Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: VKSvgkXUcsWK1udqh4gNJeqClrpcoXORC724rbKFlL0=
Subject key identifier: 63:C9:72:E8:D2:3A:5C:BF:B5:43:2D:11:7C:92:8E:06:B2:C8:5E:EC
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 0194BCA9B7295FD23EBAB4724B17CF338CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: Y9ubJIKEXNbvddP3dvuCLHzC6NgeV+T4Bv+vEB0M/gg=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: PaI64H6BRsmdPh8uuLmpn87sEpk.roa (hash: ChYSk5aaXrbkh/NXoTfSNgAZtDhVJuGceMZU45a97JU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b7:29:5f:d2:3e:ba:b4:72:4b:17:cf:33:8c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=63c972e8d23a5cbfb5432d117c928e06b2c85eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:d3:04:95:55:9d:e7:cb:6e:e2:86:0a:0c:
8c:28:a6:8d:d8:35:81:00:37:35:3f:d9:2c:21:85:
e6:7a:fa:a5:87:d4:50:e1:c4:81:c8:76:e9:42:2b:
ec:39:4a:fd:c3:71:5d:1e:97:bf:0c:26:00:d9:06:
d9:7b:5b:d5:80:09:14:fb:6d:f9:db:2e:12:d6:6d:
bf:6b:db:1a:f5:30:bb:c5:ee:b5:46:86:24:a2:19:
51:35:e6:46:1d:7a:4b:12:e2:36:a1:db:56:5c:45:
3d:3b:54:4d:07:2f:bf:e8:bc:5c:bb:02:6c:2d:82:
a4:f9:df:51:d4:de:c6:9f:6f:bc:f0:80:4a:d7:35:
37:3c:eb:8a:f1:4f:e2:5a:80:25:80:9f:e5:67:e4:
84:10:c5:c9:36:bc:f2:fd:8b:51:84:30:db:09:63:
d0:e3:81:f5:b9:12:58:e9:8b:39:8a:73:15:6b:34:
5e:80:16:4b:67:e4:d2:3e:0c:72:a1:72:a4:34:ff:
f0:f5:84:05:b8:e5:23:25:af:40:4f:4c:26:16:10:
d8:e7:e0:eb:12:96:37:f4:42:3e:47:32:6e:2b:05:
37:cb:5a:f9:b8:d6:b5:0f:94:ba:06:b9:68:69:a2:
b2:0d:3e:a5:32:12:64:cc:b4:80:b6:13:66:fd:f9:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:72:E8:D2:3A:5C:BF:B5:43:2D:11:7C:92:8E:06:B2:C8:5E:EC
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1c:58:dc:59:8f:56:dc:2d:d9:6c:82:93:cc:75:94:85:28:
8a:9e:1b:5c:88:0d:eb:0a:ef:6a:b5:b2:34:af:68:52:3d:b7:
b8:53:36:fd:a0:47:b8:87:4e:19:19:da:e3:1c:48:0a:9a:dc:
9e:c2:0e:8d:90:b7:14:a9:74:88:6c:6d:f3:3d:92:18:63:54:
c0:01:a3:a8:59:9d:71:67:37:f1:21:ee:b2:db:7d:ab:86:b4:
61:7f:74:79:4e:80:c8:56:fb:6e:a8:da:ba:38:71:cc:81:2a:
09:91:d6:73:d7:5f:23:14:b3:83:fb:69:00:d3:64:31:5a:ad:
16:2a:f8:0c:41:b7:ba:62:2e:a7:5d:c1:f8:79:21:e4:3e:68:
aa:6d:98:3e:ed:b4:cb:73:25:ee:0b:a0:ad:54:38:12:dd:80:
4e:a3:bc:94:cf:d9:0b:79:ef:83:fe:86:0f:de:10:22:80:fc:
6d:2e:b3:4a:73:c5:be:7d:92:98:28:77:ab:03:af:64:a8:de:
f3:98:47:0d:1c:22:da:8a:9e:10:d3:c9:7b:09:7c:b7:44:99:
2e:67:f2:76:8d:5a:db:d2:60:be:d2:ca:8b:b3:14:dd:45:4c:
f9:ea:b8:00:27:0f:62:62:37:50:70:ad:76:0f:69:44:2e:a3:
9c:0c:56:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbcpX9I+urRySxfPM4zaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJlMGVhNzFjZjQzN2UwOGVmZGYzZmU3OThlYWY5ODQx
MzFjNDYwHhcNMjUwMTMxMTQwMDI2WhcNMjUwMjAxMTQwMDI2WjAzMTEwLwYDVQQD
Eyg2M2M5NzJlOGQyM2E1Y2JmYjU0MzJkMTE3YzkyOGUwNmIyYzg1ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP3TBJVVnefLbuKGCgyMKKaN2DWB
ADc1P9ksIYXmevqlh9RQ4cSByHbpQivsOUr9w3FdHpe/DCYA2QbZe1vVgAkU+235
2y4S1m2/a9sa9TC7xe61RoYkohlRNeZGHXpLEuI2odtWXEU9O1RNBy+/6LxcuwJs
LYKk+d9R1N7Gn2+88IBK1zU3POuK8U/iWoAlgJ/lZ+SEEMXJNrzy/YtRhDDbCWPQ
44H1uRJY6Ys5inMVazRegBZLZ+TSPgxyoXKkNP/w9YQFuOUjJa9AT0wmFhDY5+Dr
EpY39EI+RzJuKwU3y1r5uNa1D5S6BrloaaKyDT6lMhJkzLSAthNm/fmN3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPJcujSOly/tUMtEXySjgayyF7sMB8GA1UdIwQY
MBaAFCEr4Opxz0N+CO/fP+eY6vmEExxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt
NzI1NjhmMDZmZTEwLzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw
LzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhxY3FmP
Vtwt2WyCk8x1lIUoip4bXIgN6wrvarWyNK9oUj23uFM2/aBHuIdOGRna4xxICprc
nsIOjZC3FKl0iGxt8z2SGGNUwAGjqFmdcWc38SHustt9q4a0YX90eU6AyFb7bqja
ujhxzIEqCZHWc9dfIxSzg/tpANNkMVqtFir4DEG3umIup13B+Hkh5D5oqm2YPu20
y3Ml7gugrVQ4Et2ATqO8lM/ZC3nvg/6GD94QIoD8bS6zSnPFvn2SmCh3qwOvZKje
85hHDRwi2oqeENPJewl8t0SZLmfydo1a29JgvtLKi7MU3UVM+eq4ACcPYmI3UHCt
dg9pRC6jnAxWrQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:25 2025 by rpki-client