Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: QIoKBKpE5xM1kGQqFQHAF58ZTmEcXbqlgWaMWC8Cw2c=
Subject key identifier: B1:7F:7B:78:1D:D8:83:0C:56:DD:07:27:1F:4E:9C:15:49:32:11:38
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 0194BCAA3EC3DF57EF3640D89D6B4F1995EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: PtQIzCCwQh8NdffUWB0T0F73qGo.roa (hash: /c4lvjj4PGcUKDTfi+D5j+QQ3yuCVLcah+bN2ew8j3U=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: U82I1hCSM4R6rMgvM3a/OCmkPSl9yK+oh5ShDUJWZbY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3e:c3:df:57:ef:36:40:d8:9d:6b:4f:19:95:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=b17f7b781dd8830c56dd07271f4e9c1549321138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:61:a6:bd:f1:2d:2a:50:0a:ba:d7:ee:23:
54:95:6f:d7:87:fe:8e:c7:46:49:3b:16:8a:17:b2:
db:bf:2a:d2:4f:97:9c:d9:db:05:3f:26:e8:51:c0:
7e:cb:60:98:f6:6e:8b:21:61:eb:e4:a3:1e:9f:2f:
6e:12:5c:89:30:e9:a9:f3:98:fb:a0:83:80:60:34:
28:eb:de:9f:cb:83:94:90:af:57:d7:f1:d6:94:01:
97:a0:8b:8a:ab:15:a4:20:6c:6e:ee:94:73:c9:2a:
f3:ab:d8:78:14:e6:22:d4:70:0d:25:88:e7:cc:99:
4c:d8:16:d0:e8:57:de:af:74:e6:9b:d0:db:55:a7:
46:38:7e:39:3a:d7:82:a5:5d:57:2d:21:bc:43:b0:
75:38:78:f6:9f:54:c1:3e:cf:c0:ad:09:ac:59:b9:
5e:eb:28:31:a2:e7:2f:9c:cb:83:68:d7:68:c2:33:
9e:d5:2d:c0:36:07:3b:f1:57:f4:a7:c2:31:a0:2f:
76:2a:e6:6c:35:eb:7c:1a:c1:d6:2c:77:15:cf:ba:
12:d9:ac:e5:50:e7:6a:62:50:6b:c9:db:5b:91:87:
1d:f8:2d:06:61:2c:f5:4a:01:5b:1c:02:95:c7:f7:
5f:7a:5e:f8:8b:b1:be:d9:d5:bd:b9:6e:4c:9c:07:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:7B:78:1D:D8:83:0C:56:DD:07:27:1F:4E:9C:15:49:32:11:38
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:99:67:52:dd:7c:69:df:26:51:4d:ed:ae:a2:f2:6e:58:ea:
6b:c0:05:31:d5:42:88:3f:c4:cd:7f:f4:09:cd:e8:47:08:4b:
7d:24:3c:58:fa:41:95:da:15:3e:90:af:89:bd:08:95:53:0a:
f1:bc:14:76:7a:22:62:77:a4:b3:32:8c:68:4c:c7:47:18:49:
bf:1b:af:7d:7a:e6:d8:1a:90:de:d7:ac:9b:4c:82:06:47:8a:
51:ad:f9:0b:9c:f6:3e:d1:48:c9:3b:f6:1d:07:e5:14:d9:89:
f7:1e:71:6c:b5:f1:87:2e:1e:70:97:19:f1:74:da:73:c1:2b:
fa:08:ee:1c:cf:c1:11:71:f4:6f:2e:19:81:70:a6:13:36:4a:
99:b8:ae:b4:f0:30:38:e4:ab:7d:c1:d0:1c:e6:15:eb:c9:fe:
36:25:98:54:eb:35:53:2a:a6:e1:25:48:2b:42:5b:08:64:87:
e5:db:61:79:7d:de:e4:0a:1f:35:60:0b:d0:88:14:6c:e3:38:
ef:62:9f:79:0f:d8:60:23:c2:da:8f:a7:dc:60:94:37:71:83:
be:91:41:8e:ee:a4:27:fd:4d:c5:23:f4:59:3d:ac:72:17:b5:
e1:92:c0:a4:96:60:b1:06:07:e0:18:ca:77:3c:22:9e:b2:0e:
fb:92:23:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qj7D31fvNkDYnWtPGZXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj
NzRhODgwHhcNMjUwMTMxMTQwMTAxWhcNMjUwMjAxMTQwMTAxWjAzMTEwLwYDVQQD
EyhiMTdmN2I3ODFkZDg4MzBjNTZkZDA3MjcxZjRlOWMxNTQ5MzIxMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhZhpr3xLSpQCrrX7iNUlW/Xh/6O
x0ZJOxaKF7LbvyrST5ec2dsFPyboUcB+y2CY9m6LIWHr5KMeny9uElyJMOmp85j7
oIOAYDQo696fy4OUkK9X1/HWlAGXoIuKqxWkIGxu7pRzySrzq9h4FOYi1HANJYjn
zJlM2BbQ6Ffer3Tmm9DbVadGOH45OteCpV1XLSG8Q7B1OHj2n1TBPs/ArQmsWble
6ygxoucvnMuDaNdowjOe1S3ANgc78Vf0p8IxoC92KuZsNet8GsHWLHcVz7oS2azl
UOdqYlBrydtbkYcd+C0GYSz1SgFbHAKVx/dfel74i7G+2dW9uW5MnAe7SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLF/e3gd2IMMVt0HJx9OnBVJMhE4MB8GA1UdIwQY
MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt
NDZhMGRmNzc0ZmUxLzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx
LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJlnUt18
ad8mUU3trqLybljqa8AFMdVCiD/EzX/0Cc3oRwhLfSQ8WPpBldoVPpCvib0IlVMK
8bwUdnoiYnekszKMaEzHRxhJvxuvfXrm2BqQ3tesm0yCBkeKUa35C5z2PtFIyTv2
HQflFNmJ9x5xbLXxhy4ecJcZ8XTac8Er+gjuHM/BEXH0by4ZgXCmEzZKmbiutPAw
OOSrfcHQHOYV68n+NiWYVOs1Uyqm4SVIK0JbCGSH5dtheX3e5AofNWAL0IgUbOM4
72KfeQ/YYCPC2o+n3GCUN3GDvpFBju6kJ/1NxSP0WT2sche14ZLApJZgsQYH4BjK
dzwinrIO+5IjvA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:25 2025 by rpki-client