Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: DIL+etOO5poJoJNI2P6LbiuD7KuXDYgPA+BJ9VSoLgw=
Subject key identifier: 96:EC:C4:52:4C:52:F3:2C:A9:9A:D7:F0:A2:D0:28:2A:02:EF:3C:B2
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 01962F74307893F1CAC2432B4A2A610D6401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 14:01:05 +0000
Manifest this update: Sun 13 Apr 2025 14:01:05 +0000
Manifest next update: Mon 14 Apr 2025 14:01:05 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: AjOVwBvCmNXUB49FuGRxRB0+oUeIVhXxnlFoaIXE/wM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:30:78:93:f1:ca:c2:43:2b:4a:2a:61:0d:64:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Apr 13 14:01:05 2025 GMT
Not After : Apr 14 14:01:05 2025 GMT
Subject: CN=96ecc4524c52f32ca99ad7f0a2d0282a02ef3cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:08:2c:89:c5:b3:79:94:8f:1b:3c:01:32:
b1:a1:dc:42:99:ca:a5:d7:e7:f0:7f:76:6e:b2:ea:
2a:8d:85:9e:6e:e4:9a:0c:1e:12:00:aa:b9:9d:43:
35:d7:7e:35:4c:32:dc:91:cc:d4:66:3a:88:bb:24:
f5:ff:f0:a7:59:ff:8e:d3:39:46:17:fe:24:01:d0:
7a:85:15:03:9d:3b:3d:81:04:3f:bb:3a:27:7a:f7:
6e:dc:5c:00:15:b1:f2:a9:1e:7b:a2:82:b9:ea:f3:
3f:8a:9b:e1:04:c5:a9:05:71:13:84:ae:7f:f6:e5:
ed:86:90:a9:18:bb:2a:b7:42:16:e9:c8:29:c6:fe:
48:f4:cc:5c:bf:ba:e7:ac:5f:71:8c:f5:2a:c7:fe:
e5:97:29:d1:51:35:14:3b:e6:95:ac:6a:e9:55:be:
ea:46:55:ae:ed:b9:cb:b7:c1:85:a2:05:cb:0d:a6:
08:97:ee:2a:9f:c4:c5:0c:2d:84:2d:e5:60:07:8e:
a2:9c:84:8f:94:2e:df:6e:91:2c:a4:0c:80:fc:bb:
32:1b:ac:dd:da:80:65:44:fe:85:a1:e2:2e:ad:c3:
66:6d:da:b0:49:a7:41:9c:f6:48:0b:56:83:8f:da:
be:03:2f:f9:04:00:67:d2:fd:15:d9:02:5e:26:6a:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:C4:52:4C:52:F3:2C:A9:9A:D7:F0:A2:D0:28:2A:02:EF:3C:B2
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:01:eb:9d:ac:12:3e:bd:d2:e1:80:70:0a:ca:30:7b:a4:f7:
13:cd:8e:8d:f2:10:c3:a3:38:9a:b1:f3:ec:8e:90:85:fc:4e:
53:e3:5f:83:cb:67:93:9d:8c:93:59:74:1d:87:8e:62:84:5b:
85:a0:4e:bf:b2:20:60:a7:57:ef:bc:d0:27:8d:05:3a:e0:29:
18:9e:8d:8d:f1:cb:c3:43:e3:07:d3:b1:5d:ed:5a:2f:0f:84:
c0:11:80:66:0f:98:88:9c:9c:18:23:41:26:32:7d:0d:84:84:
2b:ac:fd:c4:5d:a8:89:6a:c4:02:88:3f:d4:40:92:d5:ed:07:
31:34:37:e7:5d:75:92:94:41:4a:b3:fd:5f:90:6d:82:67:05:
42:c5:e8:1c:0b:e3:40:87:db:15:f4:af:db:00:e5:65:65:51:
55:bf:71:da:0a:d9:44:b2:9d:a8:76:5d:d0:f4:19:be:2d:2f:
e2:50:d5:7f:ac:e4:64:a2:67:26:fe:bf:4f:ad:bf:c8:de:f8:
43:31:7a:b1:df:3e:fc:f5:62:5d:8e:d4:8f:34:6d:e2:43:bb:
fd:f2:94:ec:65:1d:e7:6d:28:5b:74:21:38:67:50:5c:48:9f:
5e:20:7d:af:91:8b:26:d4:b2:6c:f1:a8:cc:cf:06:8c:0c:5c:
e1:4a:c6:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDB4k/HKwkMrSiphDWQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy
YjcyM2IwHhcNMjUwNDEzMTQwMTA1WhcNMjUwNDE0MTQwMTA1WjAzMTEwLwYDVQQD
Eyg5NmVjYzQ1MjRjNTJmMzJjYTk5YWQ3ZjBhMmQwMjgyYTAyZWYzY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCYILInFs3mUjxs8ATKxodxCmcql
1+fwf3ZusuoqjYWebuSaDB4SAKq5nUM11341TDLckczUZjqIuyT1//CnWf+O0zlG
F/4kAdB6hRUDnTs9gQQ/uzonevdu3FwAFbHyqR57ooK56vM/ipvhBMWpBXEThK5/
9uXthpCpGLsqt0IW6cgpxv5I9Mxcv7rnrF9xjPUqx/7llynRUTUUO+aVrGrpVb7q
RlWu7bnLt8GFogXLDaYIl+4qn8TFDC2ELeVgB46inISPlC7fbpEspAyA/LsyG6zd
2oBlRP6FoeIurcNmbdqwSadBnPZIC1aDj9q+Ay/5BABn0v0V2QJeJmo7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbsxFJMUvMsqZrX8KLQKCoC7zyyMB8GA1UdIwQY
MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt
OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy
LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgHrnawS
Pr3S4YBwCsowe6T3E82OjfIQw6M4mrHz7I6QhfxOU+Nfg8tnk52Mk1l0HYeOYoRb
haBOv7IgYKdX77zQJ40FOuApGJ6NjfHLw0PjB9OxXe1aLw+EwBGAZg+YiJycGCNB
JjJ9DYSEK6z9xF2oiWrEAog/1ECS1e0HMTQ35111kpRBSrP9X5BtgmcFQsXoHAvj
QIfbFfSv2wDlZWVRVb9x2grZRLKdqHZd0PQZvi0v4lDVf6zkZKJnJv6/T62/yN74
QzF6sd8+/PViXY7UjzRt4kO7/fKU7GUd520oW3QhOGdQXEifXiB9r5GLJtSybPGo
zM8GjAxc4UrG/Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net