Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: x0wYTAi1GV3lma19Egi/95HGvH1rpYqcemkWdh1G7KE=
Subject key identifier: 1C:18:A4:F4:8F:83:56:55:A2:44:73:A7:AE:E5:94:DA:5C:FD:7B:31
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 0194BBCE875C3CD0062B2CB7C5C49BE365A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 0220
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (hash: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: c1yWFNT8Rydq3V7BHu2xavN4/SVTCMpzHm9DbcUtI7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:87:5c:3c:d0:06:2b:2c:b7:c5:c4:9b:e3:65:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=1c18a4f48f835655a24473a7aee594da5cfd7b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:70:97:8d:5e:20:20:16:b9:5b:20:00:76:
17:87:88:7b:4d:c0:12:63:67:86:7c:5b:85:19:7b:
ae:5a:26:ad:c6:a1:98:bc:71:91:8e:bf:75:52:fb:
96:5f:35:29:6d:1a:d2:40:a7:8d:42:a8:e6:43:89:
8a:41:f9:39:78:fd:3e:b7:3a:87:9a:9c:18:78:75:
31:f0:6c:cc:44:6a:b4:97:d1:ba:54:54:0b:25:e0:
30:5b:fd:23:4c:62:a9:4a:e7:20:06:30:29:33:ef:
4d:f9:e7:17:44:5a:9c:2c:99:2a:7b:03:33:39:96:
a1:9c:8f:c1:84:76:3e:37:ee:9d:5b:7d:01:86:a2:
28:eb:51:d4:12:68:e9:de:01:81:cc:09:bc:e3:55:
b6:c8:ef:24:b6:4c:4e:23:28:ac:ac:4a:31:ac:7c:
96:e8:40:e4:9c:d9:ee:c3:47:c7:6c:c0:e6:9a:20:
5b:ba:d9:6f:50:26:01:fa:39:73:d3:52:8e:c5:bc:
27:8f:15:6c:1e:91:59:14:ac:41:01:91:a4:dd:8f:
ed:50:eb:ba:b5:9a:38:96:0e:64:9c:55:2d:53:ca:
54:0a:93:0d:61:9e:b6:d2:b9:89:0c:7d:cf:df:d6:
a0:ef:e3:fc:79:91:3e:3a:56:13:3a:38:75:93:01:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:18:A4:F4:8F:83:56:55:A2:44:73:A7:AE:E5:94:DA:5C:FD:7B:31
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fd:b0:17:76:9c:3e:8a:52:3b:f3:d0:7f:be:de:19:6d:48:
e1:6a:2b:c3:1b:05:e2:90:07:b0:d1:e2:c5:dc:41:87:81:89:
a6:83:2b:ec:6e:8e:e7:b8:2f:47:da:6f:ec:37:7a:48:a1:d2:
43:c3:18:82:f4:5a:ad:fc:8d:78:fb:6e:ec:59:b7:7d:96:49:
3b:a9:5f:c4:c1:49:0b:09:03:c1:e0:ea:a5:50:d2:fb:c5:36:
44:46:bb:e4:05:b3:30:44:99:7a:e8:a4:55:99:ad:a7:2f:66:
5c:1e:69:99:e9:40:0c:b7:46:33:8a:cb:76:7e:8b:f1:b3:09:
6d:8f:7a:1f:6f:7f:e8:09:4d:6e:1d:c9:43:19:87:bc:a9:dd:
94:74:5c:14:e2:2b:cb:f8:dc:6f:c0:a5:46:ac:cd:45:8d:4e:
8b:2b:61:d1:9c:68:d0:85:f2:70:52:1a:f3:c5:3f:51:09:ec:
d8:fd:50:ec:14:b1:0e:59:fd:ba:10:c9:3c:fd:5a:2b:0e:6d:
90:95:7c:36:55:83:e0:58:b4:53:b3:61:f6:8a:87:47:1d:5f:
39:77:78:f5:e0:71:fe:03:d6:be:81:aa:49:54:f1:bc:84:73:
46:9d:b5:ad:f2:8f:e5:d2:6f:ff:75:fb:8a:e0:ad:f8:f6:a5:
bf:5b:24:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zodcPNAGKyy3xcSb42WoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhM2YyN2M5M2VmYjdiYmMwYjBhZmU4ZWNjMjRmNzAzOWQy
NzUxMDgwHhcNMjUwMTMxMTAwMTAxWhcNMjUwMjAxMTAwMTAxWjAzMTEwLwYDVQQD
EygxYzE4YTRmNDhmODM1NjU1YTI0NDczYTdhZWU1OTRkYTVjZmQ3YjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRFwl41eICAWuVsgAHYXh4h7TcAS
Y2eGfFuFGXuuWiatxqGYvHGRjr91UvuWXzUpbRrSQKeNQqjmQ4mKQfk5eP0+tzqH
mpwYeHUx8GzMRGq0l9G6VFQLJeAwW/0jTGKpSucgBjApM+9N+ecXRFqcLJkqewMz
OZahnI/BhHY+N+6dW30BhqIo61HUEmjp3gGBzAm841W2yO8ktkxOIyisrEoxrHyW
6EDknNnuw0fHbMDmmiBbutlvUCYB+jlz01KOxbwnjxVsHpFZFKxBAZGk3Y/tUOu6
tZo4lg5knFUtU8pUCpMNYZ620rmJDH3P39ag7+P8eZE+OlYTOjh1kwHbiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwYpPSPg1ZVokRzp67llNpc/XsxMB8GA1UdIwQY
MBaAFIo/J8k++3u8Cwr+jswk9wOdJ1EIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzct
ZWJmODM0ZmU5YTE1LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzctZWJmODM0ZmU5YTE1
LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/2wF3ac
PopSO/PQf77eGW1I4WorwxsF4pAHsNHixdxBh4GJpoMr7G6O57gvR9pv7Dd6SKHS
Q8MYgvRarfyNePtu7Fm3fZZJO6lfxMFJCwkDweDqpVDS+8U2REa75AWzMESZeuik
VZmtpy9mXB5pmelADLdGM4rLdn6L8bMJbY96H29/6AlNbh3JQxmHvKndlHRcFOIr
y/jcb8ClRqzNRY1Oiyth0Zxo0IXycFIa88U/UQns2P1Q7BSxDln9uhDJPP1aKw5t
kJV8NlWD4Fi0U7Nh9oqHRx1fOXd49eBx/gPWvoGqSVTxvIRzRp21rfKP5dJv/3X7
iuCt+Palv1skvA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:21 2025 by rpki-client