Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier: SsKOCYh1EUqMByukZjCJ17pNPryAM4jHsEqj98fR+7M=
Subject key identifier: D3:52:56:69:B2:C0:95:3B:E6:7D:9C:D4:1F:6D:40:EE:2C:AE:00:F0
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial: 0194BCE0A3C5798F05AB571D283A13798732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number: 0BAE
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 2ryoTZBN5F3OiNCuF51I0QKaurE.roa (hash: Osws3/zgkZy8Uyd/0g/4WCaZXYz7WNin28TFS0n+qzE=)
2: 9bZMaVRDUPty_7efLT2YpkpIYcM.roa (hash: CtsPPucmvohErAHToYEeV/HheWSPpHxQEHc0Z1mOfCU=)
3: AtctRtEqNWKPB5rlQKlPqC6yWDs.roa (hash: 05XetyyHEDIPnW6uLoBtl5Z9uPB/DAO88wvWzPJ/MPs=)
4: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: 3SgfKRqIVSc0pjy5rdHQ9KGGA9tDWf0IOT6T8e4hfGg=)
5: PSBx1Ap1dSVwu4S3zItuhXFXT84.roa (hash: BJW2moxRlz3fWDKj7aaF6fzBur3RzPQUthWd7EvMjfQ=)
6: Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa (hash: zQenlhAbszJDRqh2xIFTp2RhN0nwTs4w2oT1T/Kp9dM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:c5:79:8f:05:ab:57:1d:28:3a:13:79:87:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=d3525669b2c0953be67d9cd41f6d40ee2cae00f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:8b:9a:7a:13:a8:46:1e:bc:78:16:69:a5:
64:53:85:fa:15:0c:f6:ac:a8:27:67:2b:46:54:b1:
19:a6:6f:ba:23:28:52:c2:08:61:cf:e9:9f:45:a1:
b9:e2:6e:2a:3e:a8:08:c0:d4:a8:84:45:a5:08:54:
85:e4:08:33:1f:e4:6c:89:f6:b2:21:1e:0e:8f:ec:
5d:72:ff:15:f8:88:f4:68:9c:69:af:ee:2d:dd:4c:
52:69:24:14:04:00:7e:2a:72:7e:41:bb:1b:7b:b9:
bc:a4:8a:4b:76:f5:2b:a7:ed:32:e5:7b:b1:1a:c4:
49:1a:db:16:c7:72:4d:d5:14:71:6d:2d:25:61:1f:
32:ff:21:54:4a:eb:18:63:97:19:25:b5:c9:35:a8:
c5:4b:74:54:ac:ba:a0:3b:4e:d3:a9:a9:fd:85:9d:
e7:e9:1c:58:11:52:d7:4d:f8:13:47:bd:2a:18:5d:
82:c6:46:3f:e1:20:1f:92:a9:90:8e:b6:f3:9b:73:
f2:c5:dc:df:9b:e9:3d:00:cd:0e:5a:7a:34:6a:b7:
1f:09:d4:0f:d8:e5:ae:5c:1e:5c:cd:22:b6:24:a3:
27:73:17:61:e8:de:78:fc:46:94:72:bf:ea:9d:71:
e9:05:7c:4f:d6:19:31:48:1c:bb:05:4a:eb:39:77:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:52:56:69:B2:C0:95:3B:E6:7D:9C:D4:1F:6D:40:EE:2C:AE:00:F0
X509v3 Authority Key Identifier:
keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:81:3b:70:07:f1:cb:e6:4b:62:e2:dc:08:3a:e8:0e:69:23:
4e:c8:29:15:9e:d4:3a:ec:62:14:5b:50:c7:be:34:69:20:5f:
14:1d:d6:b2:56:e3:66:0d:85:c3:b0:02:37:ec:67:c3:50:b5:
6a:4e:69:1f:01:e4:1e:3f:0e:86:8e:bc:b9:93:6f:ff:11:e3:
df:b3:18:91:eb:6d:1e:65:ae:15:e4:e1:6f:11:a5:c0:0c:c4:
9d:fe:73:a4:89:f6:0a:d3:6a:71:b5:29:6e:23:d3:a8:bd:89:
d0:66:00:18:c4:4f:b9:f8:16:9c:3c:04:1d:78:dd:b9:20:3f:
2f:fb:97:9f:ed:1d:f5:4b:ec:bb:b5:d1:01:87:56:46:10:14:
6b:0d:24:0d:d5:2a:2e:a5:5c:b8:23:cb:75:0b:eb:d1:f8:24:
42:b3:c9:ce:27:4b:7c:eb:44:66:53:82:66:c7:5d:8d:a7:e4:
ec:d1:fc:fb:2f:ac:66:29:cc:f2:30:a9:69:a9:7b:68:f5:76:
1e:fa:4b:e0:12:bc:cf:92:f3:2c:f5:e5:6f:15:26:8b:11:9d:
cf:7e:16:c3:53:6f:1d:3b:35:ed:66:5d:ed:e5:1d:1e:89:2a:
25:b2:91:0a:3a:3e:8b:27:d2:93:2c:00:ea:51:0d:5f:9d:46:
65:74:ff:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KPFeY8Fq1cdKDoTeYcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj
YzMxOWQwHhcNMjUwMTMxMTUwMDI2WhcNMjUwMjAxMTUwMDI2WjAzMTEwLwYDVQQD
EyhkMzUyNTY2OWIyYzA5NTNiZTY3ZDljZDQxZjZkNDBlZTJjYWUwMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxteLmnoTqEYevHgWaaVkU4X6FQz2
rKgnZytGVLEZpm+6IyhSwghhz+mfRaG54m4qPqgIwNSohEWlCFSF5AgzH+Rsifay
IR4Oj+xdcv8V+Ij0aJxpr+4t3UxSaSQUBAB+KnJ+Qbsbe7m8pIpLdvUrp+0y5Xux
GsRJGtsWx3JN1RRxbS0lYR8y/yFUSusYY5cZJbXJNajFS3RUrLqgO07Tqan9hZ3n
6RxYEVLXTfgTR70qGF2CxkY/4SAfkqmQjrbzm3Pyxdzfm+k9AM0OWno0arcfCdQP
2OWuXB5czSK2JKMncxdh6N54/EaUcr/qnXHpBXxP1hkxSBy7BUrrOXf74QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNSVmmywJU75n2c1B9tQO4srgDwMB8GA1UdIwQY
MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt
ZmI0MGQ2ZGEyNDY4LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4
LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4E7cAfx
y+ZLYuLcCDroDmkjTsgpFZ7UOuxiFFtQx740aSBfFB3WslbjZg2Fw7ACN+xnw1C1
ak5pHwHkHj8Oho68uZNv/xHj37MYkettHmWuFeThbxGlwAzEnf5zpIn2CtNqcbUp
biPTqL2J0GYAGMRPufgWnDwEHXjduSA/L/uXn+0d9Uvsu7XRAYdWRhAUaw0kDdUq
LqVcuCPLdQvr0fgkQrPJzidLfOtEZlOCZsddjafk7NH8+y+sZinM8jCpaal7aPV2
HvpL4BK8z5LzLPXlbxUmixGdz34Ww1NvHTs17WZd7eUdHokqJbKRCjo+iyfSkywA
6lENX51GZXT/yw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:29 2025 by rpki-client