Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
File: i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json)
Hash identifier: +ZgTVlHedufqoxMFLZjauxmkLOFFNmf+I6fgHji21wg=
Subject key identifier: B8:FA:3E:14:D1:E2:31:BF:6B:93:20:5A:8F:EC:41:CB:5C:89:45:DD
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial: 0195DFD8DCF59A0A044F2659B326936C3492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
Manifest number: 0D0E
Signing time: Sat 29 Mar 2025 03:01:26 +0000
Manifest this update: Sat 29 Mar 2025 03:01:26 +0000
Manifest next update: Sun 30 Mar 2025 03:01:26 +0000
Files and hashes: 1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=)
2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=)
3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: ewiVhX/dr1zZAxdNV6LrVKajOKdX+rkFDoVfNITyNNA=)
4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:dc:f5:9a:0a:04:4f:26:59:b3:26:93:6c:34:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Validity
Not Before: Mar 29 03:01:26 2025 GMT
Not After : Mar 30 03:01:26 2025 GMT
Subject: CN=b8fa3e14d1e231bf6b93205a8fec41cb5c8945dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:5c:34:8f:00:ce:f1:c9:db:be:21:c2:f5:
ec:87:db:d4:7a:ba:12:aa:f5:e5:0c:8e:83:4e:33:
ef:a0:8a:23:99:45:a6:e8:cb:98:07:6b:e5:dc:09:
95:45:ae:91:f1:4d:6f:e0:1f:27:48:39:4b:2c:32:
ce:f4:fe:63:7d:56:95:41:c6:3c:60:55:92:8b:3a:
26:a7:6e:19:70:ab:82:21:d5:13:6c:4a:cc:18:a0:
c2:23:64:16:bf:23:b1:2b:df:0c:9a:fe:64:c3:dc:
61:f2:5d:2b:2f:11:e4:53:ae:f1:3e:0f:65:c2:cc:
66:bb:52:56:70:4b:0b:23:85:ac:ec:7a:11:8a:ae:
7b:0f:20:8b:b2:b2:e2:7c:5c:67:16:a4:85:18:ad:
cc:c3:96:fd:69:7d:b6:dc:c5:7f:e8:22:c3:86:e2:
b4:ec:61:24:77:b6:42:c5:81:ab:3d:1e:b0:01:87:
92:dc:b4:04:98:3c:6e:b1:90:8a:45:12:7d:25:85:
fa:05:65:25:51:1c:bf:16:4d:7c:77:f1:87:b3:37:
a6:e8:dd:a1:c9:35:43:a5:6d:53:78:19:af:9d:46:
51:91:3f:0d:3b:58:b2:5f:e4:2c:58:66:27:25:e1:
a5:f3:ec:99:8c:b3:05:0e:02:0d:2b:e6:da:22:2d:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FA:3E:14:D1:E2:31:BF:6B:93:20:5A:8F:EC:41:CB:5C:89:45:DD
X509v3 Authority Key Identifier:
keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f4:0d:aa:a0:0e:6a:57:71:3f:85:97:8b:2e:6b:ea:6b:6e:
6d:81:99:44:63:9e:4a:7e:29:16:d3:ba:7d:a6:c3:38:68:77:
04:2e:8c:e4:64:46:c0:84:0a:99:f8:46:c8:86:25:3c:0f:5e:
ab:4c:69:20:08:80:f6:21:07:ac:ac:92:43:13:e9:a9:ae:a3:
b4:0f:4f:e8:8b:b6:d6:d2:ec:55:fe:c0:aa:44:e5:a3:08:9c:
20:e2:f3:90:e9:99:50:8d:d1:84:db:05:33:f2:f2:82:31:fd:
fa:de:2b:08:c1:c4:15:32:b5:05:df:aa:8d:27:39:12:ba:38:
c4:f6:30:f0:75:5d:7a:57:45:b4:13:d5:49:69:5b:ac:55:03:
fa:15:1a:b8:ec:13:32:34:95:cd:40:4b:64:dd:f2:f9:18:ef:
1b:4f:5c:5b:28:3a:27:2f:f0:72:40:72:48:d5:08:00:87:51:
1a:80:87:dc:84:4e:d6:65:10:81:40:b1:41:b3:ee:96:d9:6f:
e6:46:e8:c7:e6:3f:d1:e6:5e:0b:45:d3:81:c7:49:de:e2:91:
9f:8c:7e:cd:5d:98:cd:8a:0f:75:87:0c:e2:0c:da:23:d2:c0:
99:dd:c4:2f:09:96:9f:ef:5f:5b:98:48:ac:7c:d4:89:2d:ee:
37:03:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:27:38 2025 by rpki-client