Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier: mLnQOpFPU83HO9jqoFqV4HrVQUbh6c2GTkxjkiI3WRg=
Subject key identifier: 7A:72:47:D7:1B:72:82:ED:1C:CC:65:DD:C7:A2:BB:75:6F:13:4A:0F
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 0194BCAA1CB27BCA8EAF03D10CF0D2CEFFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number: 13C0
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: ak/0LaDoZANOgL/pfGmet6vxm6WvN4fHCHGE+SS1Zk4=)
2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1c:b2:7b:ca:8e:af:03:d1:0c:f0:d2:ce:ff:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=7a7247d71b7282ed1ccc65ddc7a2bb756f134a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:37:1e:a8:6c:43:9b:18:32:e5:3e:76:be:
53:05:a3:bd:80:71:4b:94:ab:db:a1:2c:cc:d5:d5:
42:86:3e:79:f2:84:29:60:2c:41:f7:eb:d9:7c:b2:
e1:81:d9:41:8a:5c:9d:72:24:b2:17:73:ff:ff:0a:
eb:2d:12:92:0d:78:a8:6d:6c:ac:61:77:44:54:8c:
eb:fb:af:d8:1e:b5:d5:0f:b5:84:09:a6:cd:87:3d:
80:a6:e0:32:7c:5b:fe:ea:ca:8d:7e:f0:fd:82:b8:
38:4a:5c:32:a5:b2:c0:13:1f:85:1d:40:c0:10:d1:
e5:8e:d3:55:52:11:d1:78:50:95:76:d8:56:05:97:
69:a8:df:35:79:61:d0:41:a5:02:64:14:7f:09:4e:
2e:cb:51:b4:ac:cd:21:5a:0e:6c:49:ec:76:5e:9f:
c7:3b:13:74:66:e2:dc:e9:40:2d:aa:21:56:56:aa:
79:35:1b:25:ff:d0:0a:f9:ec:e6:6a:d0:5c:9d:7d:
78:83:ad:47:95:e3:3b:62:d2:76:02:03:85:79:f2:
d0:4c:90:fc:ff:3d:12:0f:9b:25:7f:9f:ed:33:54:
f3:ef:37:70:7e:bc:dd:e9:83:f3:da:c1:ff:8d:76:
ec:e3:e9:2b:5a:21:b7:5d:7b:9a:8b:e3:cc:5b:2a:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:72:47:D7:1B:72:82:ED:1C:CC:65:DD:C7:A2:BB:75:6F:13:4A:0F
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5a:70:14:ee:05:ca:8c:e9:58:bd:07:fb:93:e2:a3:af:9d:
90:9d:66:4e:fa:e4:7f:60:31:af:4d:81:99:26:16:e0:9b:9b:
0b:8e:c5:d1:6a:37:ad:64:b9:17:26:ad:9e:15:8e:1a:f4:c9:
8b:54:7c:f8:01:c7:b5:52:b7:3a:a5:ec:77:24:6d:ab:13:d6:
94:12:81:ce:ee:6a:c4:a5:d8:d4:c9:07:03:a2:f2:c1:f4:75:
7c:1f:c3:d9:8d:3b:ec:db:62:66:f9:5a:a6:87:f5:35:f1:13:
bb:77:cd:cc:5a:23:a8:ad:eb:b9:ff:ca:8e:4f:ca:1b:ca:e0:
11:85:d2:98:84:73:23:f0:f1:94:63:24:61:06:8b:fd:7c:ae:
f9:d5:82:1b:d9:24:5f:41:18:74:17:85:94:24:e9:de:5b:8c:
da:be:60:b5:89:49:39:0b:00:79:b2:94:5b:18:d7:c4:b7:a6:
6f:53:e0:23:84:23:18:86:c8:2f:b6:26:25:37:4e:28:d2:f2:
cb:6f:53:03:41:6c:60:aa:30:43:fe:2d:71:b8:79:db:dd:bc:
57:6d:11:4f:36:39:c9:c2:92:dd:fc:91:6d:73:a7:76:36:bc:
35:6f:4c:a2:97:4d:cc:14:7a:dd:a9:d6:d9:c9:04:06:e2:6a:
b1:3e:3a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qhyye8qOrwPRDPDSzv+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5
NjlkZDUwHhcNMjUwMTMxMTQwMDUyWhcNMjUwMjAxMTQwMDUyWjAzMTEwLwYDVQQD
Eyg3YTcyNDdkNzFiNzI4MmVkMWNjYzY1ZGRjN2EyYmI3NTZmMTM0YTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrw3HqhsQ5sYMuU+dr5TBaO9gHFL
lKvboSzM1dVChj558oQpYCxB9+vZfLLhgdlBilydciSyF3P//wrrLRKSDXiobWys
YXdEVIzr+6/YHrXVD7WECabNhz2ApuAyfFv+6sqNfvD9grg4SlwypbLAEx+FHUDA
ENHljtNVUhHReFCVdthWBZdpqN81eWHQQaUCZBR/CU4uy1G0rM0hWg5sSex2Xp/H
OxN0ZuLc6UAtqiFWVqp5NRsl/9AK+ezmatBcnX14g61HleM7YtJ2AgOFefLQTJD8
/z0SD5slf5/tM1Tz7zdwfrzd6YPz2sH/jXbs4+krWiG3XXuai+PMWyoGrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpyR9cbcoLtHMxl3ceiu3VvE0oPMB8GA1UdIwQY
MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt
OTFiZjYxZGQ4NTNmLzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm
LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVpwFO4F
yozpWL0H+5Pio6+dkJ1mTvrkf2Axr02BmSYW4JubC47F0Wo3rWS5FyatnhWOGvTJ
i1R8+AHHtVK3OqXsdyRtqxPWlBKBzu5qxKXY1MkHA6LywfR1fB/D2Y077NtiZvla
pof1NfETu3fNzFojqK3ruf/Kjk/KG8rgEYXSmIRzI/DxlGMkYQaL/Xyu+dWCG9kk
X0EYdBeFlCTp3luM2r5gtYlJOQsAebKUWxjXxLemb1PgI4QjGIbIL7YmJTdOKNLy
y29TA0FsYKowQ/4tcbh52928V20RTzY5ycKS3fyRbXOndja8NW9MopdNzBR63anW
2ckEBuJqsT46qA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:20 2025 by rpki-client