Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: RqGrsi0C0+KEfmvGUgKe3ypTpLfRp/tcQ9XvGVpLfE8=
Subject key identifier: 0C:03:0B:9D:90:B8:92:A0:69:A4:3D:26:7B:42:36:91:37:D7:1F:93
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 0194BCE0E683128EC39367E0D1CC809039D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 06A1
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: fKCoZQnWatBsa3oBjifp1DU8yhZfUDe7eFnaNlLL0R0=)
3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e6:83:12:8e:c3:93:67:e0:d1:cc:80:90:39:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=0c030b9d90b892a069a43d267b42369137d71f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:4a:6c:bf:c9:82:2f:17:4d:d9:98:35:fb:
8f:91:65:fe:65:32:24:3a:bf:57:4c:2c:ed:2f:eb:
76:07:fc:30:4b:9a:67:fc:8b:df:40:d6:cf:57:a3:
b6:6e:c2:15:3c:93:1a:8c:39:14:ac:63:26:fc:0b:
a1:1d:ad:f8:22:bd:ee:c3:ac:44:f0:d8:16:50:82:
97:16:f6:5b:1b:1f:3d:37:22:ee:8f:50:0c:4e:20:
c4:35:b9:c9:65:da:65:93:20:55:11:e1:0b:57:be:
71:fe:2e:80:77:bc:da:a0:7f:44:e6:cf:05:9e:86:
c7:c4:d2:4e:69:02:ae:f3:d9:55:90:74:f5:75:13:
50:02:1b:f9:90:bf:bc:e9:1b:69:0c:5a:39:0a:72:
19:89:9f:70:67:46:fa:b2:75:1c:f0:58:e6:06:c7:
0c:4b:ce:bd:72:ff:f1:2d:3d:87:3b:d2:3e:01:5b:
7b:6e:32:cc:c3:c0:43:5e:19:3b:79:37:e4:61:69:
d8:2e:1e:94:aa:34:5f:f7:4d:d2:c4:3b:a4:3e:87:
9c:72:9a:32:07:93:9c:9c:2d:3a:c4:f7:d7:4c:cb:
10:33:5d:d0:91:3b:c7:88:e3:03:1b:64:b1:14:f1:
1d:5f:ed:46:a2:d1:65:f6:dc:bf:b9:d1:ac:e6:36:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:0B:9D:90:B8:92:A0:69:A4:3D:26:7B:42:36:91:37:D7:1F:93
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:99:68:76:57:ba:cd:10:f9:fd:90:b1:e6:97:f0:4c:29:0e:
2f:48:06:9c:ad:bd:74:77:54:4d:f5:66:59:5f:19:13:2e:c7:
2f:78:e7:33:63:9d:39:77:57:38:6f:e4:c0:8d:d3:aa:93:e9:
cb:fc:8d:ed:ac:7b:08:3e:2b:61:51:ea:b8:06:69:14:a2:e9:
06:58:00:d0:62:70:a9:40:77:7e:6e:d0:71:f5:f8:e1:9b:51:
20:89:c7:f5:e5:57:29:0a:66:9c:d8:99:5d:43:f6:9c:0e:e8:
8f:79:0a:51:1e:e7:8a:76:74:8a:8f:ef:50:70:be:90:86:31:
10:2f:6f:a1:66:e3:26:e4:32:dd:16:ec:a5:22:e3:43:a3:f8:
2a:3b:8c:a6:48:38:2d:65:fb:d5:02:6c:29:03:e2:51:88:ac:
7c:b8:6b:57:5b:27:b6:f3:e3:f2:97:f8:a0:ae:21:df:5b:3d:
15:50:6d:6c:67:a6:d5:9d:5c:5d:56:c7:f7:5e:47:38:a2:14:
29:a8:4a:0b:b4:81:da:9a:a0:d6:0f:f9:fa:34:f9:18:4d:76:
0c:5c:aa:c6:f8:a8:9a:0a:a4:6e:6f:26:e4:c0:89:13:88:6d:
51:15:e8:af:8c:90:7c:dc:8a:1d:bc:0d:35:0f:cc:ef:a8:5a:
1a:b6:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:44:05 2025 by rpki-client