Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File: IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier: qEZNI5eTMv+FphGW1fWJWuep+gQRXtBmkNZuSsgheA4=
Subject key identifier: 86:8B:A6:96:BC:DE:91:2B:98:C9:4F:1D:A7:76:B2:10:61:81:17:7D
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 0194BD4E98214E6E6D30D9D2B11F7E790651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: CMn2soeES3hR-sK_8HvrSujpCpQ.roa (hash: VTuRr4KfXEripqS9AelciewMmdMPiSyij0Vs8ogbZ90=)
2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: 3PtUH4tBEHR1kzBiMHM5nSKoFU6BnvJJYqCRmb0Qr/I=)
3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
4: Z_2-Zbi4vsdnVpg2d_lnWwbhvN4.roa (hash: 8GDUJ7ZhRwTXBlYLdtF6LAMc571ge2c8D8UbSUf3lg0=)
5: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
6: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:98:21:4e:6e:6d:30:d9:d2:b1:1f:7e:79:06:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=868ba696bcde912b98c94f1da776b2106181177d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:d4:0b:62:b9:9e:09:3f:b2:28:c3:95:c1:
4e:ef:50:72:c1:d5:d1:00:e3:29:a6:41:a7:14:97:
d4:2e:68:f6:2d:83:9f:fa:80:7e:85:f9:ce:7f:25:
62:63:9c:2f:cd:3d:2b:ba:10:47:82:5f:e5:89:31:
ea:a6:1a:27:8b:b9:47:82:e8:a1:3b:15:d2:ef:bd:
2c:ae:9f:3f:3d:2d:91:87:74:4a:dc:dc:a0:32:ee:
ec:d6:03:37:59:dd:05:7d:67:97:9f:4c:a9:c3:f6:
e3:02:5e:ac:1e:d8:e5:bd:80:b9:13:f5:dd:48:49:
a0:86:e8:a2:a9:16:05:c1:5d:46:8c:fa:a9:42:2d:
9e:02:01:b0:04:37:de:26:53:da:8c:ad:14:f0:08:
71:6b:9b:60:4c:13:63:cc:69:16:b6:35:17:9b:27:
2b:7e:a2:0a:72:2c:5b:e8:82:c6:dd:8d:9c:b3:4e:
1e:cf:2d:53:7b:82:8f:ad:ff:62:e7:b7:3f:fd:5a:
b9:1d:08:86:ef:7b:f6:94:1a:d7:79:82:4a:81:13:
b8:94:62:44:3c:ec:c5:e4:71:49:37:e9:56:f7:3e:
cb:28:b8:9d:35:e0:31:9d:76:94:dc:0c:c3:cc:af:
cd:55:19:f1:fa:83:7a:00:cc:bd:e9:a8:b8:77:55:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:A6:96:BC:DE:91:2B:98:C9:4F:1D:A7:76:B2:10:61:81:17:7D
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f3:60:ac:f9:3e:33:53:a7:a9:e8:db:79:14:40:ec:38:30:
a3:92:dc:1c:f2:2e:c9:02:13:32:a5:6c:9f:4e:49:d1:98:44:
00:ef:f3:9b:83:0c:6d:99:4c:81:c6:4f:13:25:60:df:6e:c0:
72:12:47:93:d2:18:ff:b4:17:91:fd:fb:39:6f:b7:85:83:46:
7d:f2:e1:db:53:be:9f:00:70:0e:17:25:d1:9d:79:6a:65:7a:
c8:2c:8c:79:e0:41:b0:7f:09:e8:cb:1e:a5:a4:bb:1d:bd:d9:
4e:80:8b:b9:7d:48:16:08:50:17:be:83:0d:bf:4a:c4:16:e3:
54:48:f7:1f:55:47:fa:6a:bd:31:ce:e5:4a:cd:a6:d4:3b:52:
c3:a0:b3:6a:1e:de:99:4b:b9:58:56:80:dc:66:52:18:55:b9:
65:89:e4:8b:1d:21:84:0d:72:cd:5a:c9:0a:8c:c6:72:f7:1a:
7f:56:61:42:1b:7c:36:94:2b:59:bc:49:6a:fc:ae:d6:31:cd:
1b:73:1c:ef:83:4d:57:28:53:24:09:f7:c1:28:70:25:6e:92:
59:90:c3:a5:4d:30:a5:92:ba:77:33:eb:ff:7e:f0:d3:52:71:
cd:9a:49:13:39:be:bd:85:bb:a9:d2:a3:64:b6:a6:54:41:e2:
4f:11:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:53 2025 by rpki-client