Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: RKeLQW7EXaxExWYJdO1fg0d7yU3mlg4s0DGgXRh1DXo=
Subject key identifier: A1:11:47:02:6B:32:EC:56:85:B2:2D:9E:DC:05:CC:ED:EB:60:F0:60
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 0194BCAA225848EFAF0D11011C2B0A4E4133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 119C
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: dx0x2RNgVYx1kbczolzEPlkylml3QhzddQUzXhug+YU=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:58:48:ef:af:0d:11:01:1c:2b:0a:4e:41:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=a11147026b32ec5685b22d9edc05ccedeb60f060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:de:49:a4:5b:35:17:1d:76:48:ff:54:d5:
79:50:6f:c9:77:9d:5a:19:c4:5a:63:03:43:3f:6e:
db:5c:6d:ec:1c:a9:06:8e:b6:e0:c0:ed:f4:aa:b5:
42:86:e7:78:10:fc:64:bc:ec:f1:91:a4:78:77:70:
aa:b7:ee:2f:2c:34:9e:29:a8:e5:52:ea:65:e9:93:
0a:74:c9:f6:6f:20:77:61:9e:57:c3:af:79:ea:7a:
b8:94:fb:b2:c9:a0:29:ea:33:ce:cc:18:57:f1:85:
7d:9c:9a:4e:ca:35:a5:a8:19:a8:c4:75:22:9a:f5:
f5:33:71:d0:97:1e:c3:4c:bc:49:a8:a9:39:59:28:
ac:df:90:96:fc:3a:8d:0d:3f:8b:c5:f5:90:49:9d:
7c:a9:de:d4:33:fe:d0:a6:4a:64:b6:c3:6b:6f:4e:
39:41:d7:ab:2c:7b:a7:45:75:ee:21:c4:25:a2:7b:
11:15:43:25:7a:b7:7e:d4:e6:1f:94:de:20:ff:14:
32:1c:15:b8:d1:2e:f2:c9:3d:c1:7f:6c:4a:cc:01:
2c:10:89:74:06:7f:15:27:60:b8:68:7e:31:91:e4:
50:68:9e:38:88:ec:84:64:e8:a4:92:eb:2e:59:47:
b8:50:2a:50:67:7e:b2:77:2d:2c:52:3c:79:05:a0:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:11:47:02:6B:32:EC:56:85:B2:2D:9E:DC:05:CC:ED:EB:60:F0:60
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c6:92:0d:ad:c0:c3:8b:34:04:4c:73:8a:6b:ba:46:b0:1e:
a7:db:9e:16:eb:1f:0d:60:73:2e:74:60:f9:fe:94:a9:cc:cc:
7b:63:9f:91:61:61:a4:33:ee:48:f0:35:cc:9d:32:69:48:e1:
21:0a:a8:8e:92:4b:91:58:25:38:55:28:80:7b:5f:4e:e7:e5:
0f:59:70:58:24:ec:55:d1:21:03:a9:94:73:45:35:d0:4f:f2:
c0:5d:a7:19:f5:25:14:1b:9c:c4:c9:2d:18:95:27:40:25:31:
2a:61:f9:97:ba:83:2d:21:84:a1:33:28:3f:f0:21:a7:7b:93:
b2:16:85:84:76:c2:57:89:a5:57:2f:cb:fa:1d:23:69:68:24:
57:9b:d3:85:13:92:49:f3:31:7d:49:6a:17:a7:67:0b:a4:ee:
39:00:31:e4:0c:3b:be:36:95:01:20:b3:7f:19:cb:c0:76:24:
ee:a6:95:bb:f7:79:63:cf:e7:06:81:23:33:3a:63:d5:ea:18:
24:da:81:1f:e0:39:8e:1e:c3:c4:39:f2:e7:22:3b:52:a8:8c:
6d:53:34:bd:40:b0:2a:35:e5:db:66:b0:d3:94:c9:96:c8:ad:
73:e6:87:0f:eb:a8:45:a7:a5:47:31:f8:6b:b4:2c:78:8a:33:
0d:8d:f5:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiJYSO+vDREBHCsKTkEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZDAyOGYxYmEzY2VmYjBkZWJkNTFiZTlkYWM2OGM5Y2U1
NmMzZDUwHhcNMjUwMTMxMTQwMDU0WhcNMjUwMjAxMTQwMDU0WjAzMTEwLwYDVQQD
EyhhMTExNDcwMjZiMzJlYzU2ODViMjJkOWVkYzA1Y2NlZGViNjBmMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+neSaRbNRcddkj/VNV5UG/Jd51a
GcRaYwNDP27bXG3sHKkGjrbgwO30qrVChud4EPxkvOzxkaR4d3Cqt+4vLDSeKajl
Uupl6ZMKdMn2byB3YZ5Xw6956nq4lPuyyaAp6jPOzBhX8YV9nJpOyjWlqBmoxHUi
mvX1M3HQlx7DTLxJqKk5WSis35CW/DqNDT+LxfWQSZ18qd7UM/7QpkpktsNrb045
QderLHunRXXuIcQlonsRFUMlerd+1OYflN4g/xQyHBW40S7yyT3Bf2xKzAEsEIl0
Bn8VJ2C4aH4xkeRQaJ44iOyEZOikkusuWUe4UCpQZ36ydy0sUjx5BaDhSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKERRwJrMuxWhbItntwFzO3rYPBgMB8GA1UdIwQY
MBaAFCLQKPG6PO+w3r1Rvp2saMnOVsPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUt
OTQ2ODE3YjU5MTQ4LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUtOTQ2ODE3YjU5MTQ4
LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMaSDa3A
w4s0BExzimu6RrAep9ueFusfDWBzLnRg+f6UqczMe2OfkWFhpDPuSPA1zJ0yaUjh
IQqojpJLkVglOFUogHtfTuflD1lwWCTsVdEhA6mUc0U10E/ywF2nGfUlFBucxMkt
GJUnQCUxKmH5l7qDLSGEoTMoP/Ahp3uTshaFhHbCV4mlVy/L+h0jaWgkV5vThROS
SfMxfUlqF6dnC6TuOQAx5Aw7vjaVASCzfxnLwHYk7qaVu/d5Y8/nBoEjMzpj1eoY
JNqBH+A5jh7DxDny5yI7UqiMbVM0vUCwKjXl22aw05TJlsitc+aHD+uoRaelRzH4
a7QseIozDY319Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:23 2025 by rpki-client