Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: 4lGxrZhRPG0D/bc2DICDd4lJJ7DoCgq6xhNHKF+PHIQ=
Subject key identifier: 2B:58:24:AB:49:99:6C:47:90:C4:63:F3:B0:D4:43:55:D0:4E:CA:C7
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0195E15A14CBF48C5E1638EC187DCEACA405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0B2F
Signing time: Sat 29 Mar 2025 10:02:11 +0000
Manifest this update: Sat 29 Mar 2025 10:02:11 +0000
Manifest next update: Sun 30 Mar 2025 10:02:11 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: 0WCb16grJQKRDgUwc05efgLriptlDmb7/3P7GCxloUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:14:cb:f4:8c:5e:16:38:ec:18:7d:ce:ac:a4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Mar 29 10:02:11 2025 GMT
Not After : Mar 30 10:02:11 2025 GMT
Subject: CN=2b5824ab49996c4790c463f3b0d44355d04ecac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:af:02:f0:31:70:d4:60:c9:2c:f8:bc:ea:
d4:5e:e5:f7:57:15:02:b3:42:68:01:f6:41:9c:ff:
29:e6:a2:e1:38:96:91:4a:4e:e5:1d:c2:71:18:32:
8d:89:0e:6c:c7:de:1d:d9:2c:86:c3:5b:0e:8b:d2:
88:0b:c8:59:b2:96:18:a1:d2:50:21:f9:2b:95:13:
45:52:89:20:2f:26:56:10:67:47:0b:8f:2f:3e:01:
c3:53:85:83:92:a2:73:82:22:76:5e:53:b5:6e:be:
d6:61:76:6f:2e:32:3d:e7:0c:90:d7:dd:01:e2:ab:
3d:b5:18:8c:e5:5e:ad:97:e5:c2:fd:10:85:af:43:
4c:68:6f:18:71:1e:7c:5b:c4:c9:5c:1f:b5:31:65:
14:7d:fa:fa:52:86:4d:f4:28:00:92:09:30:1c:05:
c9:9e:a4:eb:2c:f0:a9:7a:38:b9:44:e9:ec:f9:11:
83:e5:c6:f0:4b:6f:ee:65:e3:eb:1b:db:73:40:d8:
1f:9a:18:d7:19:5a:ee:8c:bf:a1:e4:36:6f:ed:80:
27:40:df:e0:85:0e:95:3b:9a:6b:81:ec:d7:e4:e8:
26:20:64:40:1e:3d:03:30:5d:7c:e1:f4:68:02:68:
23:f7:0d:5b:89:0a:9f:e0:16:5b:4f:80:f8:50:23:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:24:AB:49:99:6C:47:90:C4:63:F3:B0:D4:43:55:D0:4E:CA:C7
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:68:1f:63:7f:97:c8:fd:48:ec:dd:1f:6a:6b:39:1c:5b:a6:
c8:7c:80:12:29:ab:6b:7e:69:b2:a5:39:0d:ec:0a:75:c8:88:
43:1d:80:ec:48:06:75:07:ba:fc:9d:6e:36:ee:f2:b3:e4:6d:
da:1e:39:00:4c:f1:3d:c5:ed:bc:4d:ba:b7:c6:10:60:24:2a:
99:aa:b0:94:fa:1d:67:48:23:83:30:26:79:5c:1b:64:c7:6a:
0f:7c:68:8b:dc:28:3a:57:a9:8c:40:7e:a2:6f:cd:3a:d9:34:
bf:ee:dd:57:26:3f:e1:93:b6:af:56:e9:c2:e9:ea:22:3c:a7:
0b:7f:04:11:b1:c5:0c:8b:77:1c:d1:49:5c:96:d8:97:aa:0b:
49:2f:2a:d4:73:52:3a:a4:62:0f:90:fc:2c:26:42:1e:c4:b4:
86:24:4c:47:87:fb:99:8f:44:b2:19:f0:1b:c2:21:b5:07:6d:
06:48:a5:60:84:04:f1:79:a6:00:7c:83:bd:ea:26:92:a2:e2:
c5:0b:4c:ba:48:b2:fb:15:7a:41:9a:aa:55:03:3f:ad:38:b8:
a9:18:eb:0f:ce:04:34:22:c8:5d:07:cf:f8:52:47:16:28:23:
d2:46:1a:f2:ab:6e:23:5c:73:b0:39:26:f6:52:0d:da:eb:06:
40:f0:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:13:05 2025 by rpki-client