Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: kK5x8RI6k0Kv5xQk6MFydGkdtBrYmiqUNrMGIRO8lmw=
Subject key identifier: 02:99:C0:76:91:4E:6E:73:BE:4E:57:A8:E6:3A:1B:E8:ED:BB:EB:75
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 0194BBCE04130B3ABBED4965AA70062B2A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 0E15
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: rn58hiXZ9Smsz8JZ8c3bDX+ox1oWawKjKGntFlSDSu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:04:13:0b:3a:bb:ed:49:65:aa:70:06:2b:2a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=0299c076914e6e73be4e57a8e63a1be8edbbeb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:05:ed:97:1b:a1:ff:f9:76:55:ed:86:5b:
80:3c:e6:82:e9:33:a0:81:b5:f4:50:2d:89:96:6c:
d7:f7:fa:73:63:f3:80:2a:2a:a7:d7:a2:dd:fc:4c:
04:8a:cd:3c:05:2f:ef:55:fe:51:25:ef:13:28:15:
d0:7c:e6:52:f2:04:75:65:3e:cd:68:4c:bd:5e:de:
ad:e6:1b:41:7f:68:b6:bc:89:51:3f:34:32:1e:45:
89:62:54:77:af:a2:80:3e:6a:aa:a3:87:a6:86:69:
29:83:f5:aa:53:92:5b:c0:d6:99:38:dc:e3:2b:36:
78:58:a7:4e:fc:27:e1:e9:5a:9b:76:89:67:a5:fe:
05:0e:a9:6a:1a:79:66:4e:9a:c0:3a:73:6a:e8:6a:
1d:c2:61:ce:8b:9b:7a:20:cf:b7:0e:0c:2e:41:d7:
55:58:59:8f:77:64:58:25:a6:f2:84:fd:0b:21:4b:
a3:d3:47:fe:a2:ac:e3:e4:76:63:06:25:76:d3:59:
83:18:d7:fa:f9:97:4d:60:fa:f3:5e:3e:d7:46:2d:
b8:c4:cf:6d:80:16:5d:cb:d1:43:36:b3:02:9b:39:
7a:95:2d:41:2c:3e:68:27:14:95:cc:7e:e9:f5:3a:
e5:f6:7c:13:0c:5c:f7:f9:48:bc:2c:cd:59:db:32:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:C0:76:91:4E:6E:73:BE:4E:57:A8:E6:3A:1B:E8:ED:BB:EB:75
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:78:c8:96:e2:15:0c:0a:b9:47:6c:92:6c:f8:bc:05:cd:73:
61:39:c5:b5:e3:80:6b:83:76:d0:f5:5f:07:3f:20:49:b4:92:
f9:00:ed:3b:7b:18:4f:50:39:52:0c:34:a5:27:37:44:1b:97:
ac:6c:40:0d:45:ca:96:ff:a4:5c:04:31:1e:d5:b6:1c:fe:c2:
32:39:ca:ed:2a:9a:65:52:a5:1a:2c:3a:c1:3a:5c:34:96:90:
89:e5:b5:a5:54:bc:7a:95:b1:0e:d7:5d:50:c0:df:48:65:ee:
bc:b5:a0:e1:30:8a:80:2e:cb:f2:cf:32:2f:35:83:d4:ec:a9:
12:7f:b5:ab:9f:76:a2:10:dd:46:20:19:71:26:44:b0:d6:88:
56:3b:4e:d3:2f:44:56:0f:42:f9:52:7c:08:9a:42:99:0f:13:
e8:be:5b:93:16:52:17:ed:f8:68:63:9c:e3:10:ed:1f:6a:08:
bc:99:ea:cd:b4:f7:ce:b5:08:bf:a0:06:b7:a7:14:64:71:e4:
7e:c3:65:dc:40:db:41:0c:68:0a:54:e5:21:15:dd:ba:41:2c:
ee:88:80:d4:2f:76:cb:02:05:6d:6e:03:b0:db:b3:83:f9:5a:
ba:1b:25:79:7f:f0:19:e9:23:bd:91:bd:db:85:b7:2c:81:d2:
2b:45:4b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgQTCzq77UllqnAGKyoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YmFmNWFmZjFkN2FhYWE1MmVmZTE0OGUwZTIzNDAzMTFk
N2MyOTQwHhcNMjUwMTMxMTAwMDI4WhcNMjUwMjAxMTAwMDI4WjAzMTEwLwYDVQQD
EygwMjk5YzA3NjkxNGU2ZTczYmU0ZTU3YThlNjNhMWJlOGVkYmJlYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HMF7Zcbof/5dlXthluAPOaC6TOg
gbX0UC2JlmzX9/pzY/OAKiqn16Ld/EwEis08BS/vVf5RJe8TKBXQfOZS8gR1ZT7N
aEy9Xt6t5htBf2i2vIlRPzQyHkWJYlR3r6KAPmqqo4emhmkpg/WqU5JbwNaZONzj
KzZ4WKdO/Cfh6Vqbdolnpf4FDqlqGnlmTprAOnNq6GodwmHOi5t6IM+3DgwuQddV
WFmPd2RYJabyhP0LIUuj00f+oqzj5HZjBiV201mDGNf6+ZdNYPrzXj7XRi24xM9t
gBZdy9FDNrMCmzl6lS1BLD5oJxSVzH7p9Trl9nwTDFz3+Ui8LM1Z2zIIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKZwHaRTm5zvk5XqOY6G+jtu+t1MB8GA1UdIwQY
MBaAFIm69a/x16qqUu/hSODiNAMR18KUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMt
NDlhN2NmMTUzZWIwLzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMtNDlhN2NmMTUzZWIw
LzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3jIluIV
DAq5R2ySbPi8Bc1zYTnFteOAa4N20PVfBz8gSbSS+QDtO3sYT1A5Ugw0pSc3RBuX
rGxADUXKlv+kXAQxHtW2HP7CMjnK7SqaZVKlGiw6wTpcNJaQieW1pVS8epWxDtdd
UMDfSGXuvLWg4TCKgC7L8s8yLzWD1OypEn+1q592ohDdRiAZcSZEsNaIVjtO0y9E
Vg9C+VJ8CJpCmQ8T6L5bkxZSF+34aGOc4xDtH2oIvJnqzbT3zrUIv6AGt6cUZHHk
fsNl3EDbQQxoClTlIRXdukEs7oiA1C92ywIFbW4DsNuzg/lauhsleX/wGekjvZG9
24W3LIHSK0VLTg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:02 2025 by rpki-client