Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: zDP3B9toFmzYNADCZPFsSEJHCDQ79IJ/2KzO/bsD/+Y=
Subject key identifier: B7:22:3E:9E:BC:9F:04:D7:40:2C:A4:17:D0:8E:14:2D:02:36:63:48
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 0194BCAA2C25A7B877BF21EDBB4D5EDE36E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 6B
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: BPFg8AFj2AkHJwvBq6DUg0lmm95rSdMT1OvsaVZ1SpY=)
3: NI9PA3DeuJZ8C4Z38jjkQp55Z9M.roa (hash: myYnnl24PT+xu1fTWXRtQwS1Z11gqqABXPED52Nni8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:25:a7:b8:77:bf:21:ed:bb:4d:5e:de:36:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=b7223e9ebc9f04d7402ca417d08e142d02366348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:b7:78:44:cc:e3:56:2b:68:f9:03:21:65:
67:01:20:22:47:f5:10:20:74:bf:8a:5e:02:51:73:
0b:f0:a0:66:a8:6d:b9:0d:ed:e6:bc:d8:b5:07:bf:
21:90:42:31:83:c4:d2:62:93:39:24:93:c1:b2:8b:
f3:0b:ca:cb:9e:a5:e7:44:11:15:be:2a:44:1d:fc:
56:ce:73:84:7c:83:75:a5:4f:17:cb:95:5c:62:74:
22:2a:bf:68:0c:c3:1b:c7:32:b2:71:6a:88:47:4d:
05:0a:92:e6:6f:06:2f:4b:3a:78:e9:72:5a:63:ce:
d2:5c:50:a5:17:e9:a6:dd:3b:d6:2a:32:56:8c:1f:
42:5c:71:c9:2e:2f:bf:34:09:a1:a3:16:29:cb:66:
d5:5b:40:04:b6:4f:46:68:61:f8:37:06:8f:e9:da:
52:ce:46:fb:69:bb:d6:b5:17:9d:61:d0:46:d2:5d:
b2:10:7d:dc:f2:62:c5:84:7c:1d:9b:17:58:a5:84:
12:d8:d0:7e:56:eb:70:67:f4:20:ac:51:36:cd:63:
2d:fa:5e:b2:e8:30:4a:20:c7:78:42:b5:a9:c3:d5:
09:b6:bc:28:67:9c:fb:d1:64:e7:e5:2a:df:ae:60:
cc:1f:06:9f:4d:fc:2f:bb:44:55:de:a3:93:3e:ba:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:3E:9E:BC:9F:04:D7:40:2C:A4:17:D0:8E:14:2D:02:36:63:48
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fe:3f:82:2a:f9:1b:57:3a:e9:54:fb:bd:74:01:e3:6c:c7:
31:79:2b:db:79:0a:e9:70:fe:0c:0e:09:5e:ab:b4:cd:a4:56:
df:c4:50:36:c3:dc:78:1f:31:16:44:d7:06:60:a5:73:2f:f8:
66:7a:44:9d:20:75:ce:bf:94:72:fb:6f:d9:7e:14:03:60:91:
18:16:eb:0d:23:7f:a3:ca:e9:bf:a0:66:b0:6d:c0:cf:1f:67:
1a:b9:34:ef:ae:16:37:e5:ab:e5:ca:91:18:d0:be:a6:0f:63:
77:61:e1:7f:1c:ce:e4:1b:71:3b:df:27:8a:24:80:87:b6:3b:
41:ce:a8:65:62:a2:c0:73:84:22:ff:28:62:9a:38:59:8e:5c:
58:fc:19:77:81:f7:5a:4e:90:a1:65:ec:a0:20:e0:7e:b6:f1:
4c:52:08:af:07:c3:ef:68:c8:35:a5:d9:f0:12:69:19:53:30:
59:8f:10:92:f9:88:23:46:90:7d:92:06:03:4a:c5:94:aa:9d:
a5:3b:f6:1e:7f:52:65:6e:12:35:44:e4:ff:ce:ee:95:fa:6e:
a8:78:ba:80:c8:5c:28:f2:09:6d:06:0a:83:69:da:9b:7f:c8:
e2:59:a7:21:87:88:db:f2:bc:49:31:3e:e0:f9:47:d9:a8:6f:
8f:b0:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:00 2025 by rpki-client