Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: qWdZ4AHKBRIWcR01GauTpxRyiBpskKNaZSRZBFpUbzY=
Subject key identifier: 16:F4:BD:6A:07:5D:87:63:0F:A2:75:F9:CA:E8:E7:20:FB:54:57:57
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 0194BC04A122426FE59AAE6182B47E08AF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 1386
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: Jn22Fo+3eOrTxojcQTOtaHv4OQgsdTouiED6InYCErI=)
2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a1:22:42:6f:e5:9a:ae:61:82:b4:7e:08:af:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=16f4bd6a075d87630fa275f9cae8e720fb545757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e4:f3:18:b7:5c:3d:81:23:80:5c:0e:28:57:
1a:93:90:e2:8e:52:a9:68:d0:74:84:82:02:ad:15:
d9:96:a3:3d:80:9a:f2:f7:84:19:c8:86:f7:d1:c0:
d7:4c:12:70:ae:0f:e5:fc:60:4d:66:88:04:78:06:
74:2f:6d:9a:3a:0a:c1:68:1f:9b:34:91:59:92:61:
7b:21:62:3a:19:23:68:d3:cd:9e:25:b6:d3:77:eb:
2e:ec:e6:ea:f2:f0:90:01:88:fe:63:05:f8:b2:8c:
ea:c2:22:ea:58:36:76:f7:76:65:29:0c:0a:5e:c0:
22:e0:22:51:d8:78:fe:b0:d3:c4:ca:1f:63:c7:2b:
9a:ae:0f:dd:72:eb:ba:9d:24:de:4b:41:82:4f:78:
75:d0:ae:f5:32:d2:63:0f:7a:af:65:ca:87:5e:fc:
09:1f:50:02:77:d5:9e:55:0c:6a:28:2b:d7:30:c0:
43:d4:8c:ec:c6:e5:20:c9:26:d0:40:9f:ba:d9:ca:
9a:e0:b0:89:f6:31:45:42:0e:2c:6a:01:bd:2d:a5:
43:14:f6:36:6a:50:0d:6b:21:fc:b5:41:a7:61:f6:
45:43:46:51:b9:4a:02:83:af:37:ad:41:9b:43:f7:
a8:80:a5:62:37:9c:1e:19:79:2f:f5:26:33:b4:3a:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:BD:6A:07:5D:87:63:0F:A2:75:F9:CA:E8:E7:20:FB:54:57:57
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:29:b7:45:e5:01:82:30:c2:1c:51:55:ec:bc:c7:c9:e7:ee:
f3:5c:f5:fc:c4:29:7b:4b:8d:94:6e:91:6d:76:34:6e:11:e0:
59:92:ed:67:b3:9a:8b:e6:00:94:c5:c1:5d:49:e9:0e:1a:f6:
36:35:57:70:75:a6:7b:1a:be:9b:0f:92:59:e6:d1:e6:8c:eb:
0f:b5:ba:ef:fd:36:f0:b2:b8:61:46:ff:ba:d6:29:6f:ea:4c:
2e:2b:80:10:7a:e0:e3:df:a8:1b:0b:8d:99:7b:9a:cb:73:53:
ce:25:2a:0d:a5:20:be:3f:98:9b:8e:b0:55:f6:a4:bd:8d:c5:
f0:4a:e0:88:82:de:55:73:b3:b2:1a:81:6d:0d:c8:52:ca:1e:
77:10:75:40:65:5e:40:e2:18:d9:8e:38:a4:ac:1d:75:05:d1:
d2:81:5e:85:16:09:c1:6e:a5:f5:6b:63:cc:77:bd:93:47:a4:
aa:ef:ac:5d:36:0f:b0:2b:eb:42:07:67:ec:f7:54:72:a6:a4:
82:73:da:58:36:7c:0d:a8:4f:5d:a6:60:69:4d:42:7d:8c:d8:
b5:d8:52:04:65:b4:4e:26:64:11:98:aa:4f:ca:89:c3:0d:50:
75:96:e7:c2:5e:2e:bc:4c:23:71:47:12:90:f6:77:53:42:b6:
c4:ec:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:17 2025 by rpki-client