Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
File: IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft (raw, json)
Hash identifier: bP/VzHYJD1G49DKiWl9uCC9MfTbsQubAmVUQGDs7+z8=
Subject key identifier: EB:93:03:C1:AA:71:30:25:91:FB:9A:F1:2B:F9:A0:47:7E:9E:8B:9F
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 0195DFD8EA03E8ABF325FCB87773A4000312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 03:01:29 +0000
Manifest this update: Sat 29 Mar 2025 03:01:29 +0000
Manifest next update: Sun 30 Mar 2025 03:01:29 +0000
Files and hashes: 1: IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl (hash: 0hoPWfPPv9u1msZ5iqM7S56kr4LsOH9wUd6cG6IQpfY=)
2: mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa (hash: wA7gawHVSiIwq+RZjpXudHmsZpXyv8YQLjD76SZRvpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:ea:03:e8:ab:f3:25:fc:b8:77:73:a4:00:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Mar 29 03:01:29 2025 GMT
Not After : Mar 30 03:01:29 2025 GMT
Subject: CN=eb9303c1aa71302591fb9af12bf9a0477e9e8b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:87:ba:b0:1e:54:a4:69:b6:9a:3b:de:0d:
e6:24:ff:44:46:f8:10:35:14:65:92:74:e7:b1:4c:
bc:89:73:71:ee:6b:da:42:da:cb:0c:c1:bb:d4:6c:
a4:f3:60:1d:92:2b:2f:15:73:f6:c4:7a:82:b4:bd:
6b:df:80:fb:7f:38:14:10:82:d5:37:16:d2:dc:b5:
e8:29:5e:86:e2:14:44:d4:af:9b:3b:44:69:07:94:
bd:cd:0f:39:47:b9:2a:99:81:42:24:ab:4b:39:eb:
df:81:3d:f7:0d:02:ef:ff:41:b5:15:54:47:15:fd:
ad:52:16:ac:08:9c:97:da:b0:77:de:26:b8:24:34:
a4:28:91:07:79:4b:65:00:5f:ba:65:4f:11:5c:78:
8c:ef:34:6e:d2:f3:0b:d5:83:91:7a:65:5e:66:1a:
c3:a8:3a:ed:1f:71:35:f6:dc:11:4a:30:8c:85:a2:
ef:1a:fc:c0:b3:93:03:6d:11:d0:e7:ad:f5:00:7b:
48:c2:f4:f7:a6:6e:19:d1:51:b2:bf:68:a1:2d:d3:
fb:25:fa:2d:09:dd:2d:07:1e:c5:fc:b6:c2:2a:67:
8c:68:be:fb:01:87:4e:3b:e4:09:da:a7:47:59:62:
47:2e:9d:21:3e:0f:c5:6b:30:44:06:1c:52:12:91:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:93:03:C1:AA:71:30:25:91:FB:9A:F1:2B:F9:A0:47:7E:9E:8B:9F
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:44:2c:1a:a8:f1:d5:2f:18:05:d3:6a:ac:e3:4f:e5:30:93:
96:75:a6:e6:77:0a:0e:e7:bc:b3:21:58:b8:9f:dd:6c:7c:12:
c0:2f:15:fe:a7:8f:d8:16:3a:c3:14:c1:0b:85:d9:3f:eb:88:
00:b9:93:bf:12:2f:d4:f0:cd:29:41:95:e4:c6:6a:02:d6:4a:
77:02:15:aa:12:4f:da:a5:0b:65:2d:f0:8d:35:81:db:a4:97:
8b:41:af:06:6c:5c:2e:f5:90:af:8f:af:3b:f1:16:e7:07:07:
86:d2:76:ea:36:ea:0e:72:2e:3f:c7:97:f3:b9:3d:6a:a2:06:
78:43:ac:d9:45:e7:2c:22:28:d1:a3:02:8a:4b:e2:b7:75:22:
57:62:28:bb:40:98:fa:57:1c:8d:a9:d5:14:bc:64:72:c4:46:
46:cf:79:d9:c0:0b:0c:16:ed:e4:c9:80:10:cb:be:ce:74:e1:
1a:66:7e:92:f1:14:98:a9:ef:74:ef:a9:e4:65:1e:27:e1:21:
79:b0:7f:6a:35:b7:5a:9c:82:9b:ca:07:14:0b:c3:18:9d:f2:
43:65:79:6c:78:78:66:32:e3:6e:02:fa:e2:9d:45:e2:66:49:
cf:09:9c:4f:c1:90:a5:db:f3:22:55:e4:5e:78:4c:27:82:95:
5e:6c:77:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2OoD6KvzJfy4d3OkAAMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOTg4NWVhMDIwZTY1MDA2MzE0ZWU5NDgwZGVmM2IzZWZj
MDM5ZTMwHhcNMjUwMzI5MDMwMTI5WhcNMjUwMzMwMDMwMTI5WjAzMTEwLwYDVQQD
EyhlYjkzMDNjMWFhNzEzMDI1OTFmYjlhZjEyYmY5YTA0NzdlOWU4YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmKHurAeVKRptpo73g3mJP9ERvgQ
NRRlknTnsUy8iXNx7mvaQtrLDMG71Gyk82AdkisvFXP2xHqCtL1r34D7fzgUEILV
NxbS3LXoKV6G4hRE1K+bO0RpB5S9zQ85R7kqmYFCJKtLOevfgT33DQLv/0G1FVRH
Ff2tUhasCJyX2rB33ia4JDSkKJEHeUtlAF+6ZU8RXHiM7zRu0vML1YORemVeZhrD
qDrtH3E19twRSjCMhaLvGvzAs5MDbRHQ5631AHtIwvT3pm4Z0VGyv2ihLdP7Jfot
Cd0tBx7F/LbCKmeMaL77AYdOO+QJ2qdHWWJHLp0hPg/FazBEBhxSEpFQxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuTA8GqcTAlkfua8Sv5oEd+noufMB8GA1UdIwQY
MBaAFCGYheoCDmUAYxTulIDe87PvwDnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZTA0YWMtYTE5MC00ODA0LTkxM2Mt
ZmZjMDI1ODMxZjRmLzEvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mZTA0YWMtYTE5MC00ODA0LTkxM2MtZmZjMDI1ODMxZjRm
LzEvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUQsGqjx
1S8YBdNqrONP5TCTlnWm5ncKDue8syFYuJ/dbHwSwC8V/qeP2BY6wxTBC4XZP+uI
ALmTvxIv1PDNKUGV5MZqAtZKdwIVqhJP2qULZS3wjTWB26SXi0GvBmxcLvWQr4+v
O/EW5wcHhtJ26jbqDnIuP8eX87k9aqIGeEOs2UXnLCIo0aMCikvit3UiV2Iou0CY
+lccjanVFLxkcsRGRs952cALDBbt5MmAEMu+znThGmZ+kvEUmKnvdO+p5GUeJ+Eh
ebB/ajW3WpyCm8oHFAvDGJ3yQ2V5bHh4ZjLjbgL64p1F4mZJzwmcT8GQpdvzIlXk
XnhMJ4KVXmx37A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:20 2025 by rpki-client