Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
File: IMjVw3OmvzurIpOUNguG0Alq7L0.mft (raw, json)
Hash identifier: UDk7IYb5Lcp9ZmWoSh4n04/PX32DTX6ZRmXRB7ALy6w=
Subject key identifier: 89:3C:C3:BB:C2:98:46:F0:6B:8D:0C:1F:FE:A0:2A:25:40:4A:54:9E
Authority key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
Certificate issuer: /CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Certificate serial: 0194BC04C3ABE2C3FC4615C2D3EC770DBCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
Manifest number: 0FC5
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: IMjVw3OmvzurIpOUNguG0Alq7L0.crl (hash: 2o2iS9xsaEV5jTIGXvOAasSZkt7+btF24dK7boD66EE=)
2: eKykDDSSUelkgfwH3TO0n13mPZk.roa (hash: P9dt2Lrz0okP2zrUj3Cql2lI4c4A2LE13LjuP2FhidE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:ab:e2:c3:fc:46:15:c2:d3:ec:77:0d:bc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=893cc3bbc29846f06b8d0c1ffea02a25404a549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:c3:28:84:11:d8:9e:4d:69:62:b8:41:dd:
f6:70:ce:de:e6:61:5e:b8:0f:66:98:ec:e2:04:be:
b0:bc:a8:c1:aa:c1:9e:ca:78:34:e4:25:4c:e7:ae:
df:fc:5c:ab:26:85:38:80:bf:9d:c6:f5:ee:a6:dc:
43:e5:24:89:d5:a7:e2:dd:ab:16:55:cf:5d:f7:ff:
f2:26:0e:2d:d5:ab:f7:4d:5f:8d:64:f1:e1:18:92:
87:cf:16:ce:d7:73:75:8f:a6:ab:84:52:15:b8:a4:
48:da:20:99:96:87:6f:06:93:92:0d:57:9d:58:96:
0b:d8:48:6e:07:ae:66:99:93:2e:0b:77:80:8f:5e:
a9:9a:6c:d9:f8:7a:f0:6c:bf:4c:cc:2b:1f:f1:3a:
bf:2c:0c:a7:46:3f:62:de:0f:37:1e:88:32:ab:4c:
02:29:5b:51:58:2d:8c:69:28:70:97:3a:cb:95:00:
f5:17:89:18:a9:7a:66:76:cc:be:a9:fa:d8:5a:ca:
89:36:0f:65:b9:ea:af:8c:c9:c7:c6:7a:ca:34:0a:
3e:70:f6:1a:50:fc:6a:c9:ef:2e:ec:6a:fc:aa:2f:
ab:9a:68:58:d1:16:fa:f4:f7:11:8e:57:8a:68:26:
c2:8d:ae:90:f3:6b:c2:10:1b:d2:a2:b3:f2:ae:b0:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3C:C3:BB:C2:98:46:F0:6B:8D:0C:1F:FE:A0:2A:25:40:4A:54:9E
X509v3 Authority Key Identifier:
keyid:20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e0:2a:74:15:ac:ff:ff:65:e8:fa:01:83:4d:38:c1:01:7c:
9e:6c:31:93:f5:78:35:32:19:f1:4b:d2:08:e5:87:b2:ff:9d:
99:ca:a8:19:cc:d5:c3:a6:69:53:de:8f:1a:23:d6:11:da:5b:
14:00:74:67:c3:18:e0:74:c3:f2:f9:16:67:26:c3:9d:47:27:
8f:9f:be:c5:37:df:64:82:89:d4:f7:59:e2:bd:27:d7:81:c6:
19:e5:94:f2:7d:ee:d5:a4:ba:3c:f5:65:48:c3:38:10:90:b4:
b5:b8:8b:ee:9c:b6:32:e9:4c:5d:ee:d2:69:67:6a:fc:98:01:
ef:9f:a3:c9:af:21:f8:3f:ae:f1:cc:e1:30:24:55:e8:cd:34:
3f:1a:15:73:3f:b9:66:8c:c3:04:a9:34:7b:4d:50:6d:68:57:
f3:94:ce:00:86:45:40:aa:57:81:e4:60:d4:4d:3e:36:d1:b7:
f2:a7:bd:49:5c:12:e0:ed:24:3c:b2:07:e3:b8:64:16:5b:89:
d3:3c:11:cb:8f:7c:75:85:93:06:9b:62:f6:59:f3:b6:c9:7b:
b3:2c:0c:68:79:d4:a8:29:d9:87:a1:ea:fe:2a:68:14:24:aa:
9c:94:2f:6a:0c:5f:20:02:07:11:e1:ee:8d:ca:6d:35:6d:f0:
e8:ea:59:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMOr4sP8RhXC0+x3Dby5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzhkNWMzNzNhNmJmM2JhYjIyOTM5NDM2MGI4NmQwMDk2
YWVjYmQwHhcNMjUwMTMxMTEwMDE2WhcNMjUwMjAxMTEwMDE2WjAzMTEwLwYDVQQD
Eyg4OTNjYzNiYmMyOTg0NmYwNmI4ZDBjMWZmZWEwMmEyNTQwNGE1NDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VLDKIQR2J5NaWK4Qd32cM7e5mFe
uA9mmOziBL6wvKjBqsGeyng05CVM567f/FyrJoU4gL+dxvXuptxD5SSJ1afi3asW
Vc9d9//yJg4t1av3TV+NZPHhGJKHzxbO13N1j6arhFIVuKRI2iCZlodvBpOSDVed
WJYL2EhuB65mmZMuC3eAj16pmmzZ+HrwbL9MzCsf8Tq/LAynRj9i3g83Hogyq0wC
KVtRWC2MaShwlzrLlQD1F4kYqXpmdsy+qfrYWsqJNg9lueqvjMnHxnrKNAo+cPYa
UPxqye8u7Gr8qi+rmmhY0Rb69PcRjleKaCbCja6Q82vCEBvSorPyrrDNlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk8w7vCmEbwa40MH/6gKiVASlSeMB8GA1UdIwQY
MBaAFCDI1cNzpr87qyKTlDYLhtAJauy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1qVnczT212enVySXBPVU5ndUcwQWxxN0wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZTk4NTUtNTk4OS00ODZlLTk0MzYt
NTBhN2M5MjU5MWQwLzEvSU1qVnczT212enVySXBPVU5ndUcwQWxxN0wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZTk4NTUtNTk4OS00ODZlLTk0MzYtNTBhN2M5MjU5MWQw
LzEvSU1qVnczT212enVySXBPVU5ndUcwQWxxN0wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeAqdBWs
//9l6PoBg004wQF8nmwxk/V4NTIZ8UvSCOWHsv+dmcqoGczVw6ZpU96PGiPWEdpb
FAB0Z8MY4HTD8vkWZybDnUcnj5++xTffZIKJ1PdZ4r0n14HGGeWU8n3u1aS6PPVl
SMM4EJC0tbiL7py2MulMXe7SaWdq/JgB75+jya8h+D+u8czhMCRV6M00PxoVcz+5
ZozDBKk0e01QbWhX85TOAIZFQKpXgeRg1E0+NtG38qe9SVwS4O0kPLIH47hkFluJ
0zwRy498dYWTBpti9lnztsl7sywMaHnUqCnZh6Hq/ipoFCSqnJQvagxfIAIHEeHu
jcptNW3w6OpZvQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:25 2025 by rpki-client