Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
File: IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft (raw, json)
Hash identifier: l3CCZNV1CaroDyE+UaMRygTI9RdZzUEPsR6hKvHfezY=
Subject key identifier: 22:9F:DD:94:58:E2:5B:0C:4F:2D:33:80:8C:E5:2F:0A:FC:20:B6:A6
Authority key identifier: 21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
Certificate issuer: /CN=21409e170842785e5e787c3ac27a8844bab76c11
Certificate serial: 01939078C7E51419887A5D54A41BB1F86EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
Manifest number: 138F
Signing time: Wed 04 Dec 2024 07:00:54 +0000
Manifest this update: Wed 04 Dec 2024 07:00:54 +0000
Manifest next update: Thu 05 Dec 2024 07:00:54 +0000
Files and hashes: 1: 18olfNomhFNIPfGSHcOYuQw1--M.roa (hash: HFndyP63ntrqQ6R+DdnSkdEVuCznkXxs/t6eW6PvlhI=)
2: IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl (hash: BUBSrIR24WIhkHYQN0jBdQkZOmS6YGTa1/Ms12MJ5Jg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:78:c7:e5:14:19:88:7a:5d:54:a4:1b:b1:f8:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21409e170842785e5e787c3ac27a8844bab76c11
Validity
Not Before: Dec 4 07:00:54 2024 GMT
Not After : Dec 5 07:00:54 2024 GMT
Subject: CN=229fdd9458e25b0c4f2d33808ce52f0afc20b6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:9a:16:a9:db:8b:cf:c0:97:da:7b:d5:54:
47:ad:80:95:d3:72:29:6a:be:9e:37:50:71:e0:ec:
27:42:2b:81:e2:f1:dc:da:41:e0:a2:44:b5:75:8b:
2b:af:5d:78:49:4d:11:35:dc:7e:80:e5:1f:73:6c:
c3:5f:82:9f:d3:0e:ee:a5:5d:24:6a:fb:f5:e3:a8:
ac:7d:0a:bf:94:b6:29:b3:c4:5f:7a:23:3b:34:9a:
d3:e8:19:4d:ee:e5:64:82:cd:93:f2:b6:a0:7c:52:
ef:9b:b8:a6:c8:fb:b1:10:cd:e3:87:17:09:2c:eb:
a4:cb:dc:98:d4:51:da:c7:d3:19:70:65:a0:51:2e:
24:78:ad:06:de:c8:bb:43:57:39:f0:ea:29:36:21:
1c:31:00:a5:c8:dd:86:72:d9:5f:9d:b1:4e:63:cd:
3e:3b:db:98:2d:36:54:76:b3:9d:b6:fe:71:84:79:
b9:4a:a7:0f:19:cb:98:73:f0:b5:47:d7:7e:79:30:
cc:62:27:de:71:20:9d:c2:7c:8c:19:89:98:b7:2f:
b5:4a:fb:08:38:51:94:17:e7:55:cd:fd:30:78:e0:
75:e5:ee:96:ca:08:a9:6e:9f:5a:43:f4:1f:a5:c0:
67:ee:1f:30:a8:09:8e:13:8e:69:57:54:64:fb:22:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9F:DD:94:58:E2:5B:0C:4F:2D:33:80:8C:E5:2F:0A:FC:20:B6:A6
X509v3 Authority Key Identifier:
keyid:21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:32:db:fc:f6:02:47:de:f9:d1:b1:ba:b3:ad:3d:5f:3d:84:
d3:0b:30:97:94:f1:96:b3:ee:cc:b1:f1:65:83:36:9f:d8:82:
df:5d:96:fe:fa:69:9f:04:f1:58:59:03:bb:47:3e:c3:d6:e9:
13:7a:9c:fd:35:68:4f:31:e2:f9:9f:e2:53:9c:2a:20:ed:2c:
ca:c8:5d:ab:5c:7d:00:51:c2:bc:f5:71:53:65:5b:7b:a0:67:
c6:09:88:fb:42:59:14:41:15:ed:da:55:02:00:99:39:fa:dd:
7a:22:12:42:38:18:f0:93:99:99:ff:52:b7:ba:3a:a5:69:48:
06:8c:fa:d2:8c:1b:84:f5:e3:ad:02:11:f9:71:ea:79:c2:91:
68:7b:5f:40:42:fd:55:62:62:86:8b:66:87:a8:6b:97:51:c9:
5c:f4:de:b4:68:88:77:5d:01:62:ef:40:0b:20:80:10:f8:97:
dc:ae:65:1c:1b:c2:70:32:56:ce:29:0d:e5:88:ba:16:0a:e2:
05:fd:3b:db:74:f8:8f:ce:39:7c:62:8c:b4:fe:35:b5:8d:ae:
35:3d:4f:df:b3:fb:ad:61:c0:ac:41:a4:38:b9:8e:67:30:5d:
02:2c:05:20:f9:ee:f6:d0:ee:f2:7a:c2:f0:3b:3b:2a:17:a4:
79:d6:a2:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOQeMflFBmIel1UpBux+G6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDA5ZTE3MDg0Mjc4NWU1ZTc4N2MzYWMyN2E4ODQ0YmFi
NzZjMTEwHhcNMjQxMjA0MDcwMDU0WhcNMjQxMjA1MDcwMDU0WjAzMTEwLwYDVQQD
EygyMjlmZGQ5NDU4ZTI1YjBjNGYyZDMzODA4Y2U1MmYwYWZjMjBiNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3KaFqnbi8/Al9p71VRHrYCV03Ip
ar6eN1Bx4OwnQiuB4vHc2kHgokS1dYsrr114SU0RNdx+gOUfc2zDX4Kf0w7upV0k
avv146isfQq/lLYps8RfeiM7NJrT6BlN7uVkgs2T8ragfFLvm7imyPuxEM3jhxcJ
LOuky9yY1FHax9MZcGWgUS4keK0G3si7Q1c58OopNiEcMQClyN2GctlfnbFOY80+
O9uYLTZUdrOdtv5xhHm5SqcPGcuYc/C1R9d+eTDMYifecSCdwnyMGYmYty+1SvsI
OFGUF+dVzf0weOB15e6Wygipbp9aQ/QfpcBn7h8wqAmOE45pV1Rk+yL+PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKf3ZRY4lsMTy0zgIzlLwr8ILamMB8GA1UdIwQY
MBaAFCFAnhcIQnheXnh8OsJ6iES6t2wRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVDZUZ3aENlRjVlZUh3NnducUlSTHEzYkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82YWI4ZWUtZThmNy00Zjg5LTk4ZDct
MGUxMzZiZTliZjM2LzEvSVVDZUZ3aENlRjVlZUh3NnducUlSTHEzYkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82YWI4ZWUtZThmNy00Zjg5LTk4ZDctMGUxMzZiZTliZjM2
LzEvSVVDZUZ3aENlRjVlZUh3NnducUlSTHEzYkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTLb/PYC
R9750bG6s609Xz2E0wswl5TxlrPuzLHxZYM2n9iC312W/vppnwTxWFkDu0c+w9bp
E3qc/TVoTzHi+Z/iU5wqIO0syshdq1x9AFHCvPVxU2Vbe6BnxgmI+0JZFEEV7dpV
AgCZOfrdeiISQjgY8JOZmf9St7o6pWlIBoz60owbhPXjrQIR+XHqecKRaHtfQEL9
VWJihotmh6hrl1HJXPTetGiId10BYu9ACyCAEPiX3K5lHBvCcDJWzikN5Yi6Fgri
Bf0723T4j845fGKMtP41tY2uNT1P37P7rWHArEGkOLmOZzBdAiwFIPnu9tDu8nrC
8Ds7Khekedaibw==
-----END CERTIFICATE-----
Generated at Wed May 14 02:32:15 2025 by rpki-client