Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: xoLReLbVuvsiLreprbbcAm02kHoJQn5WgZOX9gTq+cg=
Subject key identifier: 87:85:FB:0B:74:52:43:8E:14:63:C6:88:90:65:9C:FE:47:38:F6:BE
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 0194BC3C8AAC5881EDD21223376FCD0C7D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: WpVhMn6iYFKnAWt5H7hbaDskLOO3C1XfxaSMV7OgWmk=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:ac:58:81:ed:d2:12:23:37:6f:cd:0c:7d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=8785fb0b7452438e1463c68890659cfe4738f6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:eb:ea:fa:7c:bb:00:87:31:e3:13:b3:85:
95:82:f5:f6:62:94:f0:df:42:f9:b4:24:3b:1a:2e:
47:a5:94:a2:e4:58:e0:e7:97:2b:10:85:2e:45:7f:
83:62:cd:f3:95:a7:7b:52:0f:43:3f:b7:2f:6b:49:
ea:71:9e:20:a3:9e:d2:3c:49:31:dc:56:aa:d3:3c:
7e:df:ea:5f:3d:cf:70:f9:4e:ff:83:8e:07:af:cd:
ae:00:dd:ef:d1:3a:5f:33:4e:f4:2d:1c:0e:0f:7e:
4d:cc:7e:74:97:57:3b:53:99:7c:1e:a1:03:e6:e0:
c9:4b:f0:ef:e7:cc:69:a7:82:7d:cb:35:b9:c7:5f:
a0:5f:80:d1:48:2f:8a:5e:3f:63:b3:b8:c6:ea:a9:
3d:17:f6:11:7f:57:0a:3e:6b:27:fc:de:c1:78:70:
34:f3:a5:23:2f:bf:50:7c:10:83:dd:41:f7:1d:0a:
d8:8d:8d:61:de:2e:07:47:61:5d:4e:92:ae:14:cd:
78:f5:6f:53:52:83:23:49:4b:d8:50:7b:a4:13:cd:
af:1a:38:44:c7:5a:70:a3:61:81:33:dd:f5:71:1b:
d2:2c:18:af:b9:8e:73:c6:78:f9:42:59:f1:a4:06:
e2:11:3b:d8:95:ed:2d:6b:22:a2:b8:aa:41:b1:ea:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:FB:0B:74:52:43:8E:14:63:C6:88:90:65:9C:FE:47:38:F6:BE
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d9:2e:de:9c:fe:1c:ea:2d:ce:c9:ea:e2:c4:68:5e:81:64:
b9:22:09:94:fd:13:e7:3d:5e:91:bb:a0:35:fd:59:ed:01:9a:
c7:e9:93:76:fa:8d:1e:aa:f1:b7:ed:85:13:d3:81:a6:ae:72:
2c:1f:48:0b:9a:cc:a7:36:f6:f3:56:d7:f0:88:8c:a0:fd:97:
6a:85:9a:48:7a:e1:6e:85:cc:6f:a1:35:e4:83:52:c5:0e:2c:
0e:d3:83:d9:ef:cd:62:fb:31:70:45:e6:72:a9:d8:8c:8f:46:
9c:f9:04:06:4e:6c:3c:b6:7f:6c:c5:6a:d0:1a:22:c3:71:cf:
7b:29:fe:63:1b:21:e7:be:ca:2d:32:01:7f:a0:31:ab:3a:6f:
b7:e0:7a:be:3a:98:19:93:9d:14:a0:72:3d:1f:c7:b3:90:75:
d7:61:86:24:04:e8:25:55:e6:a8:63:ff:da:14:9d:b9:cf:3c:
68:50:b7:65:dd:00:d5:b9:c1:b1:f9:89:d4:3e:7b:b3:91:3e:
e3:96:73:a0:12:1b:d4:7e:3e:7a:88:d9:ca:2a:73:94:05:32:
43:63:dc:7b:a3:54:9e:13:7b:a9:b8:52:1c:d5:bd:4f:50:fe:
b3:b2:06:4c:40:35:3f:02:4f:87:28:c8:e5:d4:08:a6:a7:a2:
26:65:7f:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIqsWIHt0hIjN2/NDH1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmI0YTBjNDZlYTkxZTcwNjBmYjI5NDI2YTEzMjMzODUy
Njg0OTUwHhcNMjUwMTMxMTIwMTExWhcNMjUwMjAxMTIwMTExWjAzMTEwLwYDVQQD
Eyg4Nzg1ZmIwYjc0NTI0MzhlMTQ2M2M2ODg5MDY1OWNmZTQ3MzhmNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol3r6vp8uwCHMeMTs4WVgvX2YpTw
30L5tCQ7Gi5HpZSi5Fjg55crEIUuRX+DYs3zlad7Ug9DP7cva0nqcZ4go57SPEkx
3Faq0zx+3+pfPc9w+U7/g44Hr82uAN3v0TpfM070LRwOD35NzH50l1c7U5l8HqED
5uDJS/Dv58xpp4J9yzW5x1+gX4DRSC+KXj9js7jG6qk9F/YRf1cKPmsn/N7BeHA0
86UjL79QfBCD3UH3HQrYjY1h3i4HR2FdTpKuFM149W9TUoMjSUvYUHukE82vGjhE
x1pwo2GBM931cRvSLBivuY5zxnj5QlnxpAbiETvYle0tayKiuKpBseqfbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeF+wt0UkOOFGPGiJBlnP5HOPa+MB8GA1UdIwQY
MBaAFCD7SgxG6pHnBg+ylCahMjOFJoSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUt
ZmNhZjRjZGQxNjYzLzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUtZmNhZjRjZGQxNjYz
LzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNku3pz+
HOotzsnq4sRoXoFkuSIJlP0T5z1ekbugNf1Z7QGax+mTdvqNHqrxt+2FE9OBpq5y
LB9IC5rMpzb281bX8IiMoP2XaoWaSHrhboXMb6E15INSxQ4sDtOD2e/NYvsxcEXm
cqnYjI9GnPkEBk5sPLZ/bMVq0Boiw3HPeyn+Yxsh577KLTIBf6Axqzpvt+B6vjqY
GZOdFKByPR/Hs5B112GGJAToJVXmqGP/2hSduc88aFC3Zd0A1bnBsfmJ1D57s5E+
45ZzoBIb1H4+eojZyipzlAUyQ2Pce6NUnhN7qbhSHNW9T1D+s7IGTEA1PwJPhyjI
5dQIpqeiJmV/sg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:19 2025 by rpki-client