
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: Sz6qBRXRjuX9I+QzO7iKZCkPx11QwSYuwcEVUxeOIFo=
Subject key identifier: 35:A0:3F:78:AB:35:15:44:8B:93:A3:5E:AE:EF:21:9F:4D:18:ED:1C
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 0194BC7328B1FFAB4CCFF8FB2FC30C908943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 1007
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=)
2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=)
3: F7_d7fgliowGPaZRFZI34xcsDus.roa (hash: +yscUhU7PFr7qP/8wMXAL6pAA3Z7ru6wJfgIp1yHZlI=)
4: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: 54szfKloy4mq+Yhl+FDEQxVWbmdAcMBVdiZu4rhFtHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:28:b1:ff:ab:4c:cf:f8:fb:2f:c3:0c:90:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=35a03f78ab3515448b93a35eaeef219f4d18ed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:32:66:f9:b0:b1:98:9e:1d:d4:b9:e2:e2:
68:74:20:61:d2:a3:04:41:bb:01:f0:87:f3:5f:05:
dd:a3:9f:21:72:80:4d:86:13:97:4e:8a:85:6d:f4:
99:c6:fe:6f:72:38:f3:bf:36:ac:cf:60:95:b9:ed:
a0:f8:69:cc:48:88:f2:35:71:ea:d4:1b:c2:95:f6:
e2:47:69:a0:47:93:22:f2:32:4e:49:80:14:3b:5e:
63:5c:51:02:ad:a5:8f:63:b9:1d:c8:58:7f:40:df:
35:9b:5d:af:ba:a8:bc:d8:4b:7e:cf:4e:ed:b2:48:
80:31:b1:23:47:c9:ab:27:23:59:ce:6a:4d:ca:f5:
d5:af:33:3e:d9:ce:0c:3f:47:ee:28:29:f8:89:68:
2e:07:7f:9c:f3:0a:95:f6:b5:d1:d6:04:2b:8f:2c:
39:8d:a5:04:9a:c1:86:07:1a:1e:c7:88:6e:62:15:
37:df:86:c1:d2:65:f8:f0:eb:c2:86:63:a5:cb:37:
d0:43:3e:e0:a0:db:bc:f9:35:58:83:e0:3a:b3:fe:
a1:fa:b5:d6:5b:da:85:34:4b:cd:2e:74:1c:aa:57:
04:0d:5f:db:62:70:08:b4:10:a6:cc:73:5e:7e:ed:
63:10:1a:f6:f8:85:c4:72:50:5a:ce:c8:29:7e:28:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:3F:78:AB:35:15:44:8B:93:A3:5E:AE:EF:21:9F:4D:18:ED:1C
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:00:25:0e:4f:66:48:2b:10:ce:34:84:5d:39:3b:01:c3:73:
7a:d4:dc:8d:25:ab:bd:8d:2c:b5:a0:10:18:a5:c9:ef:49:97:
a3:77:97:da:8e:a3:f3:79:35:92:7c:10:bc:fe:90:61:63:76:
eb:e2:8f:63:44:8b:7a:79:47:d4:c0:b9:c3:f5:22:56:3b:42:
c4:7b:8b:26:8e:fb:7a:64:6b:bc:05:2b:75:c5:4c:f8:83:d4:
9f:5b:19:ef:a6:59:f8:cf:92:c8:bc:07:91:33:1b:a5:40:96:
05:26:01:da:89:05:a0:80:a3:7b:a8:49:7f:95:cd:19:af:fa:
b1:87:8f:93:1d:dd:cb:d1:6e:97:ef:22:a9:30:c2:83:3a:61:
2f:1d:e4:ec:eb:7b:79:fe:2d:c5:9d:57:4d:cb:0a:5e:15:c8:
46:38:3c:7d:2f:1a:bb:8c:96:50:f1:0c:98:ae:11:2a:ed:3a:
a9:14:f4:f6:b3:23:3f:31:53:6f:b0:57:36:ec:be:c3:89:56:
7b:0c:ff:f8:a1:6f:f1:59:b0:a9:a6:f1:32:ca:41:4a:b3:9e:
15:a4:aa:bf:9d:10:72:bf:cc:70:6b:0b:b3:3b:81:a4:69:75:
de:68:af:a3:ea:ee:70:eb:fc:45:16:03:82:21:c1:4f:10:de:
5a:e0:d0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyix/6tMz/j7L8MMkIlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh
NTM3ZjkwHhcNMjUwMTMxMTMwMDUxWhcNMjUwMjAxMTMwMDUxWjAzMTEwLwYDVQQD
EygzNWEwM2Y3OGFiMzUxNTQ0OGI5M2EzNWVhZWVmMjE5ZjRkMThlZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLwyZvmwsZieHdS54uJodCBh0qME
QbsB8IfzXwXdo58hcoBNhhOXToqFbfSZxv5vcjjzvzasz2CVue2g+GnMSIjyNXHq
1BvClfbiR2mgR5Mi8jJOSYAUO15jXFECraWPY7kdyFh/QN81m12vuqi82Et+z07t
skiAMbEjR8mrJyNZzmpNyvXVrzM+2c4MP0fuKCn4iWguB3+c8wqV9rXR1gQrjyw5
jaUEmsGGBxoex4huYhU334bB0mX48OvChmOlyzfQQz7goNu8+TVYg+A6s/6h+rXW
W9qFNEvNLnQcqlcEDV/bYnAItBCmzHNefu1jEBr2+IXEclBazsgpfij/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWgP3irNRVEi5OjXq7vIZ9NGO0cMB8GA1UdIwQY
MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt
MTYzMjQ3ZWIwZTA3LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3
LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAAlDk9m
SCsQzjSEXTk7AcNzetTcjSWrvY0staAQGKXJ70mXo3eX2o6j83k1knwQvP6QYWN2
6+KPY0SLenlH1MC5w/UiVjtCxHuLJo77emRrvAUrdcVM+IPUn1sZ76ZZ+M+SyLwH
kTMbpUCWBSYB2okFoICje6hJf5XNGa/6sYePkx3dy9Ful+8iqTDCgzphLx3k7Ot7
ef4txZ1XTcsKXhXIRjg8fS8au4yWUPEMmK4RKu06qRT09rMjPzFTb7BXNuy+w4lW
ewz/+KFv8VmwqabxMspBSrOeFaSqv50Qcr/McGsLszuBpGl13mivo+rucOv8RRYD
giHBTxDeWuDQBw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:46 2025 by rpki-client