Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
File: imcGszlg4dFf0XcKKY4KVVpBqAk.mft (raw, json)
Hash identifier: /aJyyPd+V0no3T1/CPc9ta6lN0E2ca5CnAIkGMn/O84=
Subject key identifier: 82:44:49:DA:86:91:4B:AF:BD:0C:37:C0:65:38:CA:59:B8:06:4E:8F
Authority key identifier: 8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
Certificate issuer: /CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Certificate serial: 019349065CD45E2D034D9F3D3ABBF4C906C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
Manifest number: 136B
Signing time: Wed 20 Nov 2024 10:02:53 +0000
Manifest this update: Wed 20 Nov 2024 10:02:53 +0000
Manifest next update: Thu 21 Nov 2024 10:02:53 +0000
Files and hashes: 1: bAttX97RzMOQ1qZ4HNmPUlpQfng.roa (hash: YLRYjqt74FnjIduetj4BOJ/FB85gxZ+gkeFk/pa5oN0=)
2: imcGszlg4dFf0XcKKY4KVVpBqAk.crl (hash: pcZ+JHXd0sQVB0szolqilT1ondNNDfI1B+EAc6FTe54=)
3: wzni65xEvs8kN0nfJW4ufeW5IzY.roa (hash: Px/XjVWCTyQqtwE/6XTDh7kpdoG4oYdOrz9Fyz3Z/ns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:06:5c:d4:5e:2d:03:4d:9f:3d:3a:bb:f4:c9:06:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Validity
Not Before: Nov 20 10:02:53 2024 GMT
Not After : Nov 21 10:02:53 2024 GMT
Subject: CN=824449da86914bafbd0c37c06538ca59b8064e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:3b:6f:e3:b1:5c:16:51:06:6b:f2:c4:f3:
8e:21:cf:c3:39:78:f6:6f:5d:ae:83:2e:78:4d:8e:
59:df:17:c9:4c:69:5d:03:02:69:60:7b:e8:6d:26:
e1:6d:2e:e4:11:27:d9:be:5b:2d:5e:3d:39:6a:3d:
0f:aa:f8:23:6f:c7:85:af:0f:f5:e9:68:5f:54:f1:
94:b5:30:a7:a1:19:35:03:b0:5c:f6:cf:61:aa:4c:
44:bc:41:3b:e8:be:ce:73:94:08:73:8e:98:85:b2:
c8:24:54:8f:c7:34:a8:e3:10:a0:04:b7:1a:00:40:
31:9a:df:78:c5:d6:74:27:30:dd:38:06:ff:33:f2:
63:cf:d1:cc:ca:61:0f:92:36:06:84:b5:a0:be:eb:
e4:e6:a2:8f:58:9f:31:e1:87:a6:eb:08:f0:22:21:
85:f8:7a:ab:e0:c3:3a:c6:34:ad:38:88:b0:75:c3:
69:53:33:94:fd:ce:29:f7:ea:55:74:55:66:d4:4f:
07:b9:6e:55:6b:d8:1d:fa:69:34:c4:fd:e6:31:f5:
1e:10:b3:f3:4c:32:1d:e8:e9:04:96:0b:ce:2e:d1:
65:b2:b0:bb:d8:42:fb:ce:7d:a2:19:fc:c1:c4:45:
72:67:74:7f:5e:38:25:d7:32:98:ea:bb:fd:6c:6d:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:44:49:DA:86:91:4B:AF:BD:0C:37:C0:65:38:CA:59:B8:06:4E:8F
X509v3 Authority Key Identifier:
keyid:8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7f:43:74:26:b2:20:a0:ce:6d:df:c1:1c:fd:da:9d:96:c5:
69:5a:1c:86:e9:57:bb:3e:bd:9f:67:ef:7b:83:9a:68:1d:89:
5e:31:35:5c:24:e3:f6:f0:20:27:c8:52:87:c3:1f:be:1d:4d:
7f:71:34:f4:63:91:74:e3:66:94:07:ed:1c:1a:fa:49:d6:70:
fa:b7:43:3b:13:72:40:7e:02:e4:06:9e:f7:2f:0b:de:89:8b:
df:e0:85:74:57:15:f1:84:7e:b3:bf:5d:77:3d:00:4c:bb:eb:
97:4d:0e:c9:d9:2b:98:87:5e:51:1e:e3:b2:29:38:92:79:73:
a9:96:e8:60:d1:95:79:36:a3:f3:1b:71:84:01:6e:3d:bd:a7:
d5:ad:e5:43:f3:f2:94:af:4c:ff:50:17:a6:e2:74:f9:aa:32:
da:c3:dd:7f:9f:aa:9f:3a:33:dc:63:b2:ad:a5:25:6c:9e:1c:
10:c0:09:10:cc:ae:86:da:7c:41:f8:79:ea:e0:bb:4b:ce:fb:
bd:ab:e0:35:11:58:26:3e:c3:2a:84:43:c5:14:b8:97:f3:35:
93:6a:49:c1:90:c4:8b:1a:f0:d9:9b:13:7f:4d:f5:a3:48:ed:
2c:c4:20:e9:60:3c:d1:52:4f:a6:29:5b:88:59:e4:7e:88:f4:
80:43:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:54:10 2025 by rpki-client