Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f4c1fe-fd43-4281-a03a-b10e68987d9f/1/ikHzezRogV7uot3nqDqLpPy6OCY.mft
File: ikHzezRogV7uot3nqDqLpPy6OCY.mft (raw, json)
Hash identifier: f6xBvKRdRTPK1jWB0FbSxybV5hZXe62rS3EJR+hk040=
Subject key identifier: E1:16:9F:EB:14:42:F1:FC:D5:F6:8E:94:86:BE:75:D2:7F:55:90:92
Authority key identifier: 8A:41:F3:7B:34:68:81:5E:EE:A2:DD:E7:A8:3A:8B:A4:FC:BA:38:26
Certificate issuer: /CN=8a41f37b3468815eeea2dde7a83a8ba4fcba3826
Certificate serial: 01850B7058FFB3C67DC017B7F2340D51E985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikHzezRogV7uot3nqDqLpPy6OCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f4c1fe-fd43-4281-a03a-b10e68987d9f/1/ikHzezRogV7uot3nqDqLpPy6OCY.mft
Manifest number: 0BC2
Signing time: Tue 13 Dec 2022 12:23:10 +0000
Manifest this update: Tue 13 Dec 2022 12:23:10 +0000
Manifest next update: Wed 14 Dec 2022 12:23:10 +0000
Files and hashes: 1: 3VMyOWeEi9oxIUyWEb7zbRnPYnw.roa (hash: S7msWm/IXgbZNk0P2Zia432IGxezqzQT4hRg1bha0ps=)
2: ikHzezRogV7uot3nqDqLpPy6OCY.crl (hash: UToxuHXpF3hzuL9vj33KYPp7M7M7DLWcol9nM5J2D4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:70:58:ff:b3:c6:7d:c0:17:b7:f2:34:0d:51:e9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a41f37b3468815eeea2dde7a83a8ba4fcba3826
Validity
Not Before: Dec 13 12:23:10 2022 GMT
Not After : Dec 14 12:23:10 2022 GMT
Subject: CN=e1169feb1442f1fcd5f68e9486be75d27f559092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:d8:e5:f8:94:ac:d7:5e:fe:6a:e6:6b:f4:
35:56:5a:00:51:74:9c:c2:54:94:8f:65:99:9a:67:
0d:91:0f:68:18:91:d4:55:20:6e:da:12:51:dc:a4:
63:d3:5d:98:96:42:45:41:f4:28:a3:6f:16:a2:5d:
6d:32:15:3e:b1:a8:2a:8f:7a:c5:7f:dd:2c:79:88:
d1:50:4e:a7:48:54:01:0b:c6:0b:62:13:9f:a7:c0:
12:11:2b:d2:1c:30:ca:eb:71:0e:3c:1e:a9:ef:94:
74:05:0c:13:86:bc:6d:69:c4:ba:68:99:3b:4d:05:
14:09:a7:58:a9:44:f1:f2:2a:ff:3c:5c:a4:73:81:
ea:d9:c0:72:0e:57:56:65:a3:73:8b:ff:df:ef:7a:
1c:6c:3c:95:90:56:8e:12:3d:4d:c9:0c:c2:62:50:
8d:f5:71:e2:40:fb:67:c6:97:fa:71:f6:20:91:3f:
cd:04:27:dd:e1:42:41:72:e5:21:5d:66:74:4b:e9:
8d:0f:6a:10:dc:30:99:46:21:ae:93:ba:1e:0b:86:
ba:c5:2c:80:a0:c6:3d:d9:12:ac:26:c4:6a:da:02:
c6:2e:59:73:70:58:57:e3:eb:8f:3a:dd:04:f1:31:
e2:a9:b3:3c:1c:a9:26:31:e0:a2:85:bd:b6:5f:39:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:16:9F:EB:14:42:F1:FC:D5:F6:8E:94:86:BE:75:D2:7F:55:90:92
X509v3 Authority Key Identifier:
keyid:8A:41:F3:7B:34:68:81:5E:EE:A2:DD:E7:A8:3A:8B:A4:FC:BA:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikHzezRogV7uot3nqDqLpPy6OCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f4c1fe-fd43-4281-a03a-b10e68987d9f/1/ikHzezRogV7uot3nqDqLpPy6OCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f4c1fe-fd43-4281-a03a-b10e68987d9f/1/ikHzezRogV7uot3nqDqLpPy6OCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:60:e6:ba:25:7a:55:88:2c:06:4f:af:58:2d:4d:9d:f8:6d:
db:83:0a:50:ad:1c:87:22:3f:c3:71:05:36:ec:f9:37:b0:08:
f2:d3:cb:bf:90:84:b5:be:f5:68:20:bf:65:6e:cb:2b:fb:f3:
78:2e:4b:53:8d:54:23:ec:ff:a8:fb:31:2c:5b:b6:33:30:54:
15:60:3f:4e:1f:d9:9d:8f:da:81:fb:ea:1e:12:43:72:27:3c:
e0:70:38:a2:04:72:05:c6:5e:24:7f:14:be:a0:08:2d:d7:e0:
78:42:09:1e:5d:cd:8f:b9:9c:9f:b4:71:e7:56:a1:da:cd:02:
39:9c:52:21:44:1d:6f:14:fe:9a:e5:9f:93:af:a1:60:ae:8d:
0d:be:77:91:b1:3c:82:32:cb:65:ac:8a:75:fe:d5:7c:ac:99:
f8:99:83:1e:d5:9a:12:0b:14:ce:45:5d:89:74:e3:d2:92:f3:
2a:be:d5:4b:e2:b7:f1:96:7f:1e:8d:b4:83:fc:fe:72:96:28:
93:c3:03:af:e5:46:5c:06:e2:45:09:5e:60:63:0c:a7:8e:f5:
88:b2:e7:23:d9:4e:aa:fa:6d:8e:a4:9d:a9:4a:38:c2:63:39:
af:84:c4:76:3a:60:17:bf:36:25:30:52:e0:f5:3b:d7:1d:0f:
7c:c9:9e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:30 2025 by rpki-client