Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft
File: IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft (raw, json)
Hash identifier: XsN4MzPiTrFU/TIlHVSvrwSzUqAgRUg2sEGjlCQepv8=
Subject key identifier: D5:C0:EC:B1:95:30:68:96:CA:87:B1:DF:79:FA:FE:CC:30:75:DD:17
Authority key identifier: 22:E2:F3:53:47:57:D9:39:08:DA:41:79:9D:C2:61:35:06:14:AE:46
Certificate issuer: /CN=22e2f3534757d93908da41799dc261350614ae46
Certificate serial: 0194AA6C9F6E5A9AB940ACB82832CABCBC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuLzU0dX2TkI2kF5ncJhNQYUrkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft
Manifest number: 04B6
Signing time: Tue 28 Jan 2025 01:00:32 +0000
Manifest this update: Tue 28 Jan 2025 01:00:32 +0000
Manifest next update: Wed 29 Jan 2025 01:00:32 +0000
Files and hashes: 1: IuLzU0dX2TkI2kF5ncJhNQYUrkY.crl (hash: hRNtO55iCnBcOENxK5h6083bZ58p1NYFD9oJc0ujHjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:aa:6c:9f:6e:5a:9a:b9:40:ac:b8:28:32:ca:bc:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e2f3534757d93908da41799dc261350614ae46
Validity
Not Before: Jan 28 01:00:32 2025 GMT
Not After : Jan 29 01:00:32 2025 GMT
Subject: CN=d5c0ecb195306896ca87b1df79fafecc3075dd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:74:3c:76:95:e9:ef:72:41:82:df:b6:76:
8d:f5:43:24:48:c4:4d:fb:b0:8c:88:f6:0f:08:3d:
be:1e:b3:f0:f2:ab:e2:97:65:3a:e8:8d:83:f0:26:
db:74:ae:28:22:d3:1c:d2:19:b4:32:85:fc:e5:c0:
55:74:8a:91:63:bd:76:c9:f2:dc:79:f3:0f:ce:ae:
4b:71:d9:02:99:fc:32:15:1d:b8:a7:c4:ba:0b:74:
a1:06:d2:46:31:fa:67:f8:64:b8:ce:76:50:ec:db:
bc:b1:ee:a9:9b:0c:24:e9:4a:aa:18:33:1c:30:07:
05:30:69:49:09:c9:36:e4:e3:c4:f2:33:31:b0:47:
7f:b5:29:29:4f:7e:a5:be:39:24:34:0f:2a:c6:c5:
77:b5:96:0a:ca:26:9a:2a:30:93:7d:60:23:57:3e:
23:09:d8:64:6f:ee:aa:1f:6b:13:b3:47:b3:8e:68:
59:c2:fd:07:6d:f1:bf:4c:d8:07:8a:94:15:01:5c:
3e:73:43:a8:80:86:78:e7:7e:c4:7c:79:75:76:31:
af:14:4d:46:45:17:5a:ea:26:83:4d:b1:b6:f7:8e:
c4:dc:41:ae:bb:34:55:08:62:90:66:ea:14:d5:18:
e6:94:d5:d6:50:8f:fc:77:a1:87:e2:10:e8:59:f4:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:EC:B1:95:30:68:96:CA:87:B1:DF:79:FA:FE:CC:30:75:DD:17
X509v3 Authority Key Identifier:
keyid:22:E2:F3:53:47:57:D9:39:08:DA:41:79:9D:C2:61:35:06:14:AE:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuLzU0dX2TkI2kF5ncJhNQYUrkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bf:28:f8:4d:73:ad:77:57:39:7d:73:11:71:7a:06:7c:d9:
01:7e:57:87:26:17:ac:13:e4:38:1e:60:57:e6:f5:2c:c1:d2:
9d:51:6b:9f:9d:90:0f:db:b7:4d:b6:9c:63:af:dd:0c:89:13:
c2:5f:18:08:62:ab:e5:2f:3a:64:52:09:dd:64:fa:4f:21:80:
6f:21:d1:a7:5a:59:89:57:96:f8:5d:80:59:5b:33:24:80:2f:
1a:56:38:1a:76:05:16:44:48:c6:5c:78:c6:d3:49:a6:ac:fc:
d3:a7:12:31:b8:06:4e:6a:0e:e6:87:21:59:93:53:7a:36:04:
92:ce:ab:0d:fe:8d:34:3f:e5:bf:4a:cd:47:bd:09:87:d4:61:
dd:74:97:84:65:b6:d5:3d:44:c8:4f:ae:fa:04:00:d6:da:0c:
a5:2b:e3:e2:91:d4:0a:58:e5:5f:0e:f4:5c:2a:ae:00:24:fa:
d9:70:9b:25:b2:2f:82:bc:3e:81:aa:f6:c8:2b:ae:27:62:dc:
03:5f:54:76:6c:28:1e:55:d3:e6:4e:d8:bb:55:cb:5b:1f:15:
0f:52:3d:a7:65:f4:cc:8e:d8:33:31:d7:da:d7:83:10:cf:17:
dc:f7:f7:75:62:a3:d7:a2:00:e2:7e:d1:43:ee:c1:a3:f2:38:
6b:34:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:49:56 2025 by rpki-client