Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: ol+acTCbBAgjIoq9+cIO/dvmjn2zqAeOEcSNywD+vCE=
Subject key identifier: 83:9F:18:35:EC:5F:80:D2:1B:73:25:CE:E0:DC:55:50:4C:AF:EF:C6
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 0194BD858C4B51A13DAF0CF2C4EAD2F33539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: J+n+WuPpJaBVoB7I8OuUMWOgYT0jhEKr8hVBdClBL/0=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8c:4b:51:a1:3d:af:0c:f2:c4:ea:d2:f3:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=839f1835ec5f80d21b7325cee0dc55504cafefc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a8:5e:5c:1c:ad:14:28:e3:5b:60:44:3b:1a:
b3:9d:71:1d:9d:58:06:2b:c6:53:7f:f9:38:15:a2:
e5:22:2b:96:07:b4:28:de:d2:b6:b6:01:e2:f0:dc:
92:1f:aa:cb:bb:a0:bc:b4:b7:b2:73:d8:af:28:fb:
f4:77:0e:ad:bd:f4:fe:7f:66:cd:9d:fa:79:1c:ea:
28:24:d6:28:f4:6b:44:15:09:06:58:31:81:ec:28:
1a:b9:ef:8f:26:2b:33:99:28:96:44:5c:92:dc:af:
a8:b0:56:cd:bb:3a:d5:8e:ec:1f:2c:4c:4e:b2:7f:
3b:83:61:55:21:a7:19:55:27:9d:87:b4:f5:8a:7c:
eb:0c:73:a5:8b:d9:ae:8b:2c:c1:99:df:76:a8:91:
e2:41:91:7f:91:c6:13:d9:67:0f:52:87:4b:71:84:
c8:f8:68:34:38:4c:e7:6b:ad:ee:13:77:ef:e0:70:
aa:ad:14:07:d3:c3:97:3d:c0:33:e1:3a:95:2f:18:
48:3d:fb:0f:f5:2c:0d:22:6e:04:5e:ba:6f:bb:8f:
af:63:90:33:f0:e5:9a:f5:72:86:bc:70:c7:79:93:
ab:72:8a:75:42:db:95:49:bc:fd:e7:05:6b:7d:8c:
60:56:25:ff:c5:96:fe:97:72:a4:16:b9:d4:7e:08:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:18:35:EC:5F:80:D2:1B:73:25:CE:E0:DC:55:50:4C:AF:EF:C6
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:73:65:2e:bd:f9:4b:89:8f:10:45:e7:72:e7:16:75:e2:
33:fb:a8:6e:ac:f5:e8:89:be:00:da:e3:0f:f9:b9:de:69:12:
c6:7d:c6:e2:5a:0e:f6:99:bb:77:1b:74:d0:85:36:d4:b5:29:
7a:b0:e7:67:63:0e:df:b2:2c:db:45:3c:2a:2b:bc:35:af:a5:
e7:81:2d:b8:63:a5:7d:40:b0:80:9d:24:5d:51:c2:4b:31:03:
b7:43:2e:e3:40:cc:9d:79:66:e9:c7:71:06:ec:8c:ff:f7:cf:
97:07:eb:25:d1:86:52:90:1d:73:d7:89:64:7b:ed:af:92:d6:
d1:01:ac:9a:c0:2f:39:31:03:4c:69:2f:0a:a9:1c:58:c7:66:
02:c7:fc:42:be:85:f2:94:5b:43:90:ce:25:ed:9d:57:39:59:
9e:7f:ea:be:93:16:39:92:92:47:05:1a:64:1b:af:f9:a6:0b:
aa:74:6c:80:fa:54:4c:53:4a:83:0b:22:dc:28:92:0b:26:3d:
cb:93:66:33:d4:ce:72:74:f2:e1:f9:2f:85:31:98:85:ea:a6:
13:29:3f:63:dd:b4:a3:5e:6b:74:ba:85:3a:ae:5e:28:80:77:
28:a5:b9:4d:8f:44:08:3e:15:1d:12:78:d9:cd:01:0c:5c:9b:
da:68:4b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYxLUaE9rwzyxOrS8zU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5
YzE4ZDUwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
Eyg4MzlmMTgzNWVjNWY4MGQyMWI3MzI1Y2VlMGRjNTU1MDRjYWZlZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96heXBytFCjjW2BEOxqznXEdnVgG
K8ZTf/k4FaLlIiuWB7Qo3tK2tgHi8NySH6rLu6C8tLeyc9ivKPv0dw6tvfT+f2bN
nfp5HOooJNYo9GtEFQkGWDGB7Cgaue+PJiszmSiWRFyS3K+osFbNuzrVjuwfLExO
sn87g2FVIacZVSedh7T1inzrDHOli9muiyzBmd92qJHiQZF/kcYT2WcPUodLcYTI
+Gg0OEzna63uE3fv4HCqrRQH08OXPcAz4TqVLxhIPfsP9SwNIm4EXrpvu4+vY5Az
8OWa9XKGvHDHeZOrcop1QtuVSbz95wVrfYxgViX/xZb+l3KkFrnUfggqOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOfGDXsX4DSG3MlzuDcVVBMr+/GMB8GA1UdIwQY
MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt
MzM0MTU5NjdjMjEzLzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz
LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOZzZS69
+UuJjxBF53LnFnXiM/uobqz16Im+ANrjD/m53mkSxn3G4loO9pm7dxt00IU21LUp
erDnZ2MO37Is20U8Kiu8Na+l54EtuGOlfUCwgJ0kXVHCSzEDt0Mu40DMnXlm6cdx
BuyM//fPlwfrJdGGUpAdc9eJZHvtr5LW0QGsmsAvOTEDTGkvCqkcWMdmAsf8Qr6F
8pRbQ5DOJe2dVzlZnn/qvpMWOZKSRwUaZBuv+aYLqnRsgPpUTFNKgwsi3CiSCyY9
y5NmM9TOcnTy4fkvhTGYheqmEyk/Y920o15rdLqFOq5eKIB3KKW5TY9ECD4VHRJ4
2c0BDFyb2mhLDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:32 2025 by rpki-client