Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: rMGQcX9170ZmyZm5VY00xlao8FDPRITGfFSulke3z2c=
Subject key identifier: 8B:35:73:F0:70:7B:EF:20:96:AA:0C:DE:78:5E:75:31:21:4D:E9:7B
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 0194BBCE2B51CF0AD34443F9ACFBB555CB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 0C04
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: TL3rdlOJ/aKfvM6tvgmmC0vimMq3c91wZDWEsYzoxCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2b:51:cf:0a:d3:44:43:f9:ac:fb:b5:55:cb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=8b3573f0707bef2096aa0cde785e7531214de97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:fb:75:e0:d5:04:07:04:90:73:ca:d0:f6:
e5:2d:10:2b:71:60:b2:74:01:5f:4f:13:1e:2f:ed:
89:79:8d:84:94:90:55:00:56:b1:e2:91:a1:65:e0:
55:94:83:cd:07:72:1b:55:c0:ef:80:7b:36:a8:2c:
78:bb:ad:fe:77:46:e0:9a:13:6b:27:4e:3e:77:f2:
7d:3e:c2:62:3a:a7:a5:3c:d6:87:4a:f1:44:2f:bb:
e1:5e:af:39:dc:5c:2b:92:f1:45:c1:32:8c:8f:5c:
f7:0d:cb:65:a2:f2:5f:5a:bc:61:28:9a:f8:b6:bb:
00:7d:8c:5d:7a:ae:11:6f:21:80:3f:4d:eb:0d:4c:
6d:bd:cc:90:f0:57:ed:84:59:32:32:aa:e9:29:56:
be:9b:58:2f:19:ec:43:72:d5:dc:f8:67:af:00:a2:
4b:ce:a8:c6:47:50:56:6f:77:83:76:b4:c6:4d:f3:
e0:64:28:17:a2:05:23:82:04:ec:b5:af:d1:07:d1:
27:7a:0d:ec:0d:85:be:c8:68:36:85:1a:1d:58:fd:
5b:4e:89:fb:d0:0b:15:23:e5:04:d6:38:c4:20:d8:
83:35:8b:8d:89:8a:6a:83:d2:5e:3d:1b:e3:c7:eb:
2a:6d:89:09:72:d5:c3:37:1a:bb:2a:05:a8:aa:0d:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:73:F0:70:7B:EF:20:96:AA:0C:DE:78:5E:75:31:21:4D:E9:7B
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:be:6d:67:f7:6f:bb:77:61:2f:f7:17:c1:93:67:8a:c2:fb:
58:3a:c3:f2:ea:86:a1:59:20:49:cc:97:ba:99:9d:08:c2:83:
11:1c:81:d8:db:a8:c3:1c:cd:36:3d:58:5a:8d:11:c1:98:d7:
fe:5b:f4:29:7b:df:0e:af:43:90:dc:da:f5:6a:6c:b1:26:dd:
51:fa:6e:cc:17:42:90:ab:03:67:de:75:91:c8:1b:37:8c:18:
02:24:9c:cb:9e:82:eb:93:c9:38:c5:e3:11:ab:71:bc:fd:fb:
d3:4f:e4:5d:c4:a1:ea:17:a6:1e:f7:0f:5a:5c:8f:56:45:40:
c3:ec:ba:b1:37:48:31:43:f9:88:a4:f0:6b:a6:a1:68:09:57:
2c:30:94:59:6f:5a:06:39:41:fa:cb:d3:d4:81:c9:6f:14:42:
c6:14:98:76:96:39:95:08:c4:b8:60:94:21:d5:55:7d:1d:ca:
e7:68:11:c5:fa:05:b0:d0:84:5e:cb:6e:c9:a9:8c:d0:ea:fa:
5b:5f:4b:8a:0a:10:a0:b7:b6:1f:89:f0:9b:ed:4a:02:ac:21:
21:b9:e4:00:8c:f4:52:ed:92:a9:8e:42:57:d6:f9:eb:5a:9b:
49:d7:3e:0d:0b:25:0c:55:6a:e9:a4:0d:3d:e1:7d:43:c0:c1:
ab:02:62:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zitRzwrTREP5rPu1VctZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWQwOGFjODYyZGI2YWUwYmIwYjg4MGFlYzA1NWVkYmNi
YjgyZmMwHhcNMjUwMTMxMTAwMDM4WhcNMjUwMjAxMTAwMDM4WjAzMTEwLwYDVQQD
Eyg4YjM1NzNmMDcwN2JlZjIwOTZhYTBjZGU3ODVlNzUzMTIxNGRlOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjD7deDVBAcEkHPK0PblLRArcWCy
dAFfTxMeL+2JeY2ElJBVAFax4pGhZeBVlIPNB3IbVcDvgHs2qCx4u63+d0bgmhNr
J04+d/J9PsJiOqelPNaHSvFEL7vhXq853FwrkvFFwTKMj1z3DctlovJfWrxhKJr4
trsAfYxdeq4RbyGAP03rDUxtvcyQ8FfthFkyMqrpKVa+m1gvGexDctXc+GevAKJL
zqjGR1BWb3eDdrTGTfPgZCgXogUjggTsta/RB9Eneg3sDYW+yGg2hRodWP1bTon7
0AsVI+UE1jjEINiDNYuNiYpqg9JePRvjx+sqbYkJctXDNxq7KgWoqg0vFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs1c/Bwe+8glqoM3nhedTEhTel7MB8GA1UdIwQY
MBaAFL+tCKyGLbauC7C4gK7AVe28u4L8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEt
MWZiM2Y4MTc2MDhmLzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEtMWZiM2Y4MTc2MDhm
LzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFr5tZ/dv
u3dhL/cXwZNnisL7WDrD8uqGoVkgScyXupmdCMKDERyB2NuowxzNNj1YWo0RwZjX
/lv0KXvfDq9DkNza9WpssSbdUfpuzBdCkKsDZ951kcgbN4wYAiScy56C65PJOMXj
EatxvP3700/kXcSh6hemHvcPWlyPVkVAw+y6sTdIMUP5iKTwa6ahaAlXLDCUWW9a
BjlB+svT1IHJbxRCxhSYdpY5lQjEuGCUIdVVfR3K52gRxfoFsNCEXstuyamM0Or6
W19LigoQoLe2H4nwm+1KAqwhIbnkAIz0Uu2SqY5CV9b561qbSdc+DQslDFVq6aQN
PeF9Q8DBqwJiLg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:31 2025 by rpki-client