Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: Vx15tYYnr59GH+3o5p5oEuTPlizyEMiVlpKQwGx6E7Q=
Subject key identifier: 0A:00:FD:39:EB:39:9E:04:99:66:F8:7B:85:CD:3B:6C:B7:3E:0F:40
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 0194BC732420606D91EAF850E1631729C2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 07BB
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: cIg/J4J1QdFpgvKiQtH6bSTzWw77VEksbkd+HY/dzlE=)
2: t1D8WcZZnzqJuCrc2wQ7cw0wRmQ.roa (hash: vevggXMbyMvGr4MH92p9uOdv+lx11daC42qLpllimKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:24:20:60:6d:91:ea:f8:50:e1:63:17:29:c2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=0a00fd39eb399e049966f87b85cd3b6cb73e0f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:fd:12:1a:c4:09:fb:a7:c2:6b:50:0a:06:
09:84:e6:0b:d6:88:54:bc:6f:aa:5d:46:fc:24:fe:
db:23:43:d5:d8:9c:c5:6d:95:fc:79:c3:28:53:25:
af:85:bf:73:11:6d:98:09:2a:09:da:c4:9b:f7:43:
f1:94:93:00:83:13:40:66:d2:eb:8b:21:b0:cf:d1:
16:4d:08:45:d8:68:a3:4a:c8:d0:e7:b4:89:e3:4d:
de:c7:ec:0a:71:23:81:50:55:94:15:d7:b3:f2:7a:
93:a8:11:10:92:de:1c:61:d7:a1:74:c1:49:e0:0e:
95:42:01:86:d4:54:0f:d9:c0:55:93:a3:49:06:55:
e8:d1:15:e7:c9:38:4b:2b:75:d3:2a:15:ee:52:8b:
8d:5a:f3:ae:54:d2:4d:0e:c7:5a:80:1c:7b:b8:5a:
38:b7:93:c2:4b:ae:1b:3f:94:f5:69:88:d3:25:2b:
62:3a:24:2d:ae:d9:5a:98:24:ac:dc:9a:38:66:07:
31:b6:0e:15:4f:ca:ad:55:ee:db:68:09:ec:27:94:
ed:2d:0c:9f:bf:c5:d0:a2:e3:cb:0f:36:5e:0d:22:
1b:6f:8a:6b:37:3d:41:00:eb:ee:fe:33:e5:68:92:
df:24:61:4f:a2:bd:e6:a8:28:69:a1:2d:5d:e3:32:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:00:FD:39:EB:39:9E:04:99:66:F8:7B:85:CD:3B:6C:B7:3E:0F:40
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:33:b1:a8:44:0a:4f:a3:2a:cf:3b:fc:eb:ca:d1:c7:4c:1e:
92:60:9b:f9:51:54:01:f6:7e:fa:84:df:3f:48:32:25:0d:58:
d4:77:6e:70:47:0d:ed:a5:5e:1e:46:6f:66:b6:11:c3:00:bf:
59:5b:92:d6:e1:b4:62:60:99:96:17:ac:2f:34:33:3c:de:dd:
f2:a0:5c:2e:a4:03:50:81:d6:1f:c3:82:a5:4e:04:29:ca:d8:
9f:06:94:32:ca:40:e4:a3:be:4c:3c:9d:72:07:f3:83:19:7a:
2a:4e:92:da:b4:c0:97:70:7c:3a:4a:39:8f:90:a5:a1:fc:e1:
0f:da:42:8c:36:1b:af:9f:0b:f3:8d:38:05:30:6c:bd:66:60:
f2:e2:73:a4:20:e8:ca:0c:cb:6b:0b:30:c2:3a:7a:47:47:1c:
42:d6:2a:99:38:98:d5:81:4f:a1:51:18:b8:70:00:99:aa:1e:
ff:e1:73:ce:53:5f:68:db:de:d1:a9:91:4b:8b:cd:7d:78:a8:
b4:85:5e:7f:e3:3f:5e:01:1d:25:81:e4:48:ec:b4:8c:54:44:
2b:2b:f7:b6:bb:56:99:34:f6:e9:55:8d:cf:4c:56:6d:cf:58:
bb:c5:37:e5:01:f2:87:66:c8:9a:e3:41:c7:00:88:37:ae:4f:
77:32:36:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyQgYG2R6vhQ4WMXKcLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWYwYWQ1NTcyYmFlMjZlMzljODc0MGM2OGE4ZmJiNDZl
ZTQ4NjQwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
EygwYTAwZmQzOWViMzk5ZTA0OTk2NmY4N2I4NWNkM2I2Y2I3M2UwZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tz9EhrECfunwmtQCgYJhOYL1ohU
vG+qXUb8JP7bI0PV2JzFbZX8ecMoUyWvhb9zEW2YCSoJ2sSb90PxlJMAgxNAZtLr
iyGwz9EWTQhF2GijSsjQ57SJ403ex+wKcSOBUFWUFdez8nqTqBEQkt4cYdehdMFJ
4A6VQgGG1FQP2cBVk6NJBlXo0RXnyThLK3XTKhXuUouNWvOuVNJNDsdagBx7uFo4
t5PCS64bP5T1aYjTJStiOiQtrtlamCSs3Jo4Zgcxtg4VT8qtVe7baAnsJ5TtLQyf
v8XQouPLDzZeDSIbb4prNz1BAOvu/jPlaJLfJGFPor3mqChpoS1d4zIoTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoA/TnrOZ4EmWb4e4XNO2y3Pg9AMB8GA1UdIwQY
MBaAFIofCtVXK64m45yHQMaKj7tG7khkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzkt
MDNmMjNhNzM5NDFkLzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzktMDNmMjNhNzM5NDFk
LzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjOxqEQK
T6Mqzzv868rRx0wekmCb+VFUAfZ++oTfP0gyJQ1Y1HducEcN7aVeHkZvZrYRwwC/
WVuS1uG0YmCZlhesLzQzPN7d8qBcLqQDUIHWH8OCpU4EKcrYnwaUMspA5KO+TDyd
cgfzgxl6Kk6S2rTAl3B8Oko5j5ClofzhD9pCjDYbr58L8404BTBsvWZg8uJzpCDo
ygzLawswwjp6R0ccQtYqmTiY1YFPoVEYuHAAmaoe/+FzzlNfaNve0amRS4vNfXio
tIVef+M/XgEdJYHkSOy0jFREKyv3trtWmTT26VWNz0xWbc9Yu8U35QHyh2bImuNB
xwCIN65PdzI2UA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:11 2025 by rpki-client