Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: zIWtNjHMMKh6ntSaazizxa5qDK6ugjUpHJaehDF4jMw=
Subject key identifier: F6:06:2F:32:CA:54:F4:BF:FA:44:8A:69:78:1B:EA:55:C2:22:39:C5
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 0194BCE0D575BAAC026CA206EE697E177E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: p4hN5u2jwHqApHjbGDcKuS0q6lkRVLiye2PhVTJfcR0=)
3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d5:75:ba:ac:02:6c:a2:06:ee:69:7e:17:7e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=f6062f32ca54f4bffa448a69781bea55c22239c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:67:72:3d:8c:e1:24:00:2a:94:e8:09:30:
e3:13:30:10:fe:45:df:e0:da:d9:66:1e:a7:45:ef:
de:c1:aa:5b:26:4f:18:c2:04:d3:6d:91:84:2e:57:
72:85:7d:ea:b8:0d:a3:ff:80:9d:16:c5:c1:f8:35:
b4:2e:03:49:a8:2d:8a:99:c9:4d:92:68:38:34:44:
a2:2a:8e:40:17:b2:48:0f:6e:2f:24:ff:70:d8:47:
2d:a7:4a:02:bf:8e:bf:87:ea:e5:53:71:ca:d5:ca:
83:2b:00:e9:44:75:59:ca:cd:88:cd:14:c3:15:45:
d8:47:fe:0f:92:87:0e:44:64:ef:c4:4d:79:a7:ab:
66:a1:6a:53:e9:87:0f:3a:54:d9:1f:81:3c:b4:cb:
ae:3f:9d:2f:65:9f:e0:12:3f:53:d9:5b:29:48:c5:
df:c7:bd:08:14:9f:01:7a:0a:00:d5:ed:e2:7b:65:
ff:d5:95:b4:88:1c:40:f3:9f:8c:e2:02:6d:40:3f:
31:be:5b:22:a3:0a:71:5d:09:a3:30:f6:6e:75:66:
f3:2c:7f:e0:ca:2e:3e:30:75:0b:24:cc:0c:b1:50:
94:db:a8:82:00:94:1c:05:d3:ee:30:46:6c:50:e0:
2d:f1:03:9e:45:22:90:66:b4:ad:df:d0:b3:f1:de:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:06:2F:32:CA:54:F4:BF:FA:44:8A:69:78:1B:EA:55:C2:22:39:C5
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3a:61:2a:69:59:c9:91:5c:e9:92:64:99:bd:64:54:7b:0c:
e6:90:d6:98:de:59:20:47:bb:69:55:ee:c6:1d:b8:6f:2b:55:
d3:de:cf:6a:42:af:14:dd:cb:c2:8d:38:dd:06:d9:12:82:70:
4d:64:85:c8:e1:b8:cb:6e:ba:76:4a:96:e3:a6:01:32:e7:97:
02:1c:3d:e7:2e:ae:10:b6:5f:5d:ea:48:26:6f:49:6a:42:a2:
c9:71:85:28:5e:7a:ac:5b:e2:18:ba:4e:0c:73:80:45:0b:29:
37:56:f7:57:3f:71:a4:e3:50:40:6c:93:9b:14:74:a5:76:36:
43:c0:ce:cb:d6:0a:03:b3:5e:3c:51:0e:19:1a:65:15:5c:8c:
74:c2:c3:a5:4e:df:5a:94:ed:2c:ec:8d:36:fb:99:d5:69:f4:
b6:7b:a1:bc:00:3b:c4:fd:bf:2a:3e:c4:13:f7:bc:2f:df:fd:
f6:bc:50:59:42:bd:a9:b9:9e:df:6b:63:e4:25:30:a8:24:b0:
3e:af:db:4b:8c:9e:ea:52:55:8b:35:bb:61:9e:8a:b3:ec:50:
c3:e9:b8:be:72:e0:d2:c1:96:68:4e:6b:ff:16:5c:97:69:1c:
6a:b2:d5:f7:d4:84:b1:8c:bd:48:93:bc:31:b6:6a:28:a8:d5:
a4:08:0b:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NV1uqwCbKIG7ml+F34QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjUwMTMxMTUwMDM4WhcNMjUwMjAxMTUwMDM4WjAzMTEwLwYDVQQD
EyhmNjA2MmYzMmNhNTRmNGJmZmE0NDhhNjk3ODFiZWE1NWMyMjIzOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb1ncj2M4SQAKpToCTDjEzAQ/kXf
4NrZZh6nRe/ewapbJk8YwgTTbZGELldyhX3quA2j/4CdFsXB+DW0LgNJqC2KmclN
kmg4NESiKo5AF7JID24vJP9w2Ectp0oCv46/h+rlU3HK1cqDKwDpRHVZys2IzRTD
FUXYR/4PkocORGTvxE15p6tmoWpT6YcPOlTZH4E8tMuuP50vZZ/gEj9T2VspSMXf
x70IFJ8BegoA1e3ie2X/1ZW0iBxA85+M4gJtQD8xvlsiowpxXQmjMPZudWbzLH/g
yi4+MHULJMwMsVCU26iCAJQcBdPuMEZsUOAt8QOeRSKQZrSt39Cz8d4rZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYGLzLKVPS/+kSKaXgb6lXCIjnFMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzphKmlZ
yZFc6ZJkmb1kVHsM5pDWmN5ZIEe7aVXuxh24bytV097PakKvFN3Lwo043QbZEoJw
TWSFyOG4y266dkqW46YBMueXAhw95y6uELZfXepIJm9JakKiyXGFKF56rFviGLpO
DHOARQspN1b3Vz9xpONQQGyTmxR0pXY2Q8DOy9YKA7NePFEOGRplFVyMdMLDpU7f
WpTtLOyNNvuZ1Wn0tnuhvAA7xP2/Kj7EE/e8L9/99rxQWUK9qbme32tj5CUwqCSw
Pq/bS4ye6lJVizW7YZ6Ks+xQw+m4vnLg0sGWaE5r/xZcl2kcarLV99SEsYy9SJO8
MbZqKKjVpAgLIA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:32 2025 by rpki-client