Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
File: IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft (raw, json)
Hash identifier: gCJ7zD8CBVaBI1ca+qOU3MFwPtHEoo/yIpjB+1BN5xE=
Subject key identifier: E8:14:5C:94:DE:FC:38:3F:54:BA:92:05:23:C1:AB:9C:3A:06:97:E1
Authority key identifier: 20:9F:93:D4:B5:C2:97:6F:BF:C3:6C:CC:E5:23:E1:E5:3B:01:9D:8D
Certificate issuer: /CN=209f93d4b5c2976fbfc36ccce523e1e53b019d8d
Certificate serial: 0195ECF062766490A0FF88FD13EA7D988B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
Manifest number: 0898
Signing time: Mon 31 Mar 2025 16:02:11 +0000
Manifest this update: Mon 31 Mar 2025 16:02:11 +0000
Manifest next update: Tue 01 Apr 2025 16:02:11 +0000
Files and hashes: 1: IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl (hash: BkF9YUsgS4N4i/4VRSivmhKfbD/FilT9aAfmZ4bZiDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:f0:62:76:64:90:a0:ff:88:fd:13:ea:7d:98:8b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f93d4b5c2976fbfc36ccce523e1e53b019d8d
Validity
Not Before: Mar 31 16:02:11 2025 GMT
Not After : Apr 1 16:02:11 2025 GMT
Subject: CN=e8145c94defc383f54ba920523c1ab9c3a0697e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:89:c9:22:95:1f:ae:7c:80:f2:b3:bb:4f:
2e:14:db:cb:09:06:4e:d1:e7:88:6b:a8:90:4a:01:
b0:d3:50:ea:d4:d7:03:78:7c:a5:11:9b:e2:79:69:
a5:0e:76:d1:f8:63:a4:44:f8:57:74:3a:23:05:ff:
b4:aa:df:74:5c:20:df:3a:13:46:68:e5:7b:2c:fe:
80:27:82:68:80:fc:db:09:01:2e:96:f3:f6:dd:8c:
cd:9c:5e:43:7b:c8:60:8b:9c:9a:b2:97:a8:3c:16:
94:e0:8b:38:10:11:bd:c7:73:f0:05:eb:69:2e:ab:
7b:b6:cf:dc:80:9b:07:04:a0:33:92:9a:e6:64:02:
d8:18:cb:29:b5:90:f4:7b:5c:b4:30:36:f2:e5:3b:
7a:81:ff:63:ad:7f:b2:59:51:cc:69:0c:b4:f9:c9:
f0:a2:2c:bc:5c:b0:f2:74:b9:64:21:ae:a9:4b:11:
e4:08:a8:68:b6:ba:29:bf:95:ba:8f:4c:2f:db:89:
e8:c0:89:d6:32:aa:0f:54:c2:3e:c5:0d:fe:2e:9c:
93:d9:a2:f6:d8:6a:42:c1:3a:83:f5:b2:c8:7c:df:
a3:ac:0f:81:2e:cb:3f:4c:62:fd:9f:6f:6e:6e:80:
3e:0b:72:d0:20:67:8c:6b:fd:1b:d8:ea:3f:3a:8d:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:14:5C:94:DE:FC:38:3F:54:BA:92:05:23:C1:AB:9C:3A:06:97:E1
X509v3 Authority Key Identifier:
keyid:20:9F:93:D4:B5:C2:97:6F:BF:C3:6C:CC:E5:23:E1:E5:3B:01:9D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:65:2e:98:80:e9:5c:bb:f7:bd:ae:b7:2a:31:54:4f:cd:51:
5f:bb:71:bd:2b:47:f2:19:74:f2:e1:e8:16:ca:bb:51:9d:75:
aa:e9:8b:a7:eb:cb:8b:e3:e6:ae:b8:ac:48:48:ba:8c:99:79:
86:f6:65:73:72:2b:91:23:23:14:20:d6:f0:15:28:bf:9a:d4:
16:99:e6:f6:70:9e:a6:94:17:97:83:a8:5d:e7:f4:ac:f5:5f:
7e:3d:ee:0c:49:7a:db:7b:83:48:76:e2:0c:f5:dd:7d:43:92:
93:92:24:b5:df:5b:59:17:aa:4b:46:8c:55:8f:d3:ac:15:4e:
42:79:47:ac:b4:bc:79:c9:3a:34:11:47:8f:4d:47:7f:a2:20:
44:fa:80:76:b7:15:47:24:f4:12:97:8d:8d:06:ee:b6:8e:00:
1c:32:99:9b:d9:d7:68:43:d7:7d:75:41:23:0d:57:93:f3:55:
67:f6:4f:b5:f5:51:e4:84:c4:6d:d9:d7:86:a3:9c:44:ee:32:
a5:81:06:74:79:3b:46:4a:75:42:ca:32:96:a7:45:58:23:bb:
1a:29:4b:0f:5c:38:e1:b5:b1:b0:2c:03:61:05:76:e0:c3:52:
0a:1b:9c:4a:ec:2c:1a:16:6f:42:86:3b:1e:fb:50:8a:ca:c9:
b9:ab:f5:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXs8GJ2ZJCg/4j9E+p9mIt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOWY5M2Q0YjVjMjk3NmZiZmMzNmNjY2U1MjNlMWU1M2Iw
MTlkOGQwHhcNMjUwMzMxMTYwMjExWhcNMjUwNDAxMTYwMjExWjAzMTEwLwYDVQQD
EyhlODE0NWM5NGRlZmMzODNmNTRiYTkyMDUyM2MxYWI5YzNhMDY5N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXCJySKVH658gPKzu08uFNvLCQZO
0eeIa6iQSgGw01Dq1NcDeHylEZvieWmlDnbR+GOkRPhXdDojBf+0qt90XCDfOhNG
aOV7LP6AJ4JogPzbCQEulvP23YzNnF5De8hgi5yaspeoPBaU4Is4EBG9x3PwBetp
Lqt7ts/cgJsHBKAzkprmZALYGMsptZD0e1y0MDby5Tt6gf9jrX+yWVHMaQy0+cnw
oiy8XLDydLlkIa6pSxHkCKhotropv5W6j0wv24nowInWMqoPVMI+xQ3+LpyT2aL2
2GpCwTqD9bLIfN+jrA+BLss/TGL9n29uboA+C3LQIGeMa/0b2Oo/Oo027wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgUXJTe/Dg/VLqSBSPBq5w6BpfhMB8GA1UdIwQY
MBaAFCCfk9S1wpdvv8NszOUj4eU7AZ2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUotVDFMWENsMi1fdzJ6TTVTUGg1VHNCblkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NTMwMzYtYTEzOC00NGFkLTg1NmMt
MTk5ZmQ3MzYyNTE3LzEvSUotVDFMWENsMi1fdzJ6TTVTUGg1VHNCblkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NTMwMzYtYTEzOC00NGFkLTg1NmMtMTk5ZmQ3MzYyNTE3
LzEvSUotVDFMWENsMi1fdzJ6TTVTUGg1VHNCblkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmUumIDp
XLv3va63KjFUT81RX7txvStH8hl08uHoFsq7UZ11qumLp+vLi+PmrrisSEi6jJl5
hvZlc3IrkSMjFCDW8BUov5rUFpnm9nCeppQXl4OoXef0rPVffj3uDEl623uDSHbi
DPXdfUOSk5Iktd9bWReqS0aMVY/TrBVOQnlHrLS8eck6NBFHj01Hf6IgRPqAdrcV
RyT0EpeNjQbuto4AHDKZm9nXaEPXfXVBIw1Xk/NVZ/ZPtfVR5ITEbdnXhqOcRO4y
pYEGdHk7Rkp1QsoylqdFWCO7GilLD1w44bWxsCwDYQV24MNSChucSuwsGhZvQoY7
HvtQisrJuav1ng==
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:49:46 2025 by rpki-client on console.sobornost.net