Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: DAO2XX9DavX+7qtbG+aks+4JIUqhIhsnphCc2yYqMc8=
Subject key identifier: 0B:9D:9C:F7:6B:6E:FC:6B:26:EE:A2:49:7B:00:4B:46:6E:9D:10:63
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 0195E07D75EB5E3D05AA819614D8639739C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 03B6
Signing time: Sat 29 Mar 2025 06:01:13 +0000
Manifest this update: Sat 29 Mar 2025 06:01:13 +0000
Manifest next update: Sun 30 Mar 2025 06:01:13 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: D7rbUY/1egEoqAmpuf1xWSeJMRGKf9m53Yr5Xc8EuGc=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:75:eb:5e:3d:05:aa:81:96:14:d8:63:97:39:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Mar 29 06:01:13 2025 GMT
Not After : Mar 30 06:01:13 2025 GMT
Subject: CN=0b9d9cf76b6efc6b26eea2497b004b466e9d1063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:12:83:96:73:ec:f1:26:51:31:5d:5e:0e:
ac:0b:b8:12:00:0b:2d:7d:4c:7c:91:35:03:10:e4:
d1:05:07:de:74:6d:fb:3a:b2:92:65:33:f8:f8:36:
be:15:57:18:d0:20:69:f1:17:62:44:03:2b:e7:48:
aa:ad:93:d8:a9:39:17:d6:b9:18:ae:b2:11:3b:7e:
8a:d8:42:5f:29:1e:63:2c:b1:62:c6:92:f8:85:08:
32:35:e4:c1:c1:44:af:0a:66:d2:7d:b4:5a:90:0d:
8e:d4:c4:8a:f6:7b:26:67:b6:2b:d8:3f:da:85:ad:
da:cf:29:c5:7f:b7:99:d7:03:e2:3c:cd:ed:5f:49:
81:d6:4a:47:97:11:d4:3a:6d:67:6f:6f:1a:00:bc:
f2:75:0e:ae:f7:ce:a3:5d:6e:a7:bd:dc:b5:3f:f8:
74:86:3e:71:c7:17:12:87:ae:c3:68:c5:28:d3:bf:
0c:96:fb:80:75:74:68:aa:bc:2a:bc:8e:f6:bc:e7:
79:72:80:36:67:1d:27:f3:32:71:bc:d5:32:c9:14:
eb:b0:d6:9b:1d:ff:91:45:3f:de:d3:86:84:62:70:
66:1d:23:67:8b:4f:2e:14:9f:c7:87:00:4c:cc:5c:
11:a3:64:64:ec:69:1c:12:59:e2:21:65:cf:f5:14:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:9C:F7:6B:6E:FC:6B:26:EE:A2:49:7B:00:4B:46:6E:9D:10:63
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:79:4f:81:cd:dd:26:5c:cd:ae:9d:2e:61:4a:5e:d4:40:66:
97:ad:ff:bc:9b:72:4d:df:80:71:bc:22:7a:18:78:30:c9:d0:
1c:3c:4d:31:c5:b9:56:c2:de:df:6a:5c:37:69:79:27:4a:bc:
4f:c4:e0:64:23:c9:b2:45:f3:a7:66:31:de:39:fc:d6:81:3d:
e0:53:c7:dd:c1:1e:16:be:02:d1:28:f0:8a:c8:13:1d:f9:06:
22:5f:b3:1d:66:3d:01:b3:e2:d7:d0:f0:bf:f9:27:6b:ec:4a:
9f:7a:5d:f8:19:2a:8b:84:c7:79:16:d3:45:9b:11:44:bf:fa:
1b:f0:a0:5c:30:de:40:e7:cd:76:c6:09:50:6f:22:ee:77:6c:
5b:f7:a8:cf:da:3e:94:84:32:44:fe:fd:aa:e1:1f:27:cf:58:
8a:20:bf:9d:15:4f:aa:ef:71:f3:72:23:d0:03:df:62:97:86:
12:47:eb:2b:83:a9:95:fa:2b:84:27:e1:af:b8:16:ea:61:40:
49:a4:3f:e5:b2:65:3d:ce:3c:29:6b:30:cd:53:a1:f8:e4:02:
cb:3f:6f:9f:fc:8f:e1:6e:09:03:6a:33:52:b4:bb:51:38:21:
5c:98:7d:c7:03:ca:f0:35:da:3c:e8:70:6f:4c:75:fd:6a:4e:
7b:f5:01:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfXXrXj0FqoGWFNhjlznEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmQyMmFmYjgwZGZhZGEyMDAzZDQwZTU0NmRhZmQzN2Zm
ODY5ZmQwHhcNMjUwMzI5MDYwMTEzWhcNMjUwMzMwMDYwMTEzWjAzMTEwLwYDVQQD
EygwYjlkOWNmNzZiNmVmYzZiMjZlZWEyNDk3YjAwNGI0NjZlOWQxMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpUSg5Zz7PEmUTFdXg6sC7gSAAst
fUx8kTUDEOTRBQfedG37OrKSZTP4+Da+FVcY0CBp8RdiRAMr50iqrZPYqTkX1rkY
rrIRO36K2EJfKR5jLLFixpL4hQgyNeTBwUSvCmbSfbRakA2O1MSK9nsmZ7Yr2D/a
ha3azynFf7eZ1wPiPM3tX0mB1kpHlxHUOm1nb28aALzydQ6u986jXW6nvdy1P/h0
hj5xxxcSh67DaMUo078MlvuAdXRoqrwqvI72vOd5coA2Zx0n8zJxvNUyyRTrsNab
Hf+RRT/e04aEYnBmHSNni08uFJ/HhwBMzFwRo2Rk7GkcElniIWXP9RQ2FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAudnPdrbvxrJu6iSXsAS0ZunRBjMB8GA1UdIwQY
MBaAFOu9Iq+4DfraIAPUDlRtr9N/+Gn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZDM1NjUtN2IwMC00ZDgxLTlhYjMt
OTE5ZWFiYTYxYjk0LzEvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83ZDM1NjUtN2IwMC00ZDgxLTlhYjMtOTE5ZWFiYTYxYjk0
LzEvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3lPgc3d
JlzNrp0uYUpe1EBml63/vJtyTd+Acbwiehh4MMnQHDxNMcW5VsLe32pcN2l5J0q8
T8TgZCPJskXzp2Yx3jn81oE94FPH3cEeFr4C0SjwisgTHfkGIl+zHWY9AbPi19Dw
v/kna+xKn3pd+Bkqi4THeRbTRZsRRL/6G/CgXDDeQOfNdsYJUG8i7ndsW/eoz9o+
lIQyRP79quEfJ89YiiC/nRVPqu9x83Ij0APfYpeGEkfrK4OplforhCfhr7gW6mFA
SaQ/5bJlPc48KWswzVOh+OQCyz9vn/yP4W4JA2ozUrS7UTghXJh9xwPK8DXaPOhw
b0x1/WpOe/UB5A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:09 2025 by rpki-client