Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: S8Ck26dtp3WMCUC65MJhlRIIc8jrT3gnUvhxSQNYllg=
Subject key identifier: 16:F7:0D:4C:C9:85:BA:5B:99:3E:71:02:DA:91:E9:9E:B6:60:68:E3
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 0194BCA9DDDCA57FED721435BAC72E71A1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: wOLqxABaplaQrE/m4tjHJxUmfxDb5JCA0kMPjn7nU5k=)
2: Oic624JnJmz9lkyUCkfkxynrzXU.roa (hash: reuQNdNLE9OYq59c7HheLuUPxQ+GdUmZR0j+FA5WU8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dd:dc:a5:7f:ed:72:14:35:ba:c7:2e:71:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=16f70d4cc985ba5b993e7102da91e99eb66068e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:ae:67:ad:89:6d:03:f0:38:bd:1b:9b:1f:
75:ca:39:03:69:b6:01:36:0b:37:50:ff:fc:5b:06:
e3:9a:2f:df:d5:cf:c4:98:4d:a2:22:bf:b5:33:9e:
c9:b4:79:5c:ec:6f:8a:24:c1:ba:a1:9f:06:eb:60:
82:85:56:1e:fb:96:ff:ed:ab:72:97:1a:1a:1d:13:
e0:d3:b7:a0:23:0a:11:46:d8:03:10:6b:ca:9d:be:
4c:02:32:93:12:0d:e4:ec:d8:63:77:06:3d:11:35:
e2:82:69:97:ea:36:8c:0e:0c:04:0f:21:15:08:3f:
6d:2b:2c:6d:42:f5:71:b3:da:04:15:df:96:e4:1a:
a8:53:37:23:b9:2b:92:05:40:9d:cb:4c:bd:78:5f:
e0:a7:bc:c0:2b:c0:2e:72:8b:d4:9d:dd:b0:01:0a:
ab:92:28:88:e6:9b:6a:55:a0:bd:02:91:1b:7f:8b:
c9:0c:a8:2a:00:2e:31:0d:bb:52:f4:5b:06:46:9d:
43:13:aa:ad:1b:b0:32:aa:cb:bb:bf:15:ce:71:e6:
ab:fa:1e:b5:10:38:12:6e:e8:38:2b:b6:d1:07:24:
77:d7:d2:fe:39:0d:d2:11:3d:a8:fd:a2:a3:81:2d:
d7:2f:76:fa:29:e5:fa:66:d4:03:9d:ae:58:86:12:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:0D:4C:C9:85:BA:5B:99:3E:71:02:DA:91:E9:9E:B6:60:68:E3
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:14:53:92:23:f0:da:35:49:28:9b:68:0c:d5:08:73:fa:b5:
21:f9:19:de:14:16:c6:dd:8c:8c:5b:3b:e5:25:7b:4d:9a:8d:
4e:5b:e2:6a:57:0e:7d:23:d9:4e:c4:dd:6e:88:05:0d:02:b2:
4d:63:2f:dd:73:79:88:f5:f3:3b:08:f0:84:14:46:71:10:fc:
e2:2e:e6:66:79:84:df:8f:62:91:f0:96:b1:39:86:d0:70:28:
93:c6:26:3e:e0:dd:d8:b5:a9:35:9d:4b:c9:f8:ba:d5:6a:d4:
89:cc:cb:0c:5a:ca:ca:da:d3:37:6d:45:9e:e8:c0:48:d0:00:
6c:58:60:dc:45:3c:9c:92:65:9f:f4:79:cf:46:b9:be:b7:e8:
08:84:45:50:a4:d1:96:33:8b:cc:d8:70:b3:6c:d0:e2:17:ce:
f5:76:7c:33:e6:80:b1:f6:39:67:37:da:76:6a:e4:04:c1:bb:
ef:ce:6d:9d:ad:83:46:99:9e:18:26:2b:f1:fd:a6:73:65:b2:
76:70:79:07:a4:4b:a9:96:5e:77:95:3b:87:10:a7:1d:4f:d5:
aa:00:7b:33:df:15:2c:87:95:2c:d4:9a:9f:cb:98:08:a8:ed:
6b:0e:c6:0f:e8:bb:70:0b:c6:25:57:76:13:da:0f:7e:35:11:
e7:ed:16:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qd3cpX/tchQ1uscucaHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODlhNWRkZDMwMDJlODAwOTk5YjVjMTg2N2Y3ODY3ODFi
YWYxM2QwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
EygxNmY3MGQ0Y2M5ODViYTViOTkzZTcxMDJkYTkxZTk5ZWI2NjA2OGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyquZ62JbQPwOL0bmx91yjkDabYB
Ngs3UP/8Wwbjmi/f1c/EmE2iIr+1M57JtHlc7G+KJMG6oZ8G62CChVYe+5b/7aty
lxoaHRPg07egIwoRRtgDEGvKnb5MAjKTEg3k7NhjdwY9ETXigmmX6jaMDgwEDyEV
CD9tKyxtQvVxs9oEFd+W5BqoUzcjuSuSBUCdy0y9eF/gp7zAK8AucovUnd2wAQqr
kiiI5ptqVaC9ApEbf4vJDKgqAC4xDbtS9FsGRp1DE6qtG7Ayqsu7vxXOcear+h61
EDgSbug4K7bRByR319L+OQ3SET2o/aKjgS3XL3b6KeX6ZtQDna5YhhIxiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb3DUzJhbpbmT5xAtqR6Z62YGjjMB8GA1UdIwQY
MBaAFNSJpd3TAC6ACZm1wYZ/eGeBuvE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmIt
NTI1OWVlZGNhMDdjLzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmItNTI1OWVlZGNhMDdj
LzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBRTkiPw
2jVJKJtoDNUIc/q1IfkZ3hQWxt2MjFs75SV7TZqNTlvialcOfSPZTsTdbogFDQKy
TWMv3XN5iPXzOwjwhBRGcRD84i7mZnmE349ikfCWsTmG0HAok8YmPuDd2LWpNZ1L
yfi61WrUiczLDFrKytrTN21FnujASNAAbFhg3EU8nJJln/R5z0a5vrfoCIRFUKTR
ljOLzNhws2zQ4hfO9XZ8M+aAsfY5ZzfadmrkBMG7785tna2DRpmeGCYr8f2mc2Wy
dnB5B6RLqZZed5U7hxCnHU/VqgB7M98VLIeVLNSan8uYCKjtaw7GD+i7cAvGJVd2
E9oPfjUR5+0W4g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:15 2025 by rpki-client