Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier: jxI3PP9mvN/vko5IlN8F/jiPSU8SsPRw5w5sSUrzdKE=
Subject key identifier: 02:E1:F3:87:A1:0D:4E:D0:91:E1:50:D6:6A:2D:34:C1:71:4B:D6:E4
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 0194BBCE000775C3CA3C21392BADBD58EF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: X0tfH8HVu7zcqHAIz2jHruN4asCcFnHEgx34pcGrwx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:00:07:75:c3:ca:3c:21:39:2b:ad:bd:58:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=02e1f387a10d4ed091e150d66a2d34c1714bd6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:be:53:94:85:91:86:16:15:5e:2f:0e:74:
19:40:7c:6d:01:50:88:9c:4f:35:1c:dd:a1:7a:00:
bf:57:07:cb:9a:fd:60:68:27:90:67:6c:d8:b9:d1:
90:c4:28:70:23:c4:7f:cd:32:0f:67:06:26:b4:c6:
44:26:8e:40:73:cb:d4:ec:60:a9:aa:c5:58:6f:25:
3e:52:58:cc:26:ca:9c:fa:fd:dc:e4:84:b3:30:85:
6f:e0:a8:63:48:b7:54:e9:d5:fd:65:85:17:f3:fc:
39:8f:b2:c1:3f:1c:69:3e:dc:02:e0:bc:1e:5f:5e:
9c:b2:f8:25:73:40:92:6e:ed:c5:a0:fe:3f:6a:4b:
ed:b9:76:e0:f9:c6:ca:97:a2:fd:5f:50:25:f8:7b:
67:6e:f2:53:f4:90:f5:54:b6:e2:3b:f3:6c:0c:03:
17:ce:6a:02:71:26:33:c0:1d:4b:9a:ef:d4:e6:68:
43:5c:22:01:1b:91:56:ce:a3:04:9f:23:66:9d:57:
62:85:0c:c4:c1:81:26:3c:c5:b8:b2:3e:d2:0d:cb:
61:80:98:97:4e:dc:9e:78:98:f0:ba:3f:ce:65:31:
68:49:7a:d2:cc:24:0c:82:7b:cd:08:34:b1:74:3c:
2c:b0:b6:4b:cc:7d:52:be:1b:c1:b6:54:93:39:a2:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:F3:87:A1:0D:4E:D0:91:E1:50:D6:6A:2D:34:C1:71:4B:D6:E4
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7a:c1:b0:b7:c9:e1:dc:e5:d8:f6:d1:d0:47:0c:ca:4b:51:
3d:cd:b1:9b:b1:ee:cf:a6:3b:e8:8c:80:dc:a1:42:8c:b7:e4:
18:a3:1f:13:52:23:a9:09:5b:59:52:83:57:90:eb:8d:0e:a0:
a6:47:ba:99:a8:db:3b:ae:9e:ca:50:e1:76:75:8f:b1:ef:f0:
74:eb:ec:44:d9:77:d5:6a:8d:ec:67:c3:57:bc:e2:e9:a9:a7:
87:dd:06:a4:bd:e4:0a:17:1e:a9:ba:3d:37:b2:ba:ab:8b:13:
00:34:eb:7e:4a:87:b5:f9:2e:a7:4d:b1:37:64:25:8b:29:d4:
8e:21:61:90:25:52:9a:1e:35:d1:84:df:a9:3c:61:95:f8:6f:
fe:3b:99:a7:04:0e:3d:02:cc:da:c4:b5:b2:a3:0b:fc:33:2f:
f5:23:5b:7d:8a:e4:20:41:10:9e:12:f1:a8:2a:2e:ca:ff:77:
b6:9d:12:df:91:c9:bc:fd:01:ca:51:91:9c:28:56:5f:85:19:
bc:1c:35:72:4a:95:2a:ef:36:e2:21:56:3b:63:58:29:60:44:
7f:01:bf:32:7c:85:83:ae:8b:73:c9:f8:28:df:f6:6e:46:ca:
b4:bd:72:a3:97:7f:8b:3b:b2:d4:08:b9:2e:3b:33:32:59:d9:
c2:57:89:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgAHdcPKPCE5K629WO8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ODg4MThjNGVjZjFkNWRlYjRlYTkzNjY3NDcwYTdhMTE0
ZDlhMDcwHhcNMjUwMTMxMTAwMDI3WhcNMjUwMjAxMTAwMDI3WjAzMTEwLwYDVQQD
EygwMmUxZjM4N2ExMGQ0ZWQwOTFlMTUwZDY2YTJkMzRjMTcxNGJkNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hu+U5SFkYYWFV4vDnQZQHxtAVCI
nE81HN2hegC/VwfLmv1gaCeQZ2zYudGQxChwI8R/zTIPZwYmtMZEJo5Ac8vU7GCp
qsVYbyU+UljMJsqc+v3c5ISzMIVv4KhjSLdU6dX9ZYUX8/w5j7LBPxxpPtwC4Lwe
X16csvglc0CSbu3FoP4/akvtuXbg+cbKl6L9X1Al+HtnbvJT9JD1VLbiO/NsDAMX
zmoCcSYzwB1Lmu/U5mhDXCIBG5FWzqMEnyNmnVdihQzEwYEmPMW4sj7SDcthgJiX
TtyeeJjwuj/OZTFoSXrSzCQMgnvNCDSxdDwssLZLzH1SvhvBtlSTOaKpawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALh84ehDU7QkeFQ1motNMFxS9bkMB8GA1UdIwQY
MBaAFIiIgYxOzx1d606pNmdHCnoRTZoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4Nzkt
YzI5YmYyNWQyNjZlLzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4NzktYzI5YmYyNWQyNjZl
LzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnrBsLfJ
4dzl2PbR0EcMyktRPc2xm7Huz6Y76IyA3KFCjLfkGKMfE1IjqQlbWVKDV5DrjQ6g
pke6majbO66eylDhdnWPse/wdOvsRNl31WqN7GfDV7zi6amnh90GpL3kChceqbo9
N7K6q4sTADTrfkqHtfkup02xN2QliynUjiFhkCVSmh410YTfqTxhlfhv/juZpwQO
PQLM2sS1sqML/DMv9SNbfYrkIEEQnhLxqCouyv93tp0S35HJvP0BylGRnChWX4UZ
vBw1ckqVKu824iFWO2NYKWBEfwG/MnyFg66Lc8n4KN/2bkbKtL1yo5d/izuy1Ai5
LjszMlnZwleJfg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:00 2025 by rpki-client