Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: cVZDmfK6ArU1BnfO4RSfLmrd319Fq9fLtcPBrFB3mAs=
Subject key identifier: 85:2C:E6:18:E7:74:63:86:2B:81:FB:41:5B:CA:EC:A8:42:1E:7C:D3
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 0194BCA9BBE3E20F1A405F5CC7C64855EAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0B52
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: 9fZHi9V8GxdeCbv9RQMumdZIwn0I8k/ZbZut/oE0gA4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bb:e3:e2:0f:1a:40:5f:5c:c7:c6:48:55:ea:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=852ce618e77463862b81fb415bcaeca8421e7cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:69:00:83:63:1e:fe:f2:8e:ba:61:98:1a:
23:e4:48:7a:d2:63:eb:36:5a:26:99:78:d7:78:e5:
9f:63:58:5a:5c:b5:01:e1:2b:27:07:6c:cf:b3:4a:
ad:cf:0b:f2:df:38:b5:aa:e9:23:b3:7c:15:39:46:
33:f9:60:d6:22:73:25:44:5e:0b:ae:d7:dc:85:ac:
a2:a9:21:df:b0:07:21:19:e6:ff:be:1f:c1:40:4f:
71:e5:a4:b9:c3:a9:ca:f3:1a:47:86:98:81:64:e7:
2a:91:10:b6:f1:73:b2:9d:ae:9a:2d:1d:e5:48:32:
0b:a9:89:e9:ea:b3:10:59:c0:ec:69:f0:8d:9a:a8:
90:ea:1a:7f:b5:0f:98:9e:45:fe:6c:b8:79:f8:5d:
6e:ee:f5:10:c1:31:5f:fc:cc:9f:cc:e9:52:9c:7d:
d2:00:46:32:68:6b:b3:80:3d:ab:2f:8b:15:5e:80:
f4:b0:7a:45:2b:af:32:81:b6:e3:ba:6d:de:98:7c:
1f:1f:8c:23:9e:55:42:73:ac:38:cb:e4:79:f8:12:
25:9f:1e:2b:10:93:52:f1:e8:37:53:e1:e4:e4:5e:
fd:3c:10:e9:4d:c5:b5:b5:0e:40:ca:17:1c:0d:cf:
59:6d:43:c0:6c:bb:15:54:a9:88:25:5b:91:04:94:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2C:E6:18:E7:74:63:86:2B:81:FB:41:5B:CA:EC:A8:42:1E:7C:D3
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:07:f7:10:5c:f5:63:91:ab:58:14:9f:28:a1:84:58:33:
84:75:21:4c:6c:0f:25:ff:0e:45:3d:2a:0c:6a:93:16:d8:57:
a1:f4:0b:9b:64:09:44:93:10:0b:39:94:93:a3:8b:c1:69:6d:
d1:0f:50:a9:8f:e8:53:04:31:09:00:5c:74:ed:73:39:16:79:
4d:ec:75:7d:26:f6:ed:9a:00:8f:f2:df:28:35:f2:51:05:ff:
4b:37:db:c6:42:61:f5:46:a8:d8:6f:18:63:0a:0c:14:05:08:
72:de:7e:a5:0b:32:17:5d:9c:c0:9c:86:35:f6:8e:80:ee:12:
95:43:ec:bc:a5:97:0e:58:72:d7:8d:1b:0c:64:77:70:b3:05:
ac:9a:cb:aa:c4:a3:53:63:b6:6b:d3:b6:28:bf:03:9c:bc:9c:
f5:8f:83:c8:70:ec:16:34:5d:60:6b:d8:f9:aa:af:10:85:ae:
45:d7:7e:35:63:f4:51:b3:cd:f1:20:63:c2:27:1e:98:b5:f4:
2a:22:30:f4:6f:35:f9:83:d9:f7:8b:bb:8d:99:c6:f6:9b:30:
e1:d4:c5:55:95:a7:fc:a6:1a:17:9f:55:c7:34:9e:e4:f7:e1:
7d:80:b9:68:16:9d:85:d6:3a:4e:d8:d4:d6:d8:f9:bc:36:38:
39:6a:3f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbvj4g8aQF9cx8ZIVerkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWI3MjliNzVjNWY4YjJlOWQxNThhYTI5NjM5NmQ2ODBi
ZTcwYWQwHhcNMjUwMTMxMTQwMDI3WhcNMjUwMjAxMTQwMDI3WjAzMTEwLwYDVQQD
Eyg4NTJjZTYxOGU3NzQ2Mzg2MmI4MWZiNDE1YmNhZWNhODQyMWU3Y2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhppAINjHv7yjrphmBoj5Eh60mPr
NlommXjXeOWfY1haXLUB4SsnB2zPs0qtzwvy3zi1qukjs3wVOUYz+WDWInMlRF4L
rtfchayiqSHfsAchGeb/vh/BQE9x5aS5w6nK8xpHhpiBZOcqkRC28XOyna6aLR3l
SDILqYnp6rMQWcDsafCNmqiQ6hp/tQ+YnkX+bLh5+F1u7vUQwTFf/MyfzOlSnH3S
AEYyaGuzgD2rL4sVXoD0sHpFK68ygbbjum3emHwfH4wjnlVCc6w4y+R5+BIlnx4r
EJNS8eg3U+Hk5F79PBDpTcW1tQ5AyhccDc9ZbUPAbLsVVKmIJVuRBJR95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUs5hjndGOGK4H7QVvK7KhCHnzTMB8GA1UdIwQY
MBaAFIsbcpt1xfiy6dFYqiljltaAvnCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUt
NjY4MTQ5MjYzNTM5LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUtNjY4MTQ5MjYzNTM5
LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNIH9xBc
9WORq1gUnyihhFgzhHUhTGwPJf8ORT0qDGqTFthXofQLm2QJRJMQCzmUk6OLwWlt
0Q9QqY/oUwQxCQBcdO1zORZ5Tex1fSb27ZoAj/LfKDXyUQX/SzfbxkJh9Uao2G8Y
YwoMFAUIct5+pQsyF12cwJyGNfaOgO4SlUPsvKWXDlhy140bDGR3cLMFrJrLqsSj
U2O2a9O2KL8DnLyc9Y+DyHDsFjRdYGvY+aqvEIWuRdd+NWP0UbPN8SBjwicemLX0
KiIw9G81+YPZ94u7jZnG9psw4dTFVZWn/KYaF59VxzSe5PfhfYC5aBadhdY6TtjU
1tj5vDY4OWo/2w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:11 2025 by rpki-client