Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
File: Iyrza5wHnaCRgn2j0HycilI2y1Q.mft (raw, json)
Hash identifier: NrbuuZSWulD9CO3SB8eNeYEMUj5CdZaFNb0b6yl4igM=
Subject key identifier: FC:70:5E:64:12:96:3A:0E:F8:FC:BB:2E:6E:E9:AE:76:D2:5D:11:9D
Authority key identifier: 23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
Certificate issuer: /CN=232af36b9c079da091827da3d07c9c8a5236cb54
Certificate serial: 0194BBCEC305CA694C65202E1E20F201EC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
Manifest number: 0C45
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: Iyrza5wHnaCRgn2j0HycilI2y1Q.crl (hash: AIGnqZdQuX/GJsGYS65/8kkDR7KCOefmOU5C45+ASAE=)
2: toxMffac8SzL_TQxr2hjL5YSY6Q.roa (hash: 6J4RpW4+KTEJ80i/ugBSVSbYDP6MfdImgKDioGx9tw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c3:05:ca:69:4c:65:20:2e:1e:20:f2:01:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232af36b9c079da091827da3d07c9c8a5236cb54
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=fc705e6412963a0ef8fcbb2e6ee9ae76d25d119d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:f9:d1:1d:37:75:ed:fe:f3:f9:2c:a2:63:
5c:6c:4e:b7:05:5e:d6:ce:8c:9d:0e:b4:77:00:9f:
f7:35:82:0e:56:09:d1:fe:26:b4:7b:d0:33:e3:84:
79:b2:96:22:f0:57:25:04:2f:bb:9e:01:ba:5b:7d:
a0:a0:1f:27:1d:6f:e2:0a:3b:61:4a:58:2b:ef:01:
fc:77:39:97:6a:59:0e:76:88:e8:40:0d:03:cb:3c:
5f:fd:7e:26:7b:d8:53:0e:35:2b:f0:43:96:1f:4e:
ec:07:47:3d:11:7e:e4:0a:f3:41:00:f0:36:55:e7:
b7:4b:81:5a:e4:00:83:55:27:8c:f1:90:78:ea:63:
fa:ef:6c:d1:e0:41:46:df:43:f2:fd:60:8d:f2:93:
91:02:15:71:3e:33:c8:7d:3d:c9:76:19:b8:73:d4:
ce:80:ab:f7:91:25:95:2c:ad:89:e1:96:b0:14:20:
f7:12:2e:9f:b7:bf:bb:77:d4:d2:21:aa:cf:65:5a:
f3:bc:43:bd:51:a9:3b:b4:d1:47:2e:3c:07:9d:5f:
57:0d:ec:e6:d5:25:6a:d2:58:b9:9f:cc:db:15:10:
39:81:9e:a3:93:44:6d:4f:a0:f1:f0:88:37:20:41:
bd:fe:ab:97:74:81:46:60:3a:29:6d:9d:63:d2:3d:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:70:5E:64:12:96:3A:0E:F8:FC:BB:2E:6E:E9:AE:76:D2:5D:11:9D
X509v3 Authority Key Identifier:
keyid:23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:84:70:a7:e3:ba:55:91:1c:c5:07:ea:13:84:ec:1c:6a:95:
17:97:06:c5:37:36:56:10:d1:fe:9a:ef:19:68:2b:22:a5:80:
a9:58:df:89:dd:30:d1:98:0e:b2:26:52:9b:4d:47:c9:48:7d:
37:51:57:83:a4:6c:0b:25:be:92:20:25:cf:af:52:07:e6:74:
98:b9:fa:6f:81:c3:e1:f5:64:02:cd:ef:fd:3f:04:73:21:5b:
71:be:73:ab:aa:5c:4e:9c:ee:7f:1c:72:e8:68:c5:0a:0d:44:
f2:7f:2b:e1:e2:3a:18:35:7e:3a:00:cb:c7:fc:37:12:ef:c3:
93:9a:a1:06:3f:34:9a:9c:bf:61:c8:8a:5f:92:0a:a0:fb:07:
71:d5:eb:97:b8:f9:b8:75:f0:64:7d:38:d0:15:08:b0:88:6a:
d8:02:46:ad:91:c4:6e:60:4b:0b:61:e1:64:84:38:e3:48:af:
fd:4c:29:95:9a:3b:b3:e1:cd:c4:9b:2e:20:f7:02:8d:01:45:
7b:fd:1e:b3:a2:b4:55:06:77:f3:03:0a:7c:e9:8f:4a:56:fd:
3f:7c:51:b8:df:33:d1:49:4f:2f:27:b4:4b:a9:be:f6:d0:ac:
fc:86:f6:ef:1f:dd:99:ec:50:89:da:c8:bd:8e:86:4d:60:f6:
c5:87:93:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsMFymlMZSAuHiDyAewvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmFmMzZiOWMwNzlkYTA5MTgyN2RhM2QwN2M5YzhhNTIz
NmNiNTQwHhcNMjUwMTMxMTAwMTE3WhcNMjUwMjAxMTAwMTE3WjAzMTEwLwYDVQQD
EyhmYzcwNWU2NDEyOTYzYTBlZjhmY2JiMmU2ZWU5YWU3NmQyNWQxMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3j50R03de3+8/ksomNcbE63BV7W
zoydDrR3AJ/3NYIOVgnR/ia0e9Az44R5spYi8FclBC+7ngG6W32goB8nHW/iCjth
Slgr7wH8dzmXalkOdojoQA0Dyzxf/X4me9hTDjUr8EOWH07sB0c9EX7kCvNBAPA2
Vee3S4Fa5ACDVSeM8ZB46mP672zR4EFG30Py/WCN8pORAhVxPjPIfT3Jdhm4c9TO
gKv3kSWVLK2J4ZawFCD3Ei6ft7+7d9TSIarPZVrzvEO9Uak7tNFHLjwHnV9XDezm
1SVq0li5n8zbFRA5gZ6jk0RtT6Dx8Ig3IEG9/quXdIFGYDopbZ1j0j2LFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxwXmQSljoO+Py7Lm7prnbSXRGdMB8GA1UdIwQY
MBaAFCMq82ucB52gkYJ9o9B8nIpSNstUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMmZkMzMtZmQ0NC00ZTA4LWI0MjQt
YWExMDQ1MjIwYjViLzEvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jMmZkMzMtZmQ0NC00ZTA4LWI0MjQtYWExMDQ1MjIwYjVi
LzEvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIRwp+O6
VZEcxQfqE4TsHGqVF5cGxTc2VhDR/prvGWgrIqWAqVjfid0w0ZgOsiZSm01HyUh9
N1FXg6RsCyW+kiAlz69SB+Z0mLn6b4HD4fVkAs3v/T8EcyFbcb5zq6pcTpzufxxy
6GjFCg1E8n8r4eI6GDV+OgDLx/w3Eu/Dk5qhBj80mpy/YciKX5IKoPsHcdXrl7j5
uHXwZH040BUIsIhq2AJGrZHEbmBLC2HhZIQ440iv/UwplZo7s+HNxJsuIPcCjQFF
e/0es6K0VQZ38wMKfOmPSlb9P3xRuN8z0UlPLye0S6m+9tCs/Ib27x/dmexQidrI
vY6GTWD2xYeT2w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:57 2025 by rpki-client