Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: liyqXqRdXF/A76m4ClPQGui9WUvTX7dHmppzHWvjrcs=
Subject key identifier: 6E:FA:3C:1B:BD:C9:3A:10:FC:77:5B:D4:FA:0A:B4:64:BC:EE:44:E2
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 0194BD17CFF272567098BDF1200DD8B87897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 02A8
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: sKt5tvAVXZKhopytK1dab4MzIVH76MowsWJzVmVmTvc=)
2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cf:f2:72:56:70:98:bd:f1:20:0d:d8:b8:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=6efa3c1bbdc93a10fc775bd4fa0ab464bcee44e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:d4:af:6d:05:95:6c:9b:14:4b:74:b7:c7:
a1:0c:4f:8a:bb:f5:dc:65:4e:71:99:11:53:60:e2:
b6:26:b7:7a:87:88:7d:b2:11:e9:7f:ff:87:53:bc:
c3:07:ad:65:d8:25:3b:17:3d:49:99:fd:14:d9:16:
ef:b3:d8:9d:e0:d4:42:cc:18:7f:27:56:ac:5d:63:
ed:c6:42:e8:14:60:00:a7:25:16:b2:08:53:47:5a:
aa:6c:f8:2f:30:44:91:73:61:a5:28:4a:9a:69:d6:
de:3d:5a:3a:c0:b3:59:79:db:09:ff:50:c5:8f:9d:
31:78:3f:29:53:c7:9a:9f:8a:7f:e3:89:b1:9b:82:
f6:ff:bb:ad:91:b4:02:db:08:a9:5b:74:6a:aa:b8:
06:94:e4:69:c1:f0:4a:c2:86:e2:ed:a7:5a:cb:45:
1a:8b:68:a0:32:2a:70:bb:b6:db:69:7b:05:c0:5f:
d5:d8:63:de:56:3c:5b:9e:e8:f8:31:aa:91:89:34:
cb:ef:24:e3:33:05:f4:a7:53:37:86:a2:9a:07:65:
1f:f5:60:af:18:0c:2d:52:71:3f:6c:89:88:b2:0e:
fd:9c:39:55:62:c9:e1:5f:5d:9f:eb:d6:74:6d:31:
36:11:73:b0:3d:ba:40:c5:41:31:e6:c3:62:b6:88:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:3C:1B:BD:C9:3A:10:FC:77:5B:D4:FA:0A:B4:64:BC:EE:44:E2
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:9c:0e:01:8a:5a:a5:3f:df:56:af:8e:e8:47:ca:3a:43:
d1:91:7c:da:e4:e9:f8:d6:8a:fe:23:8a:a3:bc:d3:9b:0f:46:
70:f3:ae:7f:b4:de:94:ad:48:9f:77:f1:08:01:2d:9f:a3:39:
39:33:1c:41:16:2a:81:93:98:e1:2e:c3:b4:70:de:e2:b5:ac:
76:45:5f:af:e5:9e:07:97:26:4d:0c:a4:f6:84:f9:7f:f7:bc:
9c:75:da:d1:c0:2c:c7:0c:54:8e:6e:a2:af:11:5f:35:32:04:
2c:dc:46:a7:b5:38:fe:28:97:0c:e9:1e:5a:f4:bf:32:9c:3d:
21:ec:99:4d:df:84:7f:f8:f9:b8:37:20:40:34:a5:70:10:76:
5e:14:79:96:f6:e5:66:bf:a7:f7:19:92:4f:7d:27:fb:87:aa:
51:7b:91:90:a4:ea:b0:21:cb:9b:dd:be:84:14:95:38:50:7c:
c1:37:8a:65:ad:b5:d4:3a:9b:7e:f2:eb:92:cd:ae:ba:fe:fa:
61:56:ec:c0:94:33:2f:b5:f2:51:6d:2c:f9:54:ae:e4:92:cd:
e9:54:9c:bf:16:bb:3e:04:e9:44:bc:1a:80:0c:58:6b:e4:06:
1c:14:23:b2:94:36:0f:4d:de:89:3a:97:93:1e:03:8d:7d:d7:
e6:ff:3a:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8/yclZwmL3xIA3YuHiXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjJhZDYwOTcyOWY4ZWYxMTEyYWRiYzE1OGY1MTEyMTVi
MGYzOWUwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
Eyg2ZWZhM2MxYmJkYzkzYTEwZmM3NzViZDRmYTBhYjQ2NGJjZWU0NGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseXUr20FlWybFEt0t8ehDE+Ku/Xc
ZU5xmRFTYOK2Jrd6h4h9shHpf/+HU7zDB61l2CU7Fz1Jmf0U2Rbvs9id4NRCzBh/
J1asXWPtxkLoFGAApyUWsghTR1qqbPgvMESRc2GlKEqaadbePVo6wLNZedsJ/1DF
j50xeD8pU8ean4p/44mxm4L2/7utkbQC2wipW3RqqrgGlORpwfBKwobi7aday0Ua
i2igMipwu7bbaXsFwF/V2GPeVjxbnuj4MaqRiTTL7yTjMwX0p1M3hqKaB2Uf9WCv
GAwtUnE/bImIsg79nDlVYsnhX12f69Z0bTE2EXOwPbpAxUEx5sNitogzFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG76PBu9yToQ/Hdb1PoKtGS87kTiMB8GA1UdIwQY
MBaAFAoirWCXKfjvERKtvBWPURIVsPOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEt
ZTVkOWE2ZTQ4NzQ2LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEtZTVkOWE2ZTQ4NzQ2
LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9OcDgGK
WqU/31avjuhHyjpD0ZF82uTp+NaK/iOKo7zTmw9GcPOuf7TelK1In3fxCAEtn6M5
OTMcQRYqgZOY4S7DtHDe4rWsdkVfr+WeB5cmTQyk9oT5f/e8nHXa0cAsxwxUjm6i
rxFfNTIELNxGp7U4/iiXDOkeWvS/Mpw9IeyZTd+Ef/j5uDcgQDSlcBB2XhR5lvbl
Zr+n9xmST30n+4eqUXuRkKTqsCHLm92+hBSVOFB8wTeKZa211DqbfvLrks2uuv76
YVbswJQzL7XyUW0s+VSu5JLN6VScvxa7PgTpRLwagAxYa+QGHBQjspQ2D03eiTqX
kx4DjX3X5v86rw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:27 2025 by rpki-client