Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: BhBQPhpbJzojoKsJnjnXlZr0dgnxobQBNVxdFN2pyF0=
Subject key identifier: 7F:DE:5A:6F:27:F6:19:A2:C4:E9:DF:28:A3:3D:2D:C5:75:4E:47:09
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0195E07D5AC14E37B765A48D66581772D292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0A3D
Signing time: Sat 29 Mar 2025 06:01:06 +0000
Manifest this update: Sat 29 Mar 2025 06:01:06 +0000
Manifest next update: Sun 30 Mar 2025 06:01:06 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: qoXglxsjhZAIWdJ1c2azLNln29gcrDBF/jUrOs8YBY0=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:5a:c1:4e:37:b7:65:a4:8d:66:58:17:72:d2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Mar 29 06:01:06 2025 GMT
Not After : Mar 30 06:01:06 2025 GMT
Subject: CN=7fde5a6f27f619a2c4e9df28a33d2dc5754e4709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:8c:d8:0d:00:d0:ad:10:80:25:5c:a4:72:
82:d1:6f:6b:53:e3:e8:43:b5:e4:42:54:18:f9:6f:
50:05:48:8b:f4:fc:67:d6:f9:f1:71:2f:43:8b:6c:
ac:71:fc:b0:ec:1e:07:2b:d0:a1:be:ae:66:3f:2d:
e8:bf:bf:07:b4:4e:e5:61:03:a9:99:38:f5:d2:84:
96:76:4f:b6:a9:b1:a8:36:9a:a1:b4:41:76:12:ab:
c9:e9:92:3f:ba:2a:eb:eb:8c:07:8f:ab:16:a7:d4:
c5:51:70:7e:db:48:08:5e:1f:00:2e:98:05:55:f0:
71:1c:78:7b:b4:c9:d4:52:3c:17:5b:f3:0f:09:32:
47:37:02:06:90:fe:a7:55:4b:f5:67:1a:99:91:4e:
ba:78:21:f7:8d:21:83:96:ce:6a:7f:9d:bf:87:8e:
e2:89:6d:1d:bc:4b:c5:1c:7c:d7:4f:c8:55:be:7b:
c7:7a:bc:a0:f9:c2:06:da:8b:3b:a9:0f:ab:ec:d8:
7e:3a:55:d4:24:d0:be:7b:87:88:84:42:71:31:f5:
aa:88:be:c5:09:02:1f:3d:81:0b:fc:90:58:64:0a:
2b:d5:50:73:4b:30:38:42:b0:8d:86:b0:af:ad:4a:
b4:c4:45:ad:94:6c:9d:9f:e9:bd:81:78:c2:2b:26:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:5A:6F:27:F6:19:A2:C4:E9:DF:28:A3:3D:2D:C5:75:4E:47:09
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:02:1e:a6:2b:47:a2:34:b0:4c:76:9f:3b:3f:93:73:14:54:
d6:d4:5b:b5:bf:e6:e0:1a:88:e4:eb:24:20:1e:f7:55:c4:a6:
9b:59:d6:36:bd:b3:47:9e:94:c6:00:3a:1c:5b:3a:ca:55:71:
c1:c5:97:15:8d:bb:0c:be:8b:ea:cb:7c:6a:18:3b:43:99:54:
92:07:8a:e0:fe:c3:a2:b4:03:e3:d9:0a:a8:95:e4:0e:49:38:
f8:58:b7:da:1a:51:2a:58:c4:33:e0:c5:2e:71:8e:c4:e2:7f:
06:a3:db:ac:d3:1d:0a:bb:27:fd:23:0a:d2:ea:c4:a5:0e:ae:
2b:a0:89:d9:71:c2:d2:be:94:75:06:e6:0d:07:c1:73:66:8f:
78:5c:60:93:3c:b8:3f:af:c5:65:8d:7b:7e:b4:93:e0:d9:c9:
98:9c:52:cf:5f:b8:04:03:af:6a:18:24:54:db:83:f4:97:65:
10:5e:6e:d5:c8:b6:6b:6a:d8:51:78:3c:1e:f0:fd:06:01:bb:
e1:95:62:36:c4:0d:1b:8c:8c:fe:77:f3:4e:da:94:4d:c4:01:
10:21:78:5f:5d:5a:8a:31:ae:e2:30:f3:7e:3a:5d:ef:37:b1:
15:6c:a4:72:6f:77:c3:11:2a:52:64:2b:42:45:13:38:50:d6:
fe:86:62:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:53 2025 by rpki-client