
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: LOEqNdcHFw0Lf2AbNRV6X6xt7I34h5kbTfK0GWb6vVU=
Subject key identifier: D1:3E:BF:FF:70:91:7B:00:84:56:22:7D:C9:2F:E5:87:E0:62:FB:06
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 01962E99B59A599725708DC56674379DBFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 11D9
Signing time: Sun 13 Apr 2025 10:02:27 +0000
Manifest this update: Sun 13 Apr 2025 10:02:27 +0000
Manifest next update: Mon 14 Apr 2025 10:02:27 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: s80WsNnwMi8JJFdutva9f+T4X0jPwlF9QAUPtwkKOFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:b5:9a:59:97:25:70:8d:c5:66:74:37:9d:bf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Apr 13 10:02:27 2025 GMT
Not After : Apr 14 10:02:27 2025 GMT
Subject: CN=d13ebfff70917b008456227dc92fe587e062fb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:3b:47:fb:4b:7f:dd:9c:2d:69:1d:e2:01:
86:35:d0:d7:21:9f:49:3d:2f:93:dc:64:b8:6a:2b:
36:8a:3d:3a:20:2f:cf:32:05:01:21:34:38:78:d2:
85:98:f9:8d:6a:64:97:85:99:89:66:27:a0:ca:a8:
84:28:ef:e0:86:00:b1:74:c0:7e:2b:d5:ed:33:96:
fd:21:4d:c7:18:a0:29:73:98:5d:64:9d:f4:57:d4:
54:a6:b6:cd:bb:59:b9:9f:31:ce:73:47:47:2c:9e:
24:d1:7b:71:c0:54:35:8c:05:5a:77:bc:50:10:de:
9b:09:31:20:2e:5d:3a:6d:12:c7:ca:b6:16:52:67:
d9:94:14:14:1e:81:d9:83:fd:37:a8:58:d3:60:34:
bd:6f:0c:63:53:42:50:64:a1:6b:3f:33:ab:15:2d:
14:3b:d7:87:69:7a:db:98:46:93:2d:60:50:34:98:
8c:b2:f4:c4:53:57:63:d2:d8:ec:fe:a3:26:d8:a7:
21:8c:0a:1b:db:6f:51:23:fb:26:de:31:53:83:d6:
33:a2:46:7d:9e:fb:c3:bc:87:8e:b2:67:01:c0:0b:
c5:fe:98:bd:f4:8a:55:df:fa:e0:62:a7:d1:19:49:
f7:07:30:08:a4:47:d6:af:9f:02:8c:a4:90:8e:3f:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:BF:FF:70:91:7B:00:84:56:22:7D:C9:2F:E5:87:E0:62:FB:06
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f8:61:55:2b:b7:a2:0f:5e:7d:1d:aa:ed:26:03:21:06:42:
f5:49:83:bb:b8:01:66:9e:2a:b9:11:6b:91:f2:d0:87:df:ea:
c8:d0:70:0e:2f:3c:13:bc:67:06:06:c6:7e:eb:a2:b6:dd:52:
11:6d:af:df:6b:24:7a:f8:b5:37:c2:3f:03:89:68:cb:d6:5d:
25:83:b2:95:52:c5:64:db:72:73:98:86:69:e1:11:3e:08:05:
d2:38:13:65:8d:ba:19:ba:4f:d9:fd:a8:56:1a:78:d1:e9:2d:
06:e9:10:54:fd:db:7f:98:8c:11:cb:14:89:25:e0:2c:18:9f:
68:15:8e:66:91:cd:8b:7f:e4:e0:1f:e4:f0:e3:31:bb:25:2e:
9f:9a:74:c3:98:6b:e4:7d:bf:8c:87:7a:e3:5d:7c:6c:89:1b:
0f:29:35:0d:73:9b:65:4c:62:fc:bf:9a:07:f7:5c:b2:50:bc:
45:77:ff:e0:ee:00:e0:8d:dc:4d:43:c6:cb:7c:e4:af:d2:05:
b6:bb:d8:91:ec:c3:57:ff:99:ad:e2:24:43:10:63:03:c9:2c:
9c:8b:1d:55:d9:e0:e5:55:c5:88:cc:35:52:6d:51:28:ba:7f:
db:6d:f5:c4:5e:ce:ac:9c:ac:57:b0:41:20:8a:8b:08:81:2f:
23:f7:37:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumbWaWZclcI3FZnQ3nb/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjQ2MmM4YzAwNjVhMGE2Y2VhZjI0Mzk4NWI2OTdjZjEz
NTdiZmIwHhcNMjUwNDEzMTAwMjI3WhcNMjUwNDE0MTAwMjI3WjAzMTEwLwYDVQQD
EyhkMTNlYmZmZjcwOTE3YjAwODQ1NjIyN2RjOTJmZTU4N2UwNjJmYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MQ7R/tLf92cLWkd4gGGNdDXIZ9J
PS+T3GS4ais2ij06IC/PMgUBITQ4eNKFmPmNamSXhZmJZiegyqiEKO/ghgCxdMB+
K9XtM5b9IU3HGKApc5hdZJ30V9RUprbNu1m5nzHOc0dHLJ4k0XtxwFQ1jAVad7xQ
EN6bCTEgLl06bRLHyrYWUmfZlBQUHoHZg/03qFjTYDS9bwxjU0JQZKFrPzOrFS0U
O9eHaXrbmEaTLWBQNJiMsvTEU1dj0tjs/qMm2KchjAob229RI/sm3jFTg9YzokZ9
nvvDvIeOsmcBwAvF/pi99IpV3/rgYqfRGUn3BzAIpEfWr58CjKSQjj801wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE+v/9wkXsAhFYifckv5YfgYvsGMB8GA1UdIwQY
MBaAFCFkYsjABloKbOryQ5hbaXzxNXv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEt
NTZiYzcwOTY3ODg1LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEtNTZiYzcwOTY3ODg1
LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/hhVSu3
og9efR2q7SYDIQZC9UmDu7gBZp4quRFrkfLQh9/qyNBwDi88E7xnBgbGfuuitt1S
EW2v32skevi1N8I/A4loy9ZdJYOylVLFZNtyc5iGaeERPggF0jgTZY26GbpP2f2o
Vhp40ektBukQVP3bf5iMEcsUiSXgLBifaBWOZpHNi3/k4B/k8OMxuyUun5p0w5hr
5H2/jId64118bIkbDyk1DXObZUxi/L+aB/dcslC8RXf/4O4A4I3cTUPGy3zkr9IF
trvYkezDV/+ZreIkQxBjA8ksnIsdVdng5VXFiMw1Um1RKLp/2231xF7OrJysV7BB
IIqLCIEvI/c3QQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net