Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier: EzM0ADMBJN4KS0uL4aozJhNFUTniYfbAxpJAhBugFgo=
Subject key identifier: DA:28:DB:08:06:86:76:E8:14:7A:5B:F4:B5:35:A0:BD:1E:11:21:27
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 0194BBCECDFC421E5A7C5622A4F937C3CCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number: 9D
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: XDaCGcZealj-spshbO6gPk6HDcA.roa (hash: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=)
2: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: D9+IIav/ZbYpHiF0Ps/4/SdKPXjEWOOCKoezp3aS8fs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cd:fc:42:1e:5a:7c:56:22:a4:f9:37:c3:cc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=da28db08068676e8147a5bf4b535a0bd1e112127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:7c:a0:34:9e:7f:e9:46:43:8d:93:a3:87:
bd:3a:07:5e:e7:38:cd:4a:8f:b1:78:44:cd:34:76:
d8:96:35:98:51:f9:2c:7b:e3:2f:b1:75:8d:62:f5:
4c:ad:b5:6a:06:f1:05:17:f1:1c:cf:a7:2a:12:96:
45:c6:10:40:7b:28:05:d0:98:a6:2b:85:9b:48:14:
c1:69:d0:1a:57:8e:fb:80:70:d2:11:65:13:cf:ec:
a3:63:b0:29:ad:04:5e:ee:52:f7:d0:7d:24:d8:c3:
e8:e4:b3:b1:d9:d8:fa:a4:bc:bd:60:03:d0:89:77:
70:75:fb:f3:d4:21:5f:fa:19:47:3f:80:ca:32:d7:
f4:65:99:3a:55:e0:12:6f:e5:43:8e:1c:12:8a:9f:
43:6f:c4:9c:c6:f8:05:e4:35:4c:95:d9:c4:2d:16:
09:73:66:c1:80:bc:47:c8:89:85:d9:b3:13:bf:70:
22:64:f4:76:4a:59:4c:c6:8e:1f:08:1f:b3:f3:76:
76:fa:72:79:ac:72:dd:78:51:52:8d:57:59:f8:3d:
9d:ef:c0:ab:13:41:f7:5e:0b:81:1b:84:28:f6:b8:
e9:9d:5e:05:2a:1e:13:96:87:eb:f9:2e:ab:b1:22:
95:a1:d0:80:ba:28:aa:15:91:d8:fb:90:43:c9:3b:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:28:DB:08:06:86:76:E8:14:7A:5B:F4:B5:35:A0:BD:1E:11:21:27
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ea:c1:f0:98:be:34:d1:ed:57:0c:f3:d3:a7:90:39:a2:51:
1a:38:df:86:67:6a:45:61:af:0c:f7:a1:93:f4:98:62:5f:41:
11:48:89:bc:85:06:07:11:c3:9d:c2:00:6e:17:87:c3:64:10:
5e:bc:31:5b:92:6c:c9:a1:29:a4:3f:c8:21:69:ea:1d:41:9f:
41:dd:44:39:ac:bb:50:3a:c2:9f:7a:dd:23:32:c9:68:2b:b7:
dc:84:89:cb:41:78:9e:04:4e:c6:74:47:46:58:03:33:bb:a9:
8b:72:ee:f0:03:c7:e1:b1:43:cf:7d:00:ff:97:be:f9:e7:08:
ad:45:40:b4:fe:7f:fb:4f:ce:be:ce:a9:5a:70:d9:ec:da:e3:
35:ca:9b:2f:7b:80:ee:d9:1b:14:68:d3:5d:9f:c2:e7:aa:4d:
38:78:8f:a9:ef:97:97:0c:6f:78:87:12:02:41:15:ff:c0:16:
36:b6:84:ae:5c:06:e3:47:06:3f:a9:9e:18:f2:c2:9e:98:4b:
07:b5:65:20:8d:22:9f:72:48:96:89:fc:d7:df:e2:b8:ee:31:
2f:27:39:43:04:91:b6:19:56:48:17:bb:d7:1a:bd:54:f1:06:
96:3d:30:46:29:52:31:fc:aa:bc:0d:ce:d1:4e:c4:48:7d:8d:
67:5c:54:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zs38Qh5afFYipPk3w8ytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2FiM2I2ZGNmY2JkYWZkNzYzMTEwZjg2NmE4MjgxNWRl
YTQ0NjMwHhcNMjUwMTMxMTAwMTE5WhcNMjUwMjAxMTAwMTE5WjAzMTEwLwYDVQQD
EyhkYTI4ZGIwODA2ODY3NmU4MTQ3YTViZjRiNTM1YTBiZDFlMTEyMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXF8oDSef+lGQ42To4e9Ogde5zjN
So+xeETNNHbYljWYUfkse+MvsXWNYvVMrbVqBvEFF/Ecz6cqEpZFxhBAeygF0Jim
K4WbSBTBadAaV477gHDSEWUTz+yjY7AprQRe7lL30H0k2MPo5LOx2dj6pLy9YAPQ
iXdwdfvz1CFf+hlHP4DKMtf0ZZk6VeASb+VDjhwSip9Db8ScxvgF5DVMldnELRYJ
c2bBgLxHyImF2bMTv3AiZPR2SllMxo4fCB+z83Z2+nJ5rHLdeFFSjVdZ+D2d78Cr
E0H3XguBG4Qo9rjpnV4FKh4Tlofr+S6rsSKVodCAuiiqFZHY+5BDyTvC7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoo2wgGhnboFHpb9LU1oL0eESEnMB8GA1UdIwQY
MBaAFIvKs7bc/L2v12MRD4ZqgoFd6kRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAt
ZjJjODkyYzJkYzdkLzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAtZjJjODkyYzJkYzdk
LzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVerB8Ji+
NNHtVwzz06eQOaJRGjjfhmdqRWGvDPehk/SYYl9BEUiJvIUGBxHDncIAbheHw2QQ
XrwxW5JsyaEppD/IIWnqHUGfQd1EOay7UDrCn3rdIzLJaCu33ISJy0F4ngROxnRH
RlgDM7upi3Lu8APH4bFDz30A/5e++ecIrUVAtP5/+0/Ovs6pWnDZ7NrjNcqbL3uA
7tkbFGjTXZ/C56pNOHiPqe+XlwxveIcSAkEV/8AWNraErlwG40cGP6meGPLCnphL
B7VlII0in3JIlon819/iuO4xLyc5QwSRthlWSBe71xq9VPEGlj0wRilSMfyqvA3O
0U7ESH2NZ1xUZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:18 2025 by rpki-client