Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
File: 1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json)
Hash identifier: DGUQqO9Ftx4h3LuG7IPj3Cl0UWs2bkmrss/lTCWzSi4=
Subject key identifier: 38:61:82:4D:87:C8:3E:FD:9B:19:64:01:DE:90:E6:C9:A8:12:9A:C7
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial: 0194BCA997A9855F4206F4C611078C0C538F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
Manifest number: 1115
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: wRQv93BDR+d4IcoeN2UboDr/Sl73PLZ/1cV2RINPjdU=)
2: QajEwkbx04DeU-__NIG_To3nAd4.roa (hash: DL3wmR5aQwUYr9WHU8u6HM9lbpHPvXLenfBtN39yssQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:97:a9:85:5f:42:06:f4:c6:11:07:8c:0c:53:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=3861824d87c83efd9b196401de90e6c9a8129ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:12:ad:d9:14:20:5a:ed:34:a8:ec:92:ac:
b2:54:32:53:05:07:b5:3d:23:ef:60:b7:68:6c:6c:
51:1c:49:36:7e:17:87:ec:a9:08:cc:a6:8b:c8:38:
a1:e8:05:36:67:e8:01:68:9d:d7:ce:b9:8a:9d:6e:
b1:b9:fe:d8:d0:dd:70:d1:cf:7c:b0:bc:55:de:26:
56:8f:7c:32:c1:05:47:2d:2f:32:34:b9:c4:ea:4f:
f9:ba:13:94:48:cb:d1:bf:67:26:47:27:82:47:9a:
87:c9:59:8e:63:6a:0d:d6:0c:bd:9a:fc:1f:e1:05:
9e:6c:c9:55:f6:91:a2:0b:00:e0:00:23:24:ac:92:
8b:17:eb:e3:bf:97:39:e4:89:96:d1:5f:04:15:b6:
3c:55:a5:83:53:b1:4a:c1:c5:7a:71:8c:e3:18:32:
35:7c:ee:3d:4d:76:65:82:c8:65:3a:e1:33:05:1e:
30:9a:93:c7:4e:18:d7:8c:8f:50:ee:28:43:53:8f:
8f:2c:9c:a0:b8:13:1d:57:59:c9:b8:e5:7b:9d:d9:
98:0a:e7:c4:22:fc:8e:b3:8d:05:31:19:8e:29:e6:
20:ca:ad:6d:e2:3a:b1:7d:11:d1:e4:bc:21:2a:0b:
8d:df:b4:a4:52:de:6e:d9:5b:75:16:50:53:49:ad:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:82:4D:87:C8:3E:FD:9B:19:64:01:DE:90:E6:C9:A8:12:9A:C7
X509v3 Authority Key Identifier:
keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:72:c7:23:64:5d:3e:e7:ed:f0:36:30:0f:c3:01:4b:2d:0b:
a2:10:39:f6:d0:8d:c7:6b:18:24:40:09:cc:2d:6e:9c:b2:74:
d5:3f:79:c2:e5:f8:d3:8c:36:0e:a6:7a:2f:0d:9b:cb:48:b4:
14:f2:c9:6e:1d:6f:92:4c:d1:5f:43:79:8d:0d:57:5d:14:be:
55:a6:b5:1a:42:23:6e:42:ad:e0:6e:62:d4:c2:35:44:c2:10:
f1:fc:67:67:80:ec:c0:34:65:3e:0e:54:64:82:bd:dd:5a:c1:
04:71:37:50:ed:7d:b1:0f:7c:cd:05:27:1f:c5:f7:4b:ad:03:
27:0c:09:06:69:fc:c8:3a:9b:8f:d4:82:1e:2c:61:a5:16:b0:
c9:3a:23:e6:87:ec:f9:97:16:0c:c3:73:69:ee:f0:7a:a5:85:
e5:69:33:df:90:87:e8:35:ea:d0:bb:20:ff:9e:be:6e:1c:77:
de:c4:6e:1c:1c:f6:e8:b1:02:f2:f4:6f:cf:d4:42:a8:b1:b1:
3a:ac:41:5e:36:9e:c6:71:2e:a0:f0:23:60:97:79:66:7c:3d:
69:64:cf:bc:a6:93:a4:5e:f4:ca:2d:ef:89:63:86:16:10:ff:
5e:57:fc:f5:2b:2d:0b:5b:de:c4:7a:81:6d:95:d2:4e:8d:1b:
0c:9d:19:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZephV9CBvTGEQeMDFOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NWQ5YWM2YmYxZjJhMzhlMmMxNzI4NTBlZWY3MDc1YWVi
Y2U4ODgwHhcNMjUwMTMxMTQwMDE4WhcNMjUwMjAxMTQwMDE4WjAzMTEwLwYDVQQD
EygzODYxODI0ZDg3YzgzZWZkOWIxOTY0MDFkZTkwZTZjOWE4MTI5YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK0SrdkUIFrtNKjskqyyVDJTBQe1
PSPvYLdobGxRHEk2fheH7KkIzKaLyDih6AU2Z+gBaJ3XzrmKnW6xuf7Y0N1w0c98
sLxV3iZWj3wywQVHLS8yNLnE6k/5uhOUSMvRv2cmRyeCR5qHyVmOY2oN1gy9mvwf
4QWebMlV9pGiCwDgACMkrJKLF+vjv5c55ImW0V8EFbY8VaWDU7FKwcV6cYzjGDI1
fO49TXZlgshlOuEzBR4wmpPHThjXjI9Q7ihDU4+PLJyguBMdV1nJuOV7ndmYCufE
IvyOs40FMRmOKeYgyq1t4jqxfRHR5LwhKguN37SkUt5u2Vt1FlBTSa1ZVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhhgk2HyD79mxlkAd6Q5smoEprHMB8GA1UdIwQY
MBaAFNZdmsa/Hyo44sFyhQ7vcHWuvOiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWwyYXhyOGZLamppd1hLRkR1OXdkYTY4NklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZmZiMGQtMjJjNC00MDBhLThhMjMt
M2QxMTNlYjkyN2JmLzEvMWwyYXhyOGZLamppd1hLRkR1OXdkYTY4NklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82ZmZiMGQtMjJjNC00MDBhLThhMjMtM2QxMTNlYjkyN2Jm
LzEvMWwyYXhyOGZLamppd1hLRkR1OXdkYTY4NklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHLHI2Rd
Puft8DYwD8MBSy0LohA59tCNx2sYJEAJzC1unLJ01T95wuX404w2DqZ6Lw2by0i0
FPLJbh1vkkzRX0N5jQ1XXRS+Vaa1GkIjbkKt4G5i1MI1RMIQ8fxnZ4DswDRlPg5U
ZIK93VrBBHE3UO19sQ98zQUnH8X3S60DJwwJBmn8yDqbj9SCHixhpRawyToj5ofs
+ZcWDMNzae7weqWF5Wkz35CH6DXq0Lsg/56+bhx33sRuHBz26LEC8vRvz9RCqLGx
OqxBXjaexnEuoPAjYJd5Znw9aWTPvKaTpF70yi3viWOGFhD/Xlf89SstC1vexHqB
bZXSTo0bDJ0ZHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:31 2025 by rpki-client