Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: OF+9Il61vwQ7K/CsuhVb5o7Q1L/T+0BN5tOvGvzWCko=
Subject key identifier: D5:95:5F:19:85:73:9A:97:3B:C9:12:78:2C:39:CF:D8:AC:A8:E8:2F
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 0194BC3BE8A908A81846B0E557F9A058DCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: wdAULjiGVXI27N8w4RO/FJqht1jgrdwEjiHEALQqyQw=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e8:a9:08:a8:18:46:b0:e5:57:f9:a0:58:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=d5955f1985739a973bc912782c39cfd8aca8e82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:5e:1e:d9:ba:e5:6d:9b:ca:72:35:81:98:
0d:6a:ee:e5:1b:18:54:33:76:f8:91:8c:23:80:fa:
98:4d:22:f8:ff:29:ac:71:ec:b4:2f:d4:b3:ce:29:
f7:23:69:fc:c0:5e:51:53:7e:a3:33:bf:6f:63:5b:
f5:84:bf:6b:20:57:bb:d2:de:5e:49:48:ce:15:6c:
6c:1a:9f:0e:9d:d8:e9:fc:b8:80:14:9d:2d:c0:81:
6b:6e:19:0d:51:f5:9b:a1:3a:14:21:d4:4f:a5:60:
c5:8f:77:75:e4:da:39:69:04:85:30:99:09:e0:b6:
ff:5f:cc:c6:57:83:c0:a8:63:6d:c5:59:7e:3e:3c:
a8:6f:e8:20:8d:22:12:3d:67:6d:b7:86:80:5c:95:
3f:a9:32:b4:2a:26:30:e1:4f:8d:83:88:48:32:2d:
b6:a4:f2:b1:1f:08:21:3e:a7:c2:56:6f:b4:ae:60:
16:ed:0c:70:9b:73:98:3c:08:90:22:7e:ef:b7:af:
51:f7:e5:9d:ed:d8:a2:0f:bd:95:e2:1f:7e:cc:00:
d0:91:bd:91:1d:db:6f:98:d5:8c:ae:89:b7:1e:64:
c9:52:a1:03:1c:c5:32:09:96:1f:17:ef:87:94:05:
1d:fe:36:08:ba:b0:e3:be:78:08:08:30:c5:c7:d3:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:95:5F:19:85:73:9A:97:3B:C9:12:78:2C:39:CF:D8:AC:A8:E8:2F
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:40:c4:e0:bb:e4:d5:02:a0:ae:2d:dc:8a:ca:c8:15:72:a2:
e5:35:ac:4f:4f:f2:e5:0b:97:69:85:e6:8f:15:6a:81:ae:ba:
81:b0:ac:d9:52:fb:c9:f7:b9:b2:db:b3:93:08:f8:4e:57:37:
e5:8e:7a:1f:ba:b3:6b:44:22:ab:10:87:1d:d7:c0:81:fc:7e:
74:56:10:94:f3:e1:88:af:50:7a:2f:b2:57:3c:93:00:e5:f4:
79:2f:e0:b7:9e:67:13:3e:54:09:f6:cd:cf:1b:bd:52:b4:7e:
79:21:fa:f0:3f:6a:c7:e6:75:06:a2:89:70:73:c3:4d:53:7a:
07:7e:81:15:63:cc:ea:f9:dc:93:6a:9a:20:c8:0b:2c:8b:6e:
d6:92:d8:ba:7a:08:e8:56:db:d4:89:d2:7d:a4:c6:c1:ea:9e:
ad:88:90:07:16:05:14:c6:c0:ca:42:17:47:a4:74:93:08:8c:
e8:07:8a:d9:9b:77:90:71:3a:3b:bc:60:65:80:d6:42:6b:76:
2a:3e:7c:cd:8e:76:1e:3c:8c:fb:ae:16:0e:37:b3:ed:75:c8:
e9:3f:b3:97:46:d9:a0:4c:ca:c0:af:c5:a8:d3:40:dd:55:35:
bf:15:57:0f:c7:0b:90:40:24:94:65:dc:d4:e8:f8:5f:dd:9b:
aa:5a:b9:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+ipCKgYRrDlV/mgWNy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2RiMjgxZmI2NWYwMjhiN2NkY2FiOWM0NzA2ZWE3YzQ1
OTQwMjIwHhcNMjUwMTMxMTIwMDMwWhcNMjUwMjAxMTIwMDMwWjAzMTEwLwYDVQQD
EyhkNTk1NWYxOTg1NzM5YTk3M2JjOTEyNzgyYzM5Y2ZkOGFjYThlODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupFeHtm65W2bynI1gZgNau7lGxhU
M3b4kYwjgPqYTSL4/ymscey0L9Szzin3I2n8wF5RU36jM79vY1v1hL9rIFe70t5e
SUjOFWxsGp8Ondjp/LiAFJ0twIFrbhkNUfWboToUIdRPpWDFj3d15No5aQSFMJkJ
4Lb/X8zGV4PAqGNtxVl+Pjyob+ggjSISPWdtt4aAXJU/qTK0KiYw4U+Ng4hIMi22
pPKxHwghPqfCVm+0rmAW7Qxwm3OYPAiQIn7vt69R9+Wd7diiD72V4h9+zADQkb2R
HdtvmNWMrom3HmTJUqEDHMUyCZYfF++HlAUd/jYIurDjvngICDDFx9MCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWVXxmFc5qXO8kSeCw5z9isqOgvMB8GA1UdIwQY
MBaAFIrNsoH7ZfAot83KucRwbqfEWUAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mN2E2YTMtNzFmMy00NDgyLWIwYzUt
ZmFjMzQ2NDAwMzY5LzEvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mN2E2YTMtNzFmMy00NDgyLWIwYzUtZmFjMzQ2NDAwMzY5
LzEvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0DE4Lvk
1QKgri3cisrIFXKi5TWsT0/y5QuXaYXmjxVqga66gbCs2VL7yfe5stuzkwj4Tlc3
5Y56H7qza0QiqxCHHdfAgfx+dFYQlPPhiK9Qei+yVzyTAOX0eS/gt55nEz5UCfbN
zxu9UrR+eSH68D9qx+Z1BqKJcHPDTVN6B36BFWPM6vnck2qaIMgLLItu1pLYunoI
6Fbb1InSfaTGweqerYiQBxYFFMbAykIXR6R0kwiM6AeK2Zt3kHE6O7xgZYDWQmt2
Kj58zY52HjyM+64WDjez7XXI6T+zl0bZoEzKwK/FqNNA3VU1vxVXD8cLkEAklGXc
1Oj4X92bqlq58Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:36 2025 by rpki-client