0b:aa:03:0d:ce:a0:7c:77:ad:68:e8:45:
e1:fc:e6:bc:a0:38:fc:29:b1:e1:f3:bd:c7:24:69:
b1:fa:e4:99:3c:9c:98:86:c4:fe:aa:e3:0d:1a:78:
b7:9d:cd:82:d4:a5:e8:29:45:83:85:17:c2:bc:42:
aa:9f:97:a4:d7:5f:58:1e:4d:63:5d:32:f3:44:f3:
cd:98:23:11:61:59:3a:ab:12:4b:19:f1:56:6a:cf:
a3:2b:f1:68:c3:1e:47:f1:4c:b7:c6:98:9f:f2:cb:
e8:7e:1a:0f:40:2b:46:95:af:5e:5b:c1:38:41:e8:
00:85:1f:8f:ee:87:6b:fc:13:fa:8f:a7:14:72:df:
1f:89:9c:b8:78:e9:de:15:7f:ce:f4:0a:db:a3:b6:
6d:97:8b:d1:26:0b:95:3e:eb:9e:07:e9:6c:4f:f2:
c3:75:72:70:2e:48:07:ca:fe:67:98:1f:6f:bb:40:
b2:1f:c6:28:7f:27:32:c7:36:e3:06:ef:ed:4f:86:
3a:b7:08:7b:23:df:99:29:7c:17:73:49:f1:49:c0:
6b:89:35:6b:53:13:3d:cc:24:26:e2:f1:a5:e7:ed:
a5:8c:c8:d1:d6:4a:ad:92:24:cc:32:5c:e2:ef:c9:
47:d3:89:1c:7d:d8:a8:96:4a:99:36:be:2b:a9:e9:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:54:F3:BE:9B:50:B4:B5:0A:93:43:5C:C4:FA:FB:FF:8C:89:02
X509v3 Authority Key Identifier:
keyid:88:FF:3B:A6:B6:0D:39:AD:10:5F:F8:5C:26:9D:62:6C:81:57:65:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP87prYNOa0QX_hcJp1ibIFXZV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/iP87prYNOa0QX_hcJp1ibIFXZV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/iP87prYNOa0QX_hcJp1ibIFXZV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:3f:22:26:23:90:60:c8:66:23:ce:47:0f:d7:59:ca:7b:
fb:5e:30:75:6b:ea:55:b1:0c:9a:8e:bb:f5:e2:90:ad:1f:41:
2f:a6:81:c9:35:1a:cc:b5:a6:86:6b:82:fd:70:46:0c:c9:ab:
54:10:53:43:d9:a8:c6:39:48:80:13:88:de:c0:79:60:45:8b:
6d:c8:07:2a:9b:de:dd:5d:ac:24:60:c8:c2:35:69:3e:35:b5:
26:94:8a:b2:ff:dc:36:33:0c:01:26:d4:d4:7e:46:ff:d7:ff:
a7:c3:e2:d2:2c:06:b6:1b:6c:9b:f1:c8:62:84:64:70:de:fa:
6b:6a:18:a9:8a:e9:9d:aa:9b:9a:66:9b:f4:61:fd:03:69:fd:
9c:10:b1:1b:5c:00:80:e0:3b:e8:14:8d:ce:e1:23:ad:f4:44:
e1:a2:51:6b:83:1b:6d:c8:1e:04:66:02:14:5e:fd:f6:ee:95:
06:03:bb:4e:ee:12:7f:88:ad:22:88:42:5e:0d:7c:5a:f2:33:
6c:1b:2e:ff:95:0b:21:f4:92:e6:8f:89:08:18:44:d6:df:f8:
54:10:35:04:59:c1:2d:10:a9:ba:91:a7:ac:04:38:d2:2e:fe:
0c:e7:66:19:c9:ee:5f:e9:e3:6d:15:3e:22:75:2c:fc:ce:d8:
46:73:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:29:53 2025 by rpki-client