Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/731845-6256-42f2-b6fe-ddb620d49464/1/IqNBEpshB2X5K1fMrC6mMVKOXzw.mft
File: IqNBEpshB2X5K1fMrC6mMVKOXzw.mft (raw, json)
Hash identifier: Chrd/iqsDsypRH0b5I9Atev3RE8FRCQ8n6zw//Zf8NY=
Subject key identifier: A2:24:70:21:E7:EB:72:51:27:BD:1F:E5:3B:27:52:BA:3F:53:7E:78
Authority key identifier: 22:A3:41:12:9B:21:07:65:F9:2B:57:CC:AC:2E:A6:31:52:8E:5F:3C
Certificate issuer: /CN=22a341129b210765f92b57ccac2ea631528e5f3c
Certificate serial: 0B9D5380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqNBEpshB2X5K1fMrC6mMVKOXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/731845-6256-42f2-b6fe-ddb620d49464/1/IqNBEpshB2X5K1fMrC6mMVKOXzw.mft
Manifest number: 0870
Signing time: Mon 28 Feb 2022 02:46:55 +0000
Manifest this update: Mon 28 Feb 2022 02:46:55 +0000
Manifest next update: Tue 01 Mar 2022 02:46:55 +0000
Files and hashes: 1: IqNBEpshB2X5K1fMrC6mMVKOXzw.crl (hash: KfsjZirQL/2+zbbd7UErmJ0+/3IHwS5tVitytVP2ZuE=)
2: klZlFsnUKfA-h9WTG_1UlBjkgyQ.roa (hash: Uu7YMOPa1+jlas3hEj3fGpewMY4Owm6AW2f/RE8pHVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194859904 (0xb9d5380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a341129b210765f92b57ccac2ea631528e5f3c
Validity
Not Before: Feb 28 02:46:55 2022 GMT
Not After : Mar 1 02:46:55 2022 GMT
Subject: CN=a2247021e7eb725127bd1fe53b2752ba3f537e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:16:f0:f0:d1:3f:b8:62:2b:69:42:cf:aa:
44:b8:2a:af:ef:c2:ca:e1:29:d5:fa:e7:68:33:20:
bd:ce:60:42:ba:69:3d:82:b7:ac:72:a6:e9:23:12:
32:41:b1:c6:0a:dc:e1:26:2b:38:44:df:f0:6c:90:
48:d8:bb:71:19:7d:57:dd:a3:18:76:9d:66:db:e8:
52:c8:f6:01:1b:02:ad:c2:1f:6a:8f:41:0c:98:1e:
1f:44:21:c9:bd:fd:28:ae:e9:35:24:14:9f:d5:0a:
ea:b8:3d:e1:6d:76:4a:04:cb:81:8b:96:ca:7c:af:
d9:07:23:87:36:d6:b8:71:3c:86:6a:99:f9:aa:20:
7f:c0:f0:84:6b:7b:51:9c:e1:cf:e3:76:26:78:89:
e5:ba:78:4a:b9:0c:6d:86:2a:f4:49:a7:91:08:27:
f5:37:dd:75:64:a7:59:8a:dc:3b:d8:ed:9c:9c:21:
1b:a6:c0:9d:98:ec:1c:bc:aa:c3:a7:2d:61:2f:8a:
c5:53:a5:d8:cf:e3:87:e9:03:f5:f9:b8:dc:a0:ff:
25:a6:87:3d:98:2e:00:ea:bd:cc:79:56:61:ef:34:
d0:d1:ee:7d:7b:f6:27:a8:ec:a7:46:6b:32:4b:91:
5d:a8:e3:de:2e:c0:b6:33:14:10:18:8d:0b:80:60:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:24:70:21:E7:EB:72:51:27:BD:1F:E5:3B:27:52:BA:3F:53:7E:78
X509v3 Authority Key Identifier:
keyid:22:A3:41:12:9B:21:07:65:F9:2B:57:CC:AC:2E:A6:31:52:8E:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqNBEpshB2X5K1fMrC6mMVKOXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/731845-6256-42f2-b6fe-ddb620d49464/1/IqNBEpshB2X5K1fMrC6mMVKOXzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/731845-6256-42f2-b6fe-ddb620d49464/1/IqNBEpshB2X5K1fMrC6mMVKOXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:68:97:05:ce:86:a9:41:90:8e:96:11:ee:42:fc:a3:58:79:
b0:44:30:a4:57:df:66:91:20:ce:2e:35:52:51:bb:39:fb:aa:
d0:cb:2c:f1:91:bb:7a:19:76:97:18:b7:0d:32:5b:d8:fc:45:
68:27:54:89:0f:97:c5:97:b3:76:56:dc:65:3c:44:22:d0:27:
67:aa:4c:fc:51:21:cc:3d:c1:da:78:35:2f:75:0e:de:e0:6d:
48:de:cd:97:d3:b9:2d:df:db:75:41:71:48:3d:f6:d1:a6:a0:
f3:4c:dd:b8:86:df:8d:11:4f:fc:7e:d9:49:2d:41:b3:a2:c3:
2d:ec:41:58:97:80:92:4c:08:1f:b5:4a:30:00:d8:7d:53:d6:
a6:32:63:a7:12:c6:03:46:c3:23:d4:d2:d8:0f:f4:ca:46:dd:
fd:a2:0d:bd:8e:91:82:a0:df:3e:09:eb:e3:85:8f:c5:a2:80:
64:e6:fe:35:b0:5b:53:71:f4:3a:fc:cf:ef:be:08:b6:c1:d4:
8b:67:b1:a9:15:dc:8f:92:3c:72:79:d1:d4:b4:24:8e:28:f0:
08:e1:2f:56:b4:dd:3b:4b:e1:c1:da:dc:e3:f7:19:fc:3f:57:
b1:74:a5:8b:ec:36:f3:fe:31:09:4d:3b:05:81:e0:20:be:c1:
85:62:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:53:29 2025 by rpki-client