Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
File: 2ilr0AMdba2mxzBzYI89EeRFzkQ.mft (raw, json)
Hash identifier: CJjxzXYBp53ZLrnszCZPMKYHVLyC8ds8qagP0hJJT6w=
Subject key identifier: A0:FF:3A:5C:07:3A:3B:0C:55:56:67:33:8F:CF:D9:43:34:BA:FC:4E
Authority key identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
Certificate issuer: /CN=da296bd0031d6dada6c73073608f3d11e445ce44
Certificate serial: 0194BBCDC84143EBFC0D7BA64D695636F095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
Manifest number: 026C
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: 2ilr0AMdba2mxzBzYI89EeRFzkQ.crl (hash: wplVbwm3wzYKFssN0257WaH6tZ/gOFHuYgmjHLFv89s=)
2: xbFh-XL0EOh1euSo-ddC7jaGUKM.roa (hash: 8IT/bBcEgFQE8EaggOanI6nAulFvf6rnXMDUQLI1njI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c8:41:43:eb:fc:0d:7b:a6:4d:69:56:36:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da296bd0031d6dada6c73073608f3d11e445ce44
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=a0ff3a5c073a3b0c555667338fcfd94334bafc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a7:dc:08:bf:ae:da:a0:fe:4f:9a:82:1b:b5:
62:8a:55:1a:63:59:c7:ac:ed:97:4f:fd:04:aa:70:
04:c9:75:72:c6:e6:02:4e:71:62:20:2c:9e:43:ac:
38:67:d6:38:d5:26:3b:f6:b0:bc:93:80:90:dc:db:
55:b6:8b:cd:0a:18:94:68:b7:f2:71:83:5c:8c:fa:
26:0b:bb:c0:1d:1e:3b:29:95:bd:93:50:16:6a:9f:
b5:90:e9:d9:12:b6:15:18:82:c5:ca:2b:ae:d0:3d:
c0:5d:af:4f:81:55:51:fb:3b:51:d6:86:cb:5d:8f:
bb:78:05:36:ce:8a:2d:97:b8:82:23:61:c6:2a:c7:
2f:e6:c0:51:51:84:97:b8:cc:1f:db:25:26:8c:67:
fa:38:92:2d:f8:67:10:07:6f:f1:16:6e:2f:c5:6a:
3d:2b:55:18:6c:a1:29:64:2e:39:8b:66:f9:a9:a9:
76:56:85:7a:4f:5b:dc:33:71:20:88:13:41:c7:6d:
0e:ce:08:d1:c5:bd:00:2e:09:ff:d1:88:b0:ea:c4:
20:7d:6c:0c:18:d2:f1:58:9f:56:40:b4:88:3a:13:
f7:a7:a6:b3:1b:10:95:94:00:04:4f:50:21:e5:86:
a8:4f:53:0f:51:44:a6:4f:a0:49:1b:6a:ba:33:41:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:3A:5C:07:3A:3B:0C:55:56:67:33:8F:CF:D9:43:34:BA:FC:4E
X509v3 Authority Key Identifier:
keyid:DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c7:12:e8:f1:bf:53:88:0d:1c:dd:e5:67:52:08:66:91:05:
d8:b9:08:89:40:05:1c:52:d5:f2:3e:b9:3e:49:88:2f:80:2c:
98:9f:3e:1c:f9:28:a5:b8:22:1c:f7:e3:c3:8d:93:37:d4:6e:
d1:ce:f4:da:da:4d:e2:6a:14:c0:99:c6:a7:75:14:03:73:69:
de:0d:21:e4:0a:13:bd:5f:7a:44:ec:68:91:c2:fd:5a:37:3c:
72:b4:51:bb:11:74:6c:df:00:e9:99:dd:81:ed:de:37:b5:5b:
f4:0f:81:1d:19:ed:6d:c2:4a:0f:b3:27:53:4e:33:33:e9:6d:
de:26:29:69:4d:0c:e5:03:69:4f:89:0b:b4:3a:7f:67:6d:97:
47:6a:81:89:01:c9:a6:39:c0:25:48:80:63:57:59:ed:87:c1:
c5:d9:73:7c:d7:cd:d9:33:13:e2:3a:46:09:f6:00:0c:75:6f:
e8:f9:23:c3:f9:df:c1:e4:7c:48:b0:2c:60:4a:91:34:ec:38:
1b:d8:29:91:94:ce:0c:77:b7:d9:7f:7c:07:d4:1c:67:ba:67:
4c:a2:f8:3a:c6:e8:01:46:e4:f3:5b:68:db:44:4f:ef:d2:34:
9f:1c:15:b4:46:4e:c7:eb:39:d1:46:13:54:07:47:be:f8:8d:
bd:4c:ea:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zchBQ+v8DXumTWlWNvCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjk2YmQwMDMxZDZkYWRhNmM3MzA3MzYwOGYzZDExZTQ0
NWNlNDQwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
EyhhMGZmM2E1YzA3M2EzYjBjNTU1NjY3MzM4ZmNmZDk0MzM0YmFmYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KfcCL+u2qD+T5qCG7ViilUaY1nH
rO2XT/0EqnAEyXVyxuYCTnFiICyeQ6w4Z9Y41SY79rC8k4CQ3NtVtovNChiUaLfy
cYNcjPomC7vAHR47KZW9k1AWap+1kOnZErYVGILFyiuu0D3AXa9PgVVR+ztR1obL
XY+7eAU2zootl7iCI2HGKscv5sBRUYSXuMwf2yUmjGf6OJIt+GcQB2/xFm4vxWo9
K1UYbKEpZC45i2b5qal2VoV6T1vcM3EgiBNBx20OzgjRxb0ALgn/0Yiw6sQgfWwM
GNLxWJ9WQLSIOhP3p6azGxCVlAAET1Ah5YaoT1MPUUSmT6BJG2q6M0ErEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD/OlwHOjsMVVZnM4/P2UM0uvxOMB8GA1UdIwQY
MBaAFNopa9ADHW2tpscwc2CPPRHkRc5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmlscjBBTWRiYTJteHpCellJODlFZVJGemtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xYWFmYTAtMDI3OC00ZGQ2LTg4MDct
NTcyNmMyYjUxNDhkLzEvMmlscjBBTWRiYTJteHpCellJODlFZVJGemtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xYWFmYTAtMDI3OC00ZGQ2LTg4MDctNTcyNmMyYjUxNDhk
LzEvMmlscjBBTWRiYTJteHpCellJODlFZVJGemtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMcS6PG/
U4gNHN3lZ1IIZpEF2LkIiUAFHFLV8j65PkmIL4AsmJ8+HPkopbgiHPfjw42TN9Ru
0c702tpN4moUwJnGp3UUA3Np3g0h5AoTvV96ROxokcL9Wjc8crRRuxF0bN8A6Znd
ge3eN7Vb9A+BHRntbcJKD7MnU04zM+lt3iYpaU0M5QNpT4kLtDp/Z22XR2qBiQHJ
pjnAJUiAY1dZ7YfBxdlzfNfN2TMT4jpGCfYADHVv6Pkjw/nfweR8SLAsYEqRNOw4
G9gpkZTODHe32X98B9QcZ7pnTKL4OsboAUbk81to20RP79I0nxwVtEZOx+s50UYT
VAdHvviNvUzqJw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:04 2025 by rpki-client