Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: 9VqKHfYLVNzyOXLQiNiW60JVhKdyDW3CBtaA6eT8Kq8=
Subject key identifier: 70:34:D7:06:D6:32:0E:14:6F:97:ED:85:3B:06:2F:01:56:0F:AB:03
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 0194BD85A2C7B15FD38C5192544F84CF6C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 02AD
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: TNOqXTHGNt8mjA0TGmHPGj4F2ZTJRek2LqICObHhfVc=)
2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:c7:b1:5f:d3:8c:51:92:54:4f:84:cf:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=7034d706d6320e146f97ed853b062f01560fab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:a8:2a:e1:14:a7:e0:e7:64:44:b8:b7:35:
ca:c2:e8:9d:ff:b9:3c:12:02:00:8d:c2:9f:41:09:
1d:6d:f6:52:56:75:33:db:dd:2e:29:b5:3c:6a:52:
cd:0c:86:9e:48:ae:46:40:29:86:d7:70:2c:06:f7:
89:b2:b1:cc:90:92:90:0a:2e:93:5b:4e:f2:83:36:
4e:65:43:b8:70:44:eb:a8:42:d9:11:d4:05:57:d4:
cc:b9:ed:91:7e:88:43:e6:5d:64:53:63:0d:55:b5:
e3:62:2b:d3:f7:6e:f1:73:91:db:29:64:f2:9d:c7:
59:b0:41:44:32:11:a1:ed:25:3d:a6:47:2a:03:58:
e1:85:69:79:35:27:84:ba:80:3b:d7:98:67:c0:75:
34:c0:03:01:f7:62:72:85:88:65:7f:2d:38:1b:29:
21:97:06:93:20:68:28:ed:e7:18:79:cd:a8:7b:8d:
73:14:88:2d:b3:cc:d5:88:20:ca:8c:01:f5:12:c0:
5f:1f:51:89:d5:d6:78:9b:50:8a:5e:c3:f8:7f:c5:
9f:bb:0c:ee:52:88:43:68:a6:87:b1:59:da:1a:0f:
41:75:45:45:ab:58:3d:65:ec:c4:13:58:66:a6:dd:
c7:30:56:b3:27:ce:5a:4a:87:42:9a:54:81:d7:47:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:34:D7:06:D6:32:0E:14:6F:97:ED:85:3B:06:2F:01:56:0F:AB:03
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:03:62:5f:35:79:dd:86:bf:f6:af:7c:b3:39:0d:9a:ed:a6:
05:ad:86:88:fd:80:af:b1:90:d1:0a:81:64:b1:48:76:e0:0a:
3b:9a:f2:df:e3:b3:44:6f:29:a6:a8:fa:2c:80:b9:75:5c:06:
5e:35:5c:fd:33:6e:86:34:02:7f:9b:05:a4:51:73:7d:13:43:
39:bb:1c:fd:7f:08:92:5b:e2:47:1c:6f:97:17:b1:66:bc:c5:
c9:b1:d8:86:6c:b5:1b:91:8e:30:9a:64:cb:50:ed:84:54:fe:
d0:b8:6d:b8:53:36:8a:8b:9a:e7:36:c2:4b:0a:b7:9c:1b:19:
8f:53:12:54:fa:ae:64:d4:68:6c:1c:0b:9a:45:43:22:04:46:
73:fb:8a:ea:be:42:55:42:d2:4f:82:1d:c5:6d:e0:f3:74:c2:
ba:f9:bf:a2:7a:24:2b:43:ef:4e:9d:64:e0:31:0a:2b:41:52:
67:e5:84:40:f9:99:2a:98:76:e6:73:0f:97:cc:e4:1b:53:a1:
f5:72:31:7a:dd:84:80:53:1a:39:c5:8e:54:c8:0a:12:58:36:
73:86:be:06:6f:aa:52:c2:2a:0f:3c:94:9c:3a:43:df:91:59:
cb:85:f4:4e:c7:1d:9f:7c:cc:a6:1b:9d:b1:93:57:77:8f:ca:
a9:b2:26:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haLHsV/TjFGSVE+Ez2wvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDIzZTFkNzJiMTAzMDcwYmVkNTc5YzQwNTk3ZWQyMGI4
NGMxNmUwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
Eyg3MDM0ZDcwNmQ2MzIwZTE0NmY5N2VkODUzYjA2MmYwMTU2MGZhYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3uoKuEUp+DnZES4tzXKwuid/7k8
EgIAjcKfQQkdbfZSVnUz290uKbU8alLNDIaeSK5GQCmG13AsBveJsrHMkJKQCi6T
W07ygzZOZUO4cETrqELZEdQFV9TMue2RfohD5l1kU2MNVbXjYivT927xc5HbKWTy
ncdZsEFEMhGh7SU9pkcqA1jhhWl5NSeEuoA715hnwHU0wAMB92JyhYhlfy04Gykh
lwaTIGgo7ecYec2oe41zFIgts8zViCDKjAH1EsBfH1GJ1dZ4m1CKXsP4f8Wfuwzu
UohDaKaHsVnaGg9BdUVFq1g9ZezEE1hmpt3HMFazJ85aSodCmlSB10e4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA01wbWMg4Ub5fthTsGLwFWD6sDMB8GA1UdIwQY
MBaAFItCPh1ysQMHC+1XnEBZftILhMFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5Yjgt
YjkwOWVkMjAyYjY0LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5YjgtYjkwOWVkMjAyYjY0
LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZANiXzV5
3Ya/9q98szkNmu2mBa2GiP2Ar7GQ0QqBZLFIduAKO5ry3+OzRG8ppqj6LIC5dVwG
XjVc/TNuhjQCf5sFpFFzfRNDObsc/X8IklviRxxvlxexZrzFybHYhmy1G5GOMJpk
y1DthFT+0LhtuFM2ioua5zbCSwq3nBsZj1MSVPquZNRobBwLmkVDIgRGc/uK6r5C
VULST4IdxW3g83TCuvm/onokK0PvTp1k4DEKK0FSZ+WEQPmZKph25nMPl8zkG1Oh
9XIxet2EgFMaOcWOVMgKElg2c4a+Bm+qUsIqDzyUnDpD35FZy4X0Tscdn3zMphud
sZNXd4/KqbImFw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:03 2025 by rpki-client