Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
File: hIkfjbCMEQ2bW160xalXnkEzyBY.mft (raw, json)
Hash identifier: xqcvCK+d5Sp0SpxkU/4vU/3vg6ir+TJxZNJzvebTQqo=
Subject key identifier: 1E:BD:EB:62:67:BA:C0:69:5E:5F:A3:AB:2D:A5:FB:34:06:75:65:A0
Authority key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Certificate issuer: /CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Certificate serial: 0195E0EB533C2CF6D55641A1FEC3F98C8B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
Manifest number: 046B
Signing time: Sat 29 Mar 2025 08:01:13 +0000
Manifest this update: Sat 29 Mar 2025 08:01:13 +0000
Manifest next update: Sun 30 Mar 2025 08:01:13 +0000
Files and hashes: 1: VhR6-WTquHS_2jnfD6TSdxmLio8.roa (hash: W0QV+vJybHz/CWW9vsyk2vI5OGmRUVH5JOXqdf8uQIU=)
2: hIkfjbCMEQ2bW160xalXnkEzyBY.crl (hash: UWtGgadUCZ7Cltf9MFuqCyYFZKI2YdkDhWih19u+Jj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:53:3c:2c:f6:d5:56:41:a1:fe:c3:f9:8c:8b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Validity
Not Before: Mar 29 08:01:13 2025 GMT
Not After : Mar 30 08:01:13 2025 GMT
Subject: CN=1ebdeb6267bac0695e5fa3ab2da5fb34067565a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:6b:9a:91:ef:7c:3b:4d:b4:cf:91:88:90:
36:13:61:fe:3a:b0:65:c4:68:2c:ee:26:35:f1:7e:
23:52:a3:bf:07:d1:56:1e:a9:63:aa:d3:af:f1:c9:
2b:57:fa:0c:0c:31:21:b1:e1:de:5b:eb:50:87:7d:
80:0c:ac:fb:80:f6:c2:ee:de:89:df:93:84:64:6f:
2d:f4:85:9c:c0:11:40:9f:a6:6c:af:bc:6a:bb:64:
3b:ae:46:3b:51:18:f5:ba:8f:a6:db:4e:16:23:69:
ee:d7:96:01:30:03:44:ee:4a:95:c1:98:18:d8:8b:
2c:12:0b:60:b4:de:38:e6:e5:17:31:16:f1:4f:e9:
ab:6e:c8:f6:66:17:e4:45:ed:85:4d:45:3e:12:41:
b4:a1:38:ac:2c:41:7e:64:26:c9:73:8e:d8:ad:d4:
e1:df:c5:e7:cb:a0:1a:9c:c1:bc:25:bf:cd:9e:28:
e1:3b:5c:09:d4:dd:f3:d7:44:08:1e:16:a7:0c:96:
f8:6b:11:81:fe:bb:80:96:e4:b1:46:47:5d:43:f8:
14:13:a7:1f:57:fd:97:8b:e1:95:ad:be:d3:16:6f:
4b:39:e1:69:f5:37:65:ba:12:98:35:08:eb:20:d0:
5f:51:a1:09:a7:cb:f0:76:a4:5c:71:3c:de:ce:05:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:EB:62:67:BA:C0:69:5E:5F:A3:AB:2D:A5:FB:34:06:75:65:A0
X509v3 Authority Key Identifier:
keyid:84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:12:0d:e0:66:0b:d2:93:25:d9:e0:ab:8a:fc:be:91:e4:82:
e1:86:ee:6e:d5:f4:fd:21:68:1a:06:4f:1c:c7:bf:2e:64:be:
89:9c:33:11:eb:3f:ec:93:cc:55:35:ef:e9:a7:29:dd:31:76:
07:d6:63:ec:04:f8:e6:69:6c:51:cc:7f:5e:ae:c8:bb:6a:33:
a0:04:f3:95:cd:ba:8b:0f:fa:2b:50:81:4d:dc:97:e6:d7:11:
01:52:22:75:5f:e9:cc:c2:be:2d:2d:9a:04:35:f2:60:98:f4:
f7:53:3d:e4:31:57:e7:d1:0e:0a:1e:13:be:b3:47:77:b6:d6:
7d:19:11:92:37:c6:6a:d7:d7:08:a6:76:cc:40:89:22:88:c3:
b2:e8:28:ee:3e:b2:92:de:5f:83:86:d7:b0:a7:6d:f7:e6:e6:
93:e2:c8:ae:34:11:3f:e8:6e:13:50:f6:5a:11:60:9f:9c:85:
19:1f:e4:06:68:f6:51:97:75:32:90:27:2e:ab:ee:a9:9f:a5:
e9:1c:0b:11:9b:dd:3f:45:85:c0:8b:61:f1:6f:56:a7:d3:a0:
48:42:ec:e3:1b:1b:d0:a1:68:fe:36:47:8b:33:87:b1:b1:c1:
b9:12:52:13:55:dc:ab:04:34:13:69:96:ee:bd:90:74:2f:7b:
18:15:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:17 2025 by rpki-client