Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: RERXINwRKGJHwTfe/M5o5PiMFeBgxym51aLFgOWIl4E=
Subject key identifier: 7F:F7:7A:CC:EC:A4:38:67:E6:6F:8D:8F:66:D2:97:B0:26:17:E3:11
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 0194BD175F410E6C8BD3DF0CDC7128A94545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 0C9B
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: MyGeYV95khIyrqOLfCisGSvseBNP3s3JMSRAZblpszo=)
2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5f:41:0e:6c:8b:d3:df:0c:dc:71:28:a9:45:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=7ff77acceca43867e66f8d8f66d297b02617e311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:75:54:f9:99:78:47:35:6f:25:75:a2:c1:
dd:ff:e3:28:d5:c6:8b:5a:88:56:8b:21:38:10:22:
81:1c:b9:de:d6:81:75:69:7d:99:81:bf:3a:af:c9:
d6:74:78:9d:a1:d2:9b:83:04:7a:b2:f9:e0:59:b9:
e9:42:a5:d0:16:eb:12:0c:39:87:60:0c:f3:55:80:
dd:8b:f2:be:2f:8b:72:b6:fc:45:a9:94:b1:bb:45:
bd:95:ca:f4:1a:63:bd:cb:a2:d9:4f:3d:02:28:e0:
29:2c:ed:82:16:53:31:71:cd:7b:50:25:30:81:f6:
fb:a2:40:c2:01:62:e0:36:a7:58:63:1d:a6:a1:14:
56:dd:59:6d:dc:a5:c7:68:ba:18:34:04:cd:73:5d:
45:46:de:55:24:f2:a2:78:e8:91:a3:29:fd:f7:0b:
fd:e7:db:b9:9e:36:df:56:ad:12:d1:97:e1:96:73:
45:b5:c5:a3:f4:eb:9a:e7:7f:5b:de:8d:60:e2:e4:
99:ec:6a:28:b1:e0:a1:08:b6:31:bf:e9:fb:b0:b0:
bc:a6:80:8d:54:31:ca:48:3d:5f:26:33:7e:a2:11:
7e:0b:71:bd:f6:6e:be:01:33:23:cf:5b:20:94:25:
d3:83:b0:06:45:3b:14:c3:ba:1c:23:5d:0a:02:ae:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:7A:CC:EC:A4:38:67:E6:6F:8D:8F:66:D2:97:B0:26:17:E3:11
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:75:27:36:14:6a:10:89:a1:f2:99:59:77:73:74:80:54:85:
53:32:d6:ad:8b:a9:f2:2d:3f:d9:7f:93:bc:6b:eb:0a:0b:7c:
d9:8b:e3:5e:0e:08:03:19:d4:79:68:88:a4:e6:48:5c:6d:b4:
f3:30:66:ae:28:b0:31:63:9f:03:b8:02:2e:15:20:8b:d3:61:
1c:db:15:3b:7e:6a:cd:69:54:a0:78:8b:b8:c2:3f:ad:4c:a3:
2f:88:d6:2b:de:28:71:fa:75:87:80:bd:17:01:be:2c:ad:e7:
9f:b9:66:3d:35:28:81:eb:0f:e9:42:28:40:2f:26:0f:3c:b3:
e9:5c:9f:06:53:6c:3a:36:54:6c:79:33:9e:2d:39:ad:04:e6:
13:ea:c0:27:06:c1:2b:29:8e:d9:72:76:e2:65:d5:ed:52:eb:
af:6e:85:68:97:b9:e2:0b:bf:36:a0:11:1e:a0:b8:0a:a6:6c:
f0:b5:a1:ab:5f:91:92:1b:d9:b6:77:97:12:1d:06:3b:08:9e:
21:96:fd:fe:70:39:60:75:73:1c:c5:07:56:dc:36:90:5e:80:
d1:b9:ff:6c:3d:27:18:31:07:53:7e:d5:40:f7:80:a2:8a:1c:
f9:ac:f4:3e:2e:8a:be:dd:8f:02:32:ec:28:eb:61:ad:a7:ad:
a9:f2:a1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F19BDmyL098M3HEoqUVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODQ4MTYyODkyODMxYWRkNWEwN2Q0MzAyZTdmY2ZmZjUy
ZjAyZmQwHhcNMjUwMTMxMTYwMDEzWhcNMjUwMjAxMTYwMDEzWjAzMTEwLwYDVQQD
Eyg3ZmY3N2FjY2VjYTQzODY3ZTY2ZjhkOGY2NmQyOTdiMDI2MTdlMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/51VPmZeEc1byV1osHd/+Mo1caL
WohWiyE4ECKBHLne1oF1aX2Zgb86r8nWdHidodKbgwR6svngWbnpQqXQFusSDDmH
YAzzVYDdi/K+L4tytvxFqZSxu0W9lcr0GmO9y6LZTz0CKOApLO2CFlMxcc17UCUw
gfb7okDCAWLgNqdYYx2moRRW3Vlt3KXHaLoYNATNc11FRt5VJPKieOiRoyn99wv9
59u5njbfVq0S0ZfhlnNFtcWj9Oua539b3o1g4uSZ7GooseChCLYxv+n7sLC8poCN
VDHKSD1fJjN+ohF+C3G99m6+ATMjz1sglCXTg7AGRTsUw7ocI10KAq4qXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/3eszspDhn5m+Nj2bSl7AmF+MRMB8GA1UdIwQY
MBaAFJSEgWKJKDGt1aB9QwLn/P/1LwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYt
MTE5YzNlNzQ3OWQ5LzEvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYtMTE5YzNlNzQ3OWQ5
LzEvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHUnNhRq
EImh8plZd3N0gFSFUzLWrYup8i0/2X+TvGvrCgt82YvjXg4IAxnUeWiIpOZIXG20
8zBmriiwMWOfA7gCLhUgi9NhHNsVO35qzWlUoHiLuMI/rUyjL4jWK94ocfp1h4C9
FwG+LK3nn7lmPTUogesP6UIoQC8mDzyz6VyfBlNsOjZUbHkzni05rQTmE+rAJwbB
KymO2XJ24mXV7VLrr26FaJe54gu/NqARHqC4CqZs8LWhq1+RkhvZtneXEh0GOwie
IZb9/nA5YHVzHMUHVtw2kF6A0bn/bD0nGDEHU37VQPeAoooc+az0Pi6Kvt2PAjLs
KOthraetqfKhqg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:07 2025 by rpki-client