Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
File: iLJuRMUJzzYPfLp8ijtRNABSrzE.mft (raw, json)
Hash identifier: 2U9MHakqktu5yWT5lzARpwPrm2cnH+FL+uiUaxO0xlM=
Subject key identifier: D8:07:0D:1C:A4:19:3F:CA:0B:79:A1:55:9C:C4:3B:F4:DD:E4:0F:EE
Authority key identifier: 88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31
Certificate issuer: /CN=88b26e44c509cf360f7cba7c8a3b51340052af31
Certificate serial: 0194BBCDF39D8735360F2764297D29333B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
Manifest number: 071C
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: iLJuRMUJzzYPfLp8ijtRNABSrzE.crl (hash: JPDfLtOHH64vISccM2e3DQv/02Pw8e1wzXjPSAfJ8Yc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f3:9d:87:35:36:0f:27:64:29:7d:29:33:3b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b26e44c509cf360f7cba7c8a3b51340052af31
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=d8070d1ca4193fca0b79a1559cc43bf4dde40fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:77:45:79:2f:b4:aa:3c:ab:1e:2f:38:30:
f4:c5:00:01:5e:95:37:71:4d:26:a5:bb:d9:eb:9f:
f8:8d:6f:cc:6c:e1:6d:dc:e4:a9:91:a5:f4:af:1f:
38:a6:f5:ad:80:82:0f:7c:61:c0:62:24:3f:eb:9d:
dc:4d:3e:7f:72:ec:93:e5:51:59:36:07:af:36:e1:
ef:bd:cf:83:70:0d:7f:4b:c0:d4:e9:1c:16:2f:dc:
f7:e0:ce:00:f6:fb:ab:f4:f2:d6:32:02:69:d4:c5:
88:5a:7e:e0:b2:ff:95:49:1f:ef:b4:5b:ff:52:58:
f7:a1:ac:60:bf:1a:2f:70:68:4f:ec:3b:9e:e3:b8:
2f:0a:19:51:96:16:64:4e:46:98:45:73:f5:71:5f:
9d:13:39:a0:54:dd:1a:a3:53:3c:c5:38:82:af:3d:
f6:10:50:83:23:71:67:ee:7b:f0:56:ea:dd:e6:ba:
6a:46:bb:f8:7f:3b:2f:b7:21:4f:d3:7d:b9:7c:c4:
46:12:fd:f7:e5:95:66:e9:bc:76:b8:89:dd:c5:a9:
36:ef:2a:35:c0:f7:ec:1a:f9:45:10:55:13:46:34:
fa:85:d4:3d:be:c9:8c:c9:aa:07:9a:93:49:f5:c3:
0c:2f:4a:93:f0:b0:17:72:62:dc:8c:b7:a7:ac:89:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:0D:1C:A4:19:3F:CA:0B:79:A1:55:9C:C4:3B:F4:DD:E4:0F:EE
X509v3 Authority Key Identifier:
keyid:88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:87:4a:ea:01:70:fe:16:75:cb:20:ea:9a:f2:cb:09:54:5a:
72:10:07:14:38:44:44:db:db:19:46:0f:36:25:51:6e:c7:db:
1b:46:1c:b8:dc:e3:88:e0:69:34:6e:1c:5f:3f:d8:3b:df:e0:
e2:d3:32:9a:2f:c9:11:6e:8f:77:e1:a1:eb:10:ad:d9:9e:62:
d8:bd:f1:1f:c4:84:81:09:09:17:93:1b:32:eb:29:8a:0d:34:
5b:b9:72:d6:e7:f9:35:a1:4d:91:60:f5:cd:cc:66:5d:db:ad:
df:e0:4e:19:50:60:b0:35:38:92:9e:98:a1:e8:fe:75:15:91:
e2:48:6b:c3:0b:04:e4:05:2a:58:07:3e:bf:c8:9e:4a:f4:88:
2e:73:1e:1b:99:34:3f:68:1d:ef:39:88:6b:b6:56:6e:63:30:
06:d3:27:dc:cf:16:78:ed:4f:2a:26:b7:48:f7:d2:d0:91:23:
c2:a0:f6:3a:24:4f:60:8d:fc:23:94:d1:0b:a7:ca:3c:96:4f:
a4:39:2f:fc:23:64:39:0a:76:76:ec:90:1a:01:15:9a:0b:8c:
f6:61:4a:44:c9:64:8f:ff:82:e1:2c:93:f3:74:0e:9f:af:44:
18:02:dd:a8:a5:21:7c:e9:b7:dc:4f:8e:a3:2b:48:a0:83:fd:
e8:22:86:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfOdhzU2DydkKX0pMzs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjI2ZTQ0YzUwOWNmMzYwZjdjYmE3YzhhM2I1MTM0MDA1
MmFmMzEwHhcNMjUwMTMxMTAwMDI0WhcNMjUwMjAxMTAwMDI0WjAzMTEwLwYDVQQD
EyhkODA3MGQxY2E0MTkzZmNhMGI3OWExNTU5Y2M0M2JmNGRkZTQwZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWt3RXkvtKo8qx4vODD0xQABXpU3
cU0mpbvZ65/4jW/MbOFt3OSpkaX0rx84pvWtgIIPfGHAYiQ/653cTT5/cuyT5VFZ
NgevNuHvvc+DcA1/S8DU6RwWL9z34M4A9vur9PLWMgJp1MWIWn7gsv+VSR/vtFv/
Ulj3oaxgvxovcGhP7Due47gvChlRlhZkTkaYRXP1cV+dEzmgVN0ao1M8xTiCrz32
EFCDI3Fn7nvwVurd5rpqRrv4fzsvtyFP0325fMRGEv335ZVm6bx2uIndxak27yo1
wPfsGvlFEFUTRjT6hdQ9vsmMyaoHmpNJ9cMML0qT8LAXcmLcjLenrIm2rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgHDRykGT/KC3mhVZzEO/Td5A/uMB8GA1UdIwQY
MBaAFIiybkTFCc82D3y6fIo7UTQAUq8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxKdVJNVUp6ellQZkxwOGlqdFJOQUJTcnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYmQ2Y2MtYzZlZi00ZDdhLTk4NzYt
MGVmNzkwYTdiOTBlLzEvaUxKdVJNVUp6ellQZkxwOGlqdFJOQUJTcnpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kYmQ2Y2MtYzZlZi00ZDdhLTk4NzYtMGVmNzkwYTdiOTBl
LzEvaUxKdVJNVUp6ellQZkxwOGlqdFJOQUJTcnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYdK6gFw
/hZ1yyDqmvLLCVRachAHFDhERNvbGUYPNiVRbsfbG0YcuNzjiOBpNG4cXz/YO9/g
4tMymi/JEW6Pd+Gh6xCt2Z5i2L3xH8SEgQkJF5MbMuspig00W7ly1uf5NaFNkWD1
zcxmXdut3+BOGVBgsDU4kp6Yoej+dRWR4khrwwsE5AUqWAc+v8ieSvSILnMeG5k0
P2gd7zmIa7ZWbmMwBtMn3M8WeO1PKia3SPfS0JEjwqD2OiRPYI38I5TRC6fKPJZP
pDkv/CNkOQp2duyQGgEVmguM9mFKRMlkj/+C4SyT83QOn69EGALdqKUhfOm33E+O
oytIoIP96CKG1w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:27 2025 by rpki-client