Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: rhwK2Q0V3qWVjK3ZDQ3FGtWjTr/xW+lhM0pPn7+UHC8=
Subject key identifier: DB:40:F0:E9:A2:CF:06:7B:2D:45:EF:71:2E:D2:5D:DF:58:E2:21:79
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 0194BCE0C6167B8D97009D2A19DE7C3D4427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 02AF
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=)
2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=)
3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: MbnNW27Dvgn3Ed0OPtxp/tMCCXOIslKtiFfChvWSpQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c6:16:7b:8d:97:00:9d:2a:19:de:7c:3d:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=db40f0e9a2cf067b2d45ef712ed25ddf58e22179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:42:f4:85:38:c5:4d:9a:b9:26:40:ea:f8:
d8:20:b7:88:8c:4c:a7:0c:38:4d:fe:8d:83:f1:a7:
da:0c:70:da:69:e8:c5:78:e3:f1:46:37:47:d5:26:
e9:df:da:80:dc:e7:b6:62:ce:62:d8:f6:bf:6b:4e:
7a:08:cb:f4:a3:5e:03:0d:a2:e7:49:76:c9:0c:f6:
28:9d:58:6d:a3:0c:d1:f3:02:ac:87:d9:40:e5:c8:
17:34:e0:42:c2:94:a7:18:f5:16:aa:1f:85:19:41:
56:9b:f6:44:bf:40:89:85:41:4b:d8:4d:c9:25:8f:
95:12:1f:55:38:a4:d6:52:60:5d:01:1a:4d:92:ec:
1f:ba:50:7d:25:52:5a:5b:40:1a:f5:d6:11:6b:01:
f0:5b:dd:9f:8a:61:1d:9c:38:41:ea:4b:16:63:91:
6b:44:90:b1:1c:8c:b9:97:d3:c5:0e:16:ea:5d:14:
20:5a:2e:53:71:48:0d:a3:93:a0:19:3e:0d:8f:87:
03:0d:0e:77:c1:65:f6:23:c8:f5:d9:19:c3:f4:ea:
2c:28:fa:51:b7:ab:47:9f:b4:c3:95:b9:f4:9c:e5:
37:64:15:f9:bb:44:44:d6:47:41:5d:c3:2b:5c:e6:
9b:d7:b8:48:c3:22:ff:56:77:d8:cc:88:d4:93:11:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:40:F0:E9:A2:CF:06:7B:2D:45:EF:71:2E:D2:5D:DF:58:E2:21:79
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6a:f5:66:df:03:a3:47:aa:45:5f:df:2e:be:c7:ae:91:4c:
b5:00:f2:69:de:cd:12:a0:d4:8f:f6:04:08:b2:bf:48:19:7c:
a8:47:e2:e0:76:17:3d:d5:cb:f4:69:4c:9b:77:f2:a2:e1:86:
d1:2d:c6:67:f2:99:16:c8:df:4b:37:d0:04:0d:21:d4:58:47:
cc:16:cf:83:33:8f:f6:56:0d:63:63:60:c3:e6:82:79:9b:67:
cf:a7:b3:0a:86:36:3a:f4:ca:4c:b0:a8:97:ed:da:6a:aa:b2:
63:c9:05:c3:0f:8b:c0:18:42:08:7c:f4:ab:a8:48:c3:08:93:
af:75:86:3f:bc:88:0b:c9:7f:fb:9f:3c:29:f4:b7:13:bb:5f:
45:01:50:f4:7b:ef:eb:50:41:e2:fa:93:2d:9d:ab:85:3e:97:
a8:ee:38:49:90:29:69:91:f5:ca:6b:9b:bb:46:49:82:4f:86:
6f:44:88:2e:29:b2:74:32:e9:fd:7a:73:cb:ed:a4:f4:ad:1f:
57:c5:08:62:7c:e1:09:72:40:55:31:ee:1d:63:3a:54:ec:98:
e8:1b:40:b6:0c:52:62:ce:3f:c2:1e:63:d6:35:03:f8:37:e3:
c7:bf:43:c4:3d:65:de:d1:f4:b9:e6:5f:f1:05:0a:e3:ff:6a:
be:35:7d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MYWe42XAJ0qGd58PUQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4
NzE0NTMwHhcNMjUwMTMxMTUwMDM0WhcNMjUwMjAxMTUwMDM0WjAzMTEwLwYDVQQD
EyhkYjQwZjBlOWEyY2YwNjdiMmQ0NWVmNzEyZWQyNWRkZjU4ZTIyMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcxC9IU4xU2auSZA6vjYILeIjEyn
DDhN/o2D8afaDHDaaejFeOPxRjdH1Sbp39qA3Oe2Ys5i2Pa/a056CMv0o14DDaLn
SXbJDPYonVhtowzR8wKsh9lA5cgXNOBCwpSnGPUWqh+FGUFWm/ZEv0CJhUFL2E3J
JY+VEh9VOKTWUmBdARpNkuwfulB9JVJaW0Aa9dYRawHwW92fimEdnDhB6ksWY5Fr
RJCxHIy5l9PFDhbqXRQgWi5TcUgNo5OgGT4Nj4cDDQ53wWX2I8j12RnD9OosKPpR
t6tHn7TDlbn0nOU3ZBX5u0RE1kdBXcMrXOab17hIwyL/VnfYzIjUkxExYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtA8OmizwZ7LUXvcS7SXd9Y4iF5MB8GA1UdIwQY
MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt
NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj
LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWr1Zt8D
o0eqRV/fLr7HrpFMtQDyad7NEqDUj/YECLK/SBl8qEfi4HYXPdXL9GlMm3fyouGG
0S3GZ/KZFsjfSzfQBA0h1FhHzBbPgzOP9lYNY2Ngw+aCeZtnz6ezCoY2OvTKTLCo
l+3aaqqyY8kFww+LwBhCCHz0q6hIwwiTr3WGP7yIC8l/+588KfS3E7tfRQFQ9Hvv
61BB4vqTLZ2rhT6XqO44SZApaZH1ymubu0ZJgk+Gb0SILimydDLp/Xpzy+2k9K0f
V8UIYnzhCXJAVTHuHWM6VOyY6BtAtgxSYs4/wh5j1jUD+Dfjx79DxD1l3tH0ueZf
8QUK4/9qvjV9Wg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:34 2025 by rpki-client