Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: 9Kzwf1em+wB3+TQqG+/1G/JnDfxYVsoMas6mpfDZbMo=
Subject key identifier: 26:CD:65:B8:24:E4:77:D5:67:F4:DF:C2:97:84:19:54:46:FF:CE:E5
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 0194BCE06C3849BD9F37A918B59E5351D6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: 9BjwE8I7IAgm8TOgGl81HhFadlLAkJU/Mwyb7Lt9ouQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:38:49:bd:9f:37:a9:18:b5:9e:53:51:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=26cd65b824e477d567f4dfc29784195446ffcee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:e7:4d:60:49:e8:6b:5a:11:e0:47:f0:a1:
3b:83:87:be:70:c2:7e:b6:d4:a3:31:ed:73:d9:87:
d2:f5:d2:11:aa:d6:8c:dd:58:5a:ac:7a:6c:9a:72:
b7:ac:90:5d:37:17:15:a7:6c:77:d4:9d:3c:b1:46:
52:65:c3:13:fe:9c:d8:6f:db:c1:ca:ff:f9:59:c2:
a2:cf:e0:46:8e:7c:39:aa:0f:06:37:ad:14:f8:9a:
62:0a:19:08:02:29:0b:56:cb:b9:a0:bc:26:df:a4:
55:f4:3f:a5:e3:ea:63:8d:83:b2:8a:a4:25:e7:54:
52:d5:6c:df:6c:e8:d2:33:3c:71:21:09:a8:fd:67:
13:46:1e:0c:62:35:63:34:3b:25:03:87:0f:f1:5a:
f7:6d:d6:22:64:9b:69:f3:2c:6e:32:da:c7:f8:02:
2b:5a:f6:1f:22:3e:55:a0:8f:de:2a:ac:96:a0:9b:
03:fb:a3:17:a4:96:eb:cf:d2:89:45:44:ec:bf:64:
ba:bd:96:6e:c6:cd:a1:9c:96:8f:df:69:58:49:10:
94:3a:16:cf:59:03:19:13:75:e6:47:6c:c2:83:a5:
94:8d:5b:fb:e1:d8:f4:fd:64:5b:af:32:21:d3:3a:
b8:fe:00:36:cd:9d:18:be:9a:ad:ff:c0:69:93:50:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:65:B8:24:E4:77:D5:67:F4:DF:C2:97:84:19:54:46:FF:CE:E5
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:89:44:a2:6d:93:d9:1b:2b:cc:a1:20:e9:62:38:cd:56:
83:99:b4:f9:d1:f0:2e:2b:54:17:23:3f:36:c4:61:9c:2d:9f:
0b:51:ca:6f:75:a4:8f:e3:67:3d:aa:fd:cb:fc:68:08:6e:39:
34:8b:27:51:7a:0d:10:75:da:60:ec:e8:4d:c6:c8:e1:a6:63:
79:09:52:fd:4d:e0:31:f7:06:d5:3e:b5:5e:cc:e6:65:6b:3c:
4e:5b:51:04:af:76:4a:e4:ae:18:67:d5:d6:35:ed:de:39:d3:
51:23:4b:9f:fa:d8:9b:0d:57:13:10:c3:0f:f1:8b:b0:92:ba:
00:95:91:ad:72:83:d3:1b:e1:38:e2:e0:89:94:a9:e2:bf:ef:
e9:09:f1:a7:b3:72:d8:37:a5:eb:45:5c:82:47:76:f3:06:cb:
ed:61:b6:0a:83:fd:13:ce:61:a3:44:22:af:47:5f:15:18:44:
94:15:08:15:88:e7:8f:bd:a7:5c:3a:65:89:14:bb:bd:0a:b0:
f9:eb:20:ef:b7:ae:38:99:5c:bb:70:59:ff:39:0b:0b:9b:10:
07:fb:1d:84:44:cc:9a:80:ce:b8:f7:3d:51:d8:10:e4:f5:b8:
f1:92:46:9e:eb:ec:97:52:dd:5b:be:fe:67:dd:6f:f5:7c:59:
36:e7:59:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Gw4Sb2fN6kYtZ5TUdbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy
ZWZhNDMwHhcNMjUwMTMxMTUwMDExWhcNMjUwMjAxMTUwMDExWjAzMTEwLwYDVQQD
EygyNmNkNjViODI0ZTQ3N2Q1NjdmNGRmYzI5Nzg0MTk1NDQ2ZmZjZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1/nTWBJ6GtaEeBH8KE7g4e+cMJ+
ttSjMe1z2YfS9dIRqtaM3VharHpsmnK3rJBdNxcVp2x31J08sUZSZcMT/pzYb9vB
yv/5WcKiz+BGjnw5qg8GN60U+JpiChkIAikLVsu5oLwm36RV9D+l4+pjjYOyiqQl
51RS1WzfbOjSMzxxIQmo/WcTRh4MYjVjNDslA4cP8Vr3bdYiZJtp8yxuMtrH+AIr
WvYfIj5VoI/eKqyWoJsD+6MXpJbrz9KJRUTsv2S6vZZuxs2hnJaP32lYSRCUOhbP
WQMZE3XmR2zCg6WUjVv74dj0/WRbrzIh0zq4/gA2zZ0Yvpqt/8Bpk1A/wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbNZbgk5HfVZ/TfwpeEGVRG/87lMB8GA1UdIwQY
MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt
MDQ0MjdhOTlmMWM1LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1
LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvKJRKJt
k9kbK8yhIOliOM1Wg5m0+dHwLitUFyM/NsRhnC2fC1HKb3Wkj+NnPar9y/xoCG45
NIsnUXoNEHXaYOzoTcbI4aZjeQlS/U3gMfcG1T61XszmZWs8TltRBK92SuSuGGfV
1jXt3jnTUSNLn/rYmw1XExDDD/GLsJK6AJWRrXKD0xvhOOLgiZSp4r/v6Qnxp7Ny
2Del60Vcgkd28wbL7WG2CoP9E85ho0Qir0dfFRhElBUIFYjnj72nXDpliRS7vQqw
+esg77euOJlcu3BZ/zkLC5sQB/sdhETMmoDOuPc9UdgQ5PW48ZJGnuvsl1LdW77+
Z91v9XxZNudZjg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:36 2025 by rpki-client