Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
File: 1ikBDNsLMSwy4Hqvm3INc9O806s.mft (raw, json)
Hash identifier: EPmMLybkiaqU1mxXMAelrplHHuMuUAqrzUO+YaAHJvI=
Subject key identifier: 9A:4E:57:74:B3:0B:60:42:9E:29:F5:F8:85:9C:86:3B:B4:05:04:BD
Authority key identifier: D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
Certificate issuer: /CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Certificate serial: 0196B47DA70C00BAC568A95C405DE2FCA3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 10:00:55 +0000
Manifest this update: Fri 09 May 2025 10:00:55 +0000
Manifest next update: Sat 10 May 2025 10:00:55 +0000
Files and hashes: 1: 1ikBDNsLMSwy4Hqvm3INc9O806s.crl (hash: Fcfk1uqVq4ZX8ZvbsgvN7ZWQmAViu4lcL8BPz4rbWqk=)
2: 24_KLR4ZTxixXjMFlfIhygqGc5A.roa (hash: moxDA+OQx2vpPS9xIam1x12sDttHtdnUlxnInWiXYBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:a7:0c:00:ba:c5:68:a9:5c:40:5d:e2:fc:a3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Validity
Not Before: May 9 10:00:55 2025 GMT
Not After : May 10 10:00:55 2025 GMT
Subject: CN=9a4e5774b30b60429e29f5f8859c863bb40504bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:8a:1b:35:16:6a:c5:df:4c:d8:30:f5:55:
2c:c1:f4:15:dc:c7:04:a8:5b:87:8c:fe:31:c7:89:
b8:f4:ef:82:a6:72:bb:50:46:f3:e5:19:b4:d6:4c:
a5:e0:75:9d:1f:cd:ce:48:2b:b0:9e:82:2f:36:cb:
d7:ac:39:e9:96:3a:74:2d:ea:ce:62:2d:b6:08:33:
b9:fe:c6:6c:a5:f4:51:13:28:a2:2f:4b:d9:c5:17:
39:b5:83:17:4b:12:00:a6:a4:de:91:a1:b2:0c:26:
18:7f:26:fa:0d:44:f8:bd:e3:9a:24:12:2a:8d:8e:
da:da:48:f9:6c:2f:f7:c6:f0:1d:ea:60:39:74:66:
53:6f:ac:5f:36:f7:44:5a:ba:bc:30:28:06:7e:26:
f4:11:02:c2:5c:1e:98:fc:a0:27:bb:9f:f9:0a:13:
e2:5e:e7:60:5c:46:c3:c7:8f:b3:20:0b:58:6f:20:
2f:bb:67:b8:81:9a:da:f6:c4:1c:75:47:db:24:b4:
ba:3e:3d:d8:56:17:f8:70:79:f0:07:82:cf:5a:1d:
2f:20:21:69:c5:3a:e4:d0:5e:b5:86:eb:21:9b:1b:
6e:2e:36:73:f1:fd:1a:48:36:2e:4d:78:60:07:80:
58:3a:32:e0:85:2b:fc:40:fe:99:aa:19:84:a7:d3:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4E:57:74:B3:0B:60:42:9E:29:F5:F8:85:9C:86:3B:B4:05:04:BD
X509v3 Authority Key Identifier:
keyid:D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:df:a9:b0:91:d2:ec:8f:50:c0:c0:86:c5:b9:b8:f0:f0:48:
ec:91:fc:19:ed:fd:47:f1:48:45:c0:36:5a:8c:57:42:4e:e4:
f6:af:18:0b:f2:65:ba:c1:b8:9f:ab:3f:6f:38:9e:b4:c1:35:
5a:ac:8f:1f:6e:de:be:0f:07:71:2c:d8:df:3b:1b:f9:a9:4a:
af:c7:3b:50:46:24:01:b6:92:c0:55:3c:bb:99:77:d7:a0:45:
29:76:d8:3d:82:3a:92:6a:f0:ed:44:7a:a8:04:28:c8:c6:22:
e1:bc:f8:9e:b4:3f:8a:36:c3:1e:93:b9:ef:13:68:07:e0:33:
ec:18:8d:95:61:bc:81:f3:1e:2c:53:63:cd:ac:65:ba:fb:97:
7b:7c:46:44:03:77:37:ff:57:29:cb:79:f7:cd:00:d1:31:cc:
9e:ed:d1:3e:9a:83:07:c6:ff:d9:de:e3:f8:75:5c:6e:f4:29:
9c:e0:6b:f6:ca:d6:29:37:dd:9f:54:ea:85:f8:94:bb:3d:2e:
5a:1e:25:a1:53:18:3b:41:ab:5d:18:ab:bc:ae:9b:4b:12:01:
45:19:17:ab:66:e2:69:d0:f4:56:da:49:79:80:45:3f:18:c0:
be:cb:73:54:56:ab:07:9b:cb:4c:5a:44:3c:fe:29:d7:bb:cf:
d5:e7:a0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:28:19 2025 by rpki-client