Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: EjzE4L/BS+i00ZOGfITqc1XMK05GwT8rcBARjrDcjwk=
Subject key identifier: 76:B7:96:0F:E6:0A:77:97:73:51:72:48:F2:48:7F:C1:48:EE:0E:39
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 01962E61E877DBE23A43687CABC3EDFC5753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 0203
Signing time: Sun 13 Apr 2025 09:01:30 +0000
Manifest this update: Sun 13 Apr 2025 09:01:30 +0000
Manifest next update: Mon 14 Apr 2025 09:01:30 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: RKOtwYZe+dBX9pKJzpQYi+ck3lRjyi7GA1VYdGDBDqQ=)
2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:e8:77:db:e2:3a:43:68:7c:ab:c3:ed:fc:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Apr 13 09:01:30 2025 GMT
Not After : Apr 14 09:01:30 2025 GMT
Subject: CN=76b7960fe60a779773517248f2487fc148ee0e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:85:75:e1:9e:c2:48:9e:79:44:bc:0f:d7:
f6:21:b5:48:da:67:30:79:a1:27:43:5d:d7:d7:33:
ed:21:73:46:d9:33:cb:c9:29:e0:23:0e:d5:cc:2b:
56:6d:6e:7d:74:e6:15:fc:c5:36:44:d5:85:33:7f:
87:5c:f6:a7:74:d3:86:1b:26:92:6c:f1:22:2f:56:
55:90:53:fb:2f:99:1f:56:bb:86:27:a7:29:10:63:
21:31:f0:08:9c:5b:d5:d7:60:bc:a7:76:c9:5d:45:
6e:aa:e1:a5:64:aa:b7:6d:e4:0f:80:ac:a1:49:5b:
62:b5:04:68:c4:97:93:af:33:95:8e:a4:29:91:64:
fd:47:7c:75:9d:58:82:5a:7a:50:67:6c:fc:fe:ea:
01:18:f0:42:9b:33:4f:26:d4:ea:d6:9e:4a:b8:db:
dd:36:73:cc:ec:e5:9c:78:9a:45:c8:4e:b1:c0:e3:
fd:6e:0c:bb:39:61:fd:73:de:c9:72:49:95:95:cd:
e4:3b:f5:b8:63:d6:1d:76:58:80:b4:41:46:61:8b:
9a:63:af:37:ec:f0:69:e7:a1:1d:b4:f7:a7:20:5e:
be:b7:4a:e6:de:e1:97:67:f7:81:69:d8:3f:99:ac:
f1:95:e6:73:e8:2d:25:2a:7e:98:5c:42:b1:88:d1:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:96:0F:E6:0A:77:97:73:51:72:48:F2:48:7F:C1:48:EE:0E:39
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:39:27:e6:72:16:a5:53:c9:46:4e:3b:65:74:70:29:f9:50:
1f:5b:40:60:92:a3:7f:60:5f:08:2a:e4:0e:26:d8:18:a5:51:
5c:3a:74:96:a9:f0:14:4a:a6:b4:5e:cb:53:93:35:12:75:92:
ed:b6:80:aa:5e:b6:f6:d6:35:ad:b0:09:6b:f8:8b:47:46:78:
77:d0:ef:60:5a:34:79:04:89:87:80:0f:0b:af:6b:85:f8:fd:
4b:4c:b6:76:eb:e5:96:82:43:df:29:70:4b:f5:10:95:36:f4:
45:4e:b4:07:b0:78:d5:00:95:80:b2:42:08:77:9b:2c:d1:95:
14:e7:c8:ef:49:17:7e:6d:bd:07:23:45:14:ba:87:60:44:5e:
2a:41:1c:94:8a:7e:9d:e0:76:43:b6:53:9d:63:c1:ca:61:d7:
4d:24:f1:fb:f3:d7:48:e9:0d:c8:24:08:9b:81:43:5c:ce:75:
ec:cc:d5:c0:dd:b5:ff:7e:c4:d0:fc:17:d8:67:f5:01:1f:d8:
1f:3d:c3:f5:f6:0f:15:f3:23:03:4b:ec:cd:53:95:ab:db:09:
88:64:15:da:dc:78:f7:0a:50:f9:0f:eb:b6:b7:f9:a2:df:f8:
e2:2e:b8:fc:d4:72:61:f5:4f:53:3e:53:4e:33:d6:06:39:cb:
e9:22:9c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeh32+I6Q2h8q8Pt/FdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx
NjI3ZTAwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
Eyg3NmI3OTYwZmU2MGE3Nzk3NzM1MTcyNDhmMjQ4N2ZjMTQ4ZWUwZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs++FdeGewkieeUS8D9f2IbVI2mcw
eaEnQ13X1zPtIXNG2TPLySngIw7VzCtWbW59dOYV/MU2RNWFM3+HXPandNOGGyaS
bPEiL1ZVkFP7L5kfVruGJ6cpEGMhMfAInFvV12C8p3bJXUVuquGlZKq3beQPgKyh
SVtitQRoxJeTrzOVjqQpkWT9R3x1nViCWnpQZ2z8/uoBGPBCmzNPJtTq1p5KuNvd
NnPM7OWceJpFyE6xwOP9bgy7OWH9c97JckmVlc3kO/W4Y9YddliAtEFGYYuaY683
7PBp56EdtPenIF6+t0rm3uGXZ/eBadg/mazxleZz6C0lKn6YXEKxiNHKFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHa3lg/mCneXc1FySPJIf8FI7g45MB8GA1UdIwQY
MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt
MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk
LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjkn5nIW
pVPJRk47ZXRwKflQH1tAYJKjf2BfCCrkDibYGKVRXDp0lqnwFEqmtF7LU5M1EnWS
7baAql629tY1rbAJa/iLR0Z4d9DvYFo0eQSJh4APC69rhfj9S0y2duvlloJD3ylw
S/UQlTb0RU60B7B41QCVgLJCCHebLNGVFOfI70kXfm29ByNFFLqHYEReKkEclIp+
neB2Q7ZTnWPBymHXTSTx+/PXSOkNyCQIm4FDXM517MzVwN21/37E0PwX2Gf1AR/Y
Hz3D9fYPFfMjA0vszVOVq9sJiGQV2tx49wpQ+Q/rtrf5ot/44i64/NRyYfVPUz5T
TjPWBjnL6SKcww==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net