Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: rOc+NLHiHRsxKzoO5AHo3B7gYzg3vwdNYX2I3nQjiBo=
Subject key identifier: D2:6D:E7:18:82:97:D0:3B:4F:C7:2D:90:74:B8:87:B3:88:16:AF:FC
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 0194BCA98D83397BC8FC6B1F61AF2CB37C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 11E6
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: 5IYx73hrHTWXIfHwjmL4Kmh3tUXaMVX7QQZ5zDe4C1w=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8d:83:39:7b:c8:fc:6b:1f:61:af:2c:b3:7c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=d26de7188297d03b4fc72d9074b887b38816affc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:c4:75:8d:81:41:d8:30:ca:3d:8b:77:ea:
ce:84:3a:45:7b:02:f0:92:ed:da:b7:32:d9:1a:54:
bf:fe:95:02:e8:8d:4c:0b:04:0e:b2:9c:e2:ae:7c:
4f:b2:f5:c3:91:16:ad:d3:6c:77:4f:56:d0:bb:78:
b6:55:51:43:5a:d7:e9:ad:74:cd:5a:fe:ed:74:c6:
c7:dd:11:4a:01:3f:8d:5c:5a:6c:0a:1f:3b:4b:0b:
d9:e6:58:ce:75:da:42:82:08:6e:59:77:b9:44:9b:
4f:08:74:2f:a0:16:8f:08:1b:ab:eb:2b:db:58:b0:
8c:f8:cc:7b:d8:41:dc:70:82:e3:2d:a3:1d:a7:c9:
e8:ae:7e:65:93:35:39:9e:70:16:ab:64:3e:5b:03:
d6:95:12:1c:4f:8c:0e:e5:b2:17:f4:71:1b:9e:ef:
84:5e:5c:56:02:14:e0:ae:92:3c:55:9a:e9:95:0c:
d2:94:38:8f:64:4c:96:61:59:e0:50:e5:b6:c7:5c:
15:6e:99:f2:15:6f:5b:1c:c4:5a:52:99:50:dc:5d:
7c:3e:33:66:57:f5:cc:14:69:67:d3:5b:a2:25:c6:
0c:83:47:96:42:ed:da:e3:f0:cd:65:53:c5:3e:60:
1a:ac:37:bf:c8:c2:c3:69:16:79:ac:99:ac:81:7c:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:E7:18:82:97:D0:3B:4F:C7:2D:90:74:B8:87:B3:88:16:AF:FC
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:05:73:f6:0d:12:15:f7:f4:15:c8:67:4e:d4:79:f4:84:2c:
e2:e6:e2:19:cf:e1:da:df:11:4b:62:bf:e3:7e:d0:b1:da:5a:
76:1a:03:39:c5:c1:bb:b3:00:d2:25:6f:38:d2:7e:39:7a:18:
a4:17:11:15:bf:2b:e2:fe:33:5f:e0:37:a8:ad:08:82:e2:68:
76:64:ac:cd:52:e1:25:b5:98:a5:8e:ad:d3:31:6d:98:53:80:
32:47:0e:5c:8d:42:92:b0:d5:73:d9:cb:74:79:d5:b5:13:3e:
a8:fd:8b:6a:a3:99:bb:cd:6a:49:29:23:10:2f:be:d7:74:86:
54:87:41:89:f0:c5:a7:19:50:1f:ab:2d:52:90:2d:43:96:28:
79:b8:23:66:b5:a0:0e:4b:09:c0:cb:4c:2e:90:6c:50:cd:ed:
46:1f:bd:6b:9c:e6:18:51:6d:51:0d:d8:21:53:6a:67:b0:93:
37:2c:4f:b7:22:93:db:30:f2:25:f8:6c:0d:43:2e:d9:5f:25:
23:0d:ff:8d:90:72:fb:ce:ca:80:b5:a4:f4:e5:60:85:ff:ea:
a9:23:0d:9d:c3:ac:a5:0d:fe:3a:51:a2:20:0c:b4:bd:05:89:
b0:df:3b:3d:7e:c4:9d:4f:a1:d0:81:9b:8d:21:80:9e:c9:98:
e7:da:57:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qY2DOXvI/GsfYa8ss3yQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNGEwOTY1MDRjZGJiOWYyZmI3ZmQwZTY2NDA2ZDUyNmZl
MTBiNWEwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
EyhkMjZkZTcxODgyOTdkMDNiNGZjNzJkOTA3NGI4ODdiMzg4MTZhZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7XEdY2BQdgwyj2Ld+rOhDpFewLw
ku3atzLZGlS//pUC6I1MCwQOspzirnxPsvXDkRat02x3T1bQu3i2VVFDWtfprXTN
Wv7tdMbH3RFKAT+NXFpsCh87SwvZ5ljOddpCgghuWXe5RJtPCHQvoBaPCBur6yvb
WLCM+Mx72EHccILjLaMdp8norn5lkzU5nnAWq2Q+WwPWlRIcT4wO5bIX9HEbnu+E
XlxWAhTgrpI8VZrplQzSlDiPZEyWYVngUOW2x1wVbpnyFW9bHMRaUplQ3F18PjNm
V/XMFGln01uiJcYMg0eWQu3a4/DNZVPFPmAarDe/yMLDaRZ5rJmsgXzQuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJt5xiCl9A7T8ctkHS4h7OIFq/8MB8GA1UdIwQY
MBaAFCBKCWUEzbufL7f9DmZAbVJv4QtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYt
MTU0MjI0Nzg4MDBiLzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYtMTU0MjI0Nzg4MDBi
LzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgVz9g0S
Fff0FchnTtR59IQs4ubiGc/h2t8RS2K/437QsdpadhoDOcXBu7MA0iVvONJ+OXoY
pBcRFb8r4v4zX+A3qK0IguJodmSszVLhJbWYpY6t0zFtmFOAMkcOXI1CkrDVc9nL
dHnVtRM+qP2LaqOZu81qSSkjEC++13SGVIdBifDFpxlQH6stUpAtQ5YoebgjZrWg
DksJwMtMLpBsUM3tRh+9a5zmGFFtUQ3YIVNqZ7CTNyxPtyKT2zDyJfhsDUMu2V8l
Iw3/jZBy+87KgLWk9OVghf/qqSMNncOspQ3+OlGiIAy0vQWJsN87PX7EnU+h0IGb
jSGAnsmY59pX5A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:48 2025 by rpki-client