Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.mft
File: I1IxmK43wCBh9Fxnna8-M3woVXM.mft (raw, json)
Hash identifier: aIe5NDDOxslyOYy56O0CQuP4iBioemc3DGCt6Tnd6sI=
Subject key identifier: 53:CC:3C:2C:DE:F1:A9:6F:01:73:C4:72:AB:D2:67:D8:30:BA:BC:A8
Authority key identifier: 23:52:31:98:AE:37:C0:20:61:F4:5C:67:9D:AF:3E:33:7C:28:55:73
Certificate issuer: /CN=23523198ae37c02061f45c679daf3e337c285573
Certificate serial: 018DAB5A404EE70878B2C47224D31AB18E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1IxmK43wCBh9Fxnna8-M3woVXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.mft
Manifest number: 0870
Signing time: Thu 15 Feb 2024 06:00:35 +0000
Manifest this update: Thu 15 Feb 2024 06:00:35 +0000
Manifest next update: Fri 16 Feb 2024 06:00:35 +0000
Files and hashes: 1: I1IxmK43wCBh9Fxnna8-M3woVXM.crl (hash: cBq2ZtlNn01vieHxS+O+HUDv624a0YVD5pB+TBIhvhg=)
2: p2RneU6waIH_3t5QzxBTUgroQaQ.roa (hash: a4EIh6bQ54f9MIPH/W868pF3KErS2QLPaviy5UWwHKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:5a:40:4e:e7:08:78:b2:c4:72:24:d3:1a:b1:8e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23523198ae37c02061f45c679daf3e337c285573
Validity
Not Before: Feb 15 06:00:35 2024 GMT
Not After : Feb 16 06:00:35 2024 GMT
Subject: CN=53cc3c2cdef1a96f0173c472abd267d830babca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:46:43:3e:e7:75:7d:1c:97:2c:28:5e:ef:
13:a7:ea:61:4e:94:59:5c:31:65:a3:61:76:c7:30:
fe:d4:87:d5:f8:05:1b:73:e6:a4:60:12:3c:3b:f3:
93:f7:aa:bb:6e:5a:2e:f9:6a:bb:17:e6:50:bf:d2:
28:d6:5c:b6:ff:75:7c:90:d0:71:1d:5d:a7:bb:09:
f9:3e:4c:aa:d1:6c:34:26:94:01:46:fc:66:6a:41:
35:25:18:35:f6:a1:b9:af:5d:f8:f8:1d:5d:48:69:
eb:9a:a5:29:f3:dd:64:7e:15:58:f3:b1:0f:c6:a7:
68:c3:0b:bf:25:b0:8e:66:43:8b:8d:7a:9c:49:de:
78:f1:ed:0e:84:ae:9c:9b:ec:bf:b1:27:76:14:8a:
49:81:73:da:dc:bd:22:48:72:82:8b:79:2a:e4:e1:
e0:d1:f3:70:2f:98:65:01:56:15:30:e0:96:57:ec:
f4:24:75:be:49:0b:d5:43:54:2f:e5:1c:fe:a4:23:
10:40:50:95:f2:d0:af:81:0b:bb:86:73:62:8d:51:
bf:7b:50:78:48:79:31:11:51:5e:03:d8:bd:f7:27:
1b:a5:f8:d6:b1:34:4b:3e:74:e8:05:2f:34:d7:c7:
9e:72:7c:f6:73:2a:92:98:3f:85:b0:31:ab:cd:34:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CC:3C:2C:DE:F1:A9:6F:01:73:C4:72:AB:D2:67:D8:30:BA:BC:A8
X509v3 Authority Key Identifier:
keyid:23:52:31:98:AE:37:C0:20:61:F4:5C:67:9D:AF:3E:33:7C:28:55:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1IxmK43wCBh9Fxnna8-M3woVXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c2:63:22:b8:98:58:e4:9a:3e:6b:1e:96:da:51:49:70:47:
a8:f1:51:e1:b7:95:a6:fa:16:db:21:38:19:1f:d0:42:c6:e9:
f9:a9:cd:2c:1a:fe:db:0a:4e:c4:e0:1f:74:bc:3e:72:d3:27:
2b:01:03:b8:0f:ed:e2:3d:fc:99:1e:df:af:b3:a6:c1:be:0d:
11:3a:ee:28:6e:a7:b1:56:d6:6d:7c:46:16:f0:40:bb:1e:b4:
96:68:cb:4b:9a:30:e7:d5:c2:2f:7e:c9:ae:ae:f4:5a:69:71:
c2:3e:cf:14:5e:55:77:2d:87:fa:5e:d9:6c:05:2f:ef:9f:f6:
7d:dd:e7:08:6e:88:ec:1e:ec:9d:30:e9:f1:17:0e:1d:5b:75:
50:f7:a4:1a:91:e6:f8:d6:b3:4e:f1:ce:0b:36:7a:81:c3:cc:
11:62:05:f5:af:27:3d:c1:83:59:67:f4:e6:7d:48:67:06:ab:
fa:e4:14:a5:46:3a:59:c3:ad:bd:ba:b8:20:ec:d9:bf:1e:8c:
49:55:2e:07:40:4d:8f:f0:d6:b9:ff:9c:2b:f7:8f:40:b3:7e:
49:77:08:37:d9:e3:6a:b7:fa:87:df:3b:39:21:08:0b:46:e9:
b4:f0:4c:7d:b4:6d:0b:e2:79:be:0b:19:46:8e:20:19:53:cb:
95:01:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:15 2025 by rpki-client