Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier: U0IXT1B6OP1737uPQ7/TQrGmfoxUG9x6EL+R39AR/AM=
Subject key identifier: 15:F8:25:EC:7B:FB:6E:A7:0B:C7:C6:76:08:71:F3:90:6F:F0:8C:39
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 0194BCE0C068010CD8FB54D3848E4CCF1A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa (hash: wxQvo+G+ZM9xHSY4rXReEADz55sy+G82AZg77QhhlvE=)
2: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: 7+PJR1DQPOxYreJcY9I05CMOPMII+OlD+tbTFxO3a9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:68:01:0c:d8:fb:54:d3:84:8e:4c:cf:1a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=15f825ec7bfb6ea70bc7c6760871f3906ff08c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:40:f3:74:41:c4:5b:4a:70:c0:c3:86:79:
5c:e1:8b:11:82:5c:ce:82:c1:df:a8:6c:a4:af:ba:
3a:1a:fd:35:a0:d4:70:ff:13:84:c4:70:8a:a9:d9:
a8:ec:d6:95:36:bf:2e:8f:1c:19:ce:e5:4f:80:53:
14:fd:c0:c0:c0:15:e5:31:76:7c:73:fb:2a:df:0a:
ad:e2:a8:c3:70:e5:53:dc:bb:01:65:c8:f0:38:3e:
23:88:a7:20:9a:af:20:d4:14:d6:1d:9a:e8:dd:c0:
ea:f3:97:1e:3f:9b:c1:e9:cf:c2:ad:94:5e:38:63:
3c:28:17:e0:1e:c9:db:d1:9b:a7:f7:ff:be:e0:0d:
a9:95:e2:3a:45:dd:fa:e3:b5:23:45:bd:ae:22:dd:
0c:42:3b:e5:96:a9:b1:34:84:2e:2d:8f:01:4a:21:
0b:f8:54:9e:e7:80:5c:b2:1c:99:8f:79:f4:3b:9b:
79:fd:53:41:2e:3e:60:3f:9f:25:00:d0:16:b0:c2:
85:bb:a9:cc:46:83:56:bf:28:6e:8c:cf:17:1f:aa:
28:47:44:25:db:45:61:62:ba:69:19:a2:92:0f:a3:
f4:a0:76:20:3e:41:b1:64:43:1a:1a:fb:00:5f:aa:
74:e0:71:f2:a4:23:61:a0:e4:9b:f5:f6:1c:b0:56:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F8:25:EC:7B:FB:6E:A7:0B:C7:C6:76:08:71:F3:90:6F:F0:8C:39
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a0:75:61:96:21:47:5e:48:94:ee:b1:b4:b0:b7:02:38:ab:
70:dc:53:dd:f3:66:50:6c:55:ae:26:e2:20:7e:b6:ac:b6:42:
86:7b:b9:0e:cc:bd:ac:2d:d3:0d:b2:ac:83:ac:da:00:0c:c0:
02:f5:fd:d2:c7:be:c6:dc:fd:94:a7:76:fe:cc:27:d9:fe:5d:
3d:d7:ab:c4:e8:86:8f:49:97:58:a9:7e:82:fe:6c:5b:a3:dd:
68:6c:1e:34:d3:f8:b6:bb:d9:d1:2f:2c:73:c3:38:81:24:32:
4a:d1:a6:e3:81:29:ea:f9:c0:3e:bc:04:75:f9:a2:d6:91:20:
dc:3a:9b:4d:9e:1b:68:e5:a5:5f:dc:b1:e6:a0:55:50:a0:d3:
6a:10:00:03:1f:93:d2:ae:64:7c:68:97:1f:94:ee:9e:e4:ea:
26:96:c8:c0:e6:08:37:6c:e4:d3:3a:66:03:e6:1d:b7:fc:3e:
bc:f9:c4:5d:5b:84:2d:99:92:ec:ce:8d:ac:99:72:be:ae:ea:
0e:cd:e9:4c:ad:ba:e8:61:fe:00:4f:d5:d1:ca:f1:28:33:77:
3d:2e:f9:81:d8:84:9d:6c:71:7a:80:36:e1:b2:ee:79:d4:7b:
11:2c:95:4b:99:3f:dc:81:cc:c9:e6:00:fb:f1:f8:76:5e:39:
1e:e7:0e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MBoAQzY+1TThI5Mzxo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTAyNGZhMjIyZDA5ZjZlZDk5ZDBjOGU2YjdjZWQxNjhl
M2E3NzUwHhcNMjUwMTMxMTUwMDMzWhcNMjUwMjAxMTUwMDMzWjAzMTEwLwYDVQQD
EygxNWY4MjVlYzdiZmI2ZWE3MGJjN2M2NzYwODcxZjM5MDZmZjA4YzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSxA83RBxFtKcMDDhnlc4YsRglzO
gsHfqGykr7o6Gv01oNRw/xOExHCKqdmo7NaVNr8ujxwZzuVPgFMU/cDAwBXlMXZ8
c/sq3wqt4qjDcOVT3LsBZcjwOD4jiKcgmq8g1BTWHZro3cDq85ceP5vB6c/CrZRe
OGM8KBfgHsnb0Zun9/++4A2pleI6Rd3647UjRb2uIt0MQjvllqmxNIQuLY8BSiEL
+FSe54BcshyZj3n0O5t5/VNBLj5gP58lANAWsMKFu6nMRoNWvyhujM8XH6ooR0Ql
20VhYrppGaKSD6P0oHYgPkGxZEMaGvsAX6p04HHypCNhoOSb9fYcsFZcgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX4Jex7+26nC8fGdghx85Bv8Iw5MB8GA1UdIwQY
MBaAFFdQJPoiLQn27ZnQyOa3ztFo46d1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAt
ZTY2MTg2YzdhNjg5LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAtZTY2MTg2YzdhNjg5
LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKB1YZYh
R15IlO6xtLC3AjircNxT3fNmUGxVribiIH62rLZChnu5Dsy9rC3TDbKsg6zaAAzA
AvX90se+xtz9lKd2/swn2f5dPderxOiGj0mXWKl+gv5sW6PdaGweNNP4trvZ0S8s
c8M4gSQyStGm44Ep6vnAPrwEdfmi1pEg3DqbTZ4baOWlX9yx5qBVUKDTahAAAx+T
0q5kfGiXH5TunuTqJpbIwOYIN2zk0zpmA+Ydt/w+vPnEXVuELZmS7M6NrJlyvq7q
Ds3pTK266GH+AE/V0crxKDN3PS75gdiEnWxxeoA24bLuedR7ESyVS5k/3IHMyeYA
+/H4dl45HucO9Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:23 2025 by rpki-client