Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: JPcbi/oojTuSk177v+VnUTxCF1RQVfl8/CSqPNwZJMw=
Subject key identifier: 1B:1A:38:ED:94:5B:21:DA:FD:8B:31:41:A4:5E:C2:3B:A9:98:33:8C
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 0195E159A2C6EBC4B73499AC5E22B6B462DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 10:01:42 +0000
Manifest this update: Sat 29 Mar 2025 10:01:42 +0000
Manifest next update: Sun 30 Mar 2025 10:01:42 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: G2izF23JP7P6WnZtaaSYL8Ykp0ZUsntJ5b2WIjD9xx4=)
4: xnynb6ZbVphY17eL44tNUD6FdtM.roa (hash: aGjCMZd441gHskLtab8MXJtzSfVKNikkX0711IjLPWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:a2:c6:eb:c4:b7:34:99:ac:5e:22:b6:b4:62:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Mar 29 10:01:42 2025 GMT
Not After : Mar 30 10:01:42 2025 GMT
Subject: CN=1b1a38ed945b21dafd8b3141a45ec23ba998338c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:d7:87:01:15:f2:9a:f4:f6:24:cd:b1:89:
7e:49:a1:58:e4:86:c1:a0:df:ad:ae:1a:4d:db:67:
b1:51:83:2d:59:39:cb:1a:09:80:12:db:d8:e6:73:
de:66:0d:ef:ae:f1:ba:8c:6f:98:e0:a3:8f:73:5d:
60:e2:ec:29:50:ef:7e:d4:38:ec:2e:2a:97:33:af:
f6:43:d1:82:d7:6b:29:a3:84:de:0b:99:3c:92:11:
f1:a2:1a:1e:7c:98:3b:71:19:58:67:99:1f:08:e8:
7e:81:39:f4:d0:8a:f9:9c:6c:15:58:72:97:b5:40:
ab:97:01:35:b2:86:00:20:a5:a6:4f:e6:e5:a7:eb:
43:42:a7:f2:72:f6:89:48:03:04:24:c4:63:79:dc:
27:91:0a:0a:27:f6:b6:5b:61:eb:f5:88:27:9d:ab:
db:d2:dc:b0:a8:2c:7b:d8:45:16:2e:81:05:df:55:
48:16:2c:a3:40:81:07:8d:a8:b8:dc:aa:26:9d:ee:
0a:f0:33:9b:15:c0:d5:cc:82:4b:1d:11:e0:b0:71:
3b:e2:ff:d8:53:ec:2e:0d:29:b1:53:07:3b:7f:f3:
f5:00:52:36:8b:52:a1:d6:6e:18:01:ff:08:59:3b:
db:f5:f4:9f:6c:61:57:af:04:4d:d5:30:84:8a:57:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:38:ED:94:5B:21:DA:FD:8B:31:41:A4:5E:C2:3B:A9:98:33:8C
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7e:18:dc:77:b7:93:7e:fb:ae:c0:85:91:fc:ad:c7:a4:c6:
81:a3:58:f2:13:49:9e:06:69:9b:0d:e1:3d:d8:c7:1d:11:83:
40:1b:6f:81:1c:0e:7a:31:23:fe:5c:bb:a5:e2:00:aa:38:77:
c5:4e:e4:86:3e:b8:6a:a0:c5:40:6a:3d:07:76:0c:74:7a:d3:
4d:cd:6f:50:85:c6:8b:b6:76:a8:6d:00:f4:ba:ca:ac:fb:a2:
40:b4:73:ba:97:7e:3a:58:fc:25:a4:2b:bc:03:9c:2b:75:10:
0b:a6:f7:48:9d:17:82:04:09:10:8a:b6:8b:6a:04:33:dc:ac:
de:2d:48:79:00:61:eb:dc:0e:d7:e3:0d:78:2d:52:17:03:8f:
3d:e7:af:ef:45:e5:8f:73:1b:c2:26:fb:fc:6b:08:90:94:76:
22:1a:e2:4e:a5:bb:f7:e4:5d:49:36:79:31:f3:3c:4f:4c:15:
f3:dc:f3:11:5b:9b:e4:56:ad:e5:5d:c0:a9:bb:fa:a4:2c:3d:
b3:c0:22:c0:b1:f9:2d:84:63:24:90:f3:c5:f7:9f:d3:47:f8:
a7:dc:99:9d:b3:be:8c:51:c4:04:1b:76:b7:3f:fc:72:f9:b4:
a9:ae:5c:b7:d4:fd:36:78:a2:6d:8a:fc:54:e4:1a:f5:6e:94:
95:6a:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:53:13 2025 by rpki-client