Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier: uqI5LYoKPj2xlCg4urx0e++458k3j9LRmPYEfbJa+jQ=
Subject key identifier: 48:43:EE:34:CD:A5:EF:D4:91:85:A8:28:41:F8:29:C9:D8:7E:30:18
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 0194BD17F7A3EB0E9ADE2D49F80AC363327B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number: 12FF
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: BhNE5JrDfZwwmJxenZHxneyHNKDTYg64eOGS5VP26dY=)
2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f7:a3:eb:0e:9a:de:2d:49:f8:0a:c3:63:32:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=4843ee34cda5efd49185a82841f829c9d87e3018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:21:94:ee:ed:9a:d5:69:df:34:84:15:61:
5b:ab:bb:37:f7:94:81:50:02:f1:a2:20:1a:0f:16:
63:27:52:1a:98:3d:8b:fd:fd:d4:48:a1:a9:71:f0:
d2:05:46:03:fb:8a:6c:67:37:ed:60:c2:9d:92:a4:
97:e3:ce:ad:83:5c:32:03:38:2d:5c:35:57:b2:9c:
ab:0b:f7:d3:5d:00:bf:ad:56:29:27:69:96:3d:69:
6a:a7:aa:57:ea:7b:ac:37:82:65:92:3d:b9:8a:e8:
6a:c2:39:b2:0f:de:9d:4e:77:5d:b1:91:53:6b:18:
1e:36:ff:71:ac:66:f0:7f:8a:d8:87:c0:f6:14:9d:
62:79:47:38:99:89:eb:4b:26:cd:28:f7:9f:36:a2:
29:d5:44:7d:ac:2a:ff:e0:ea:1d:c8:8c:8a:67:94:
c8:50:26:16:3b:c0:f3:ce:c6:9c:10:8a:9a:0c:0c:
0a:88:0c:13:ed:8d:f4:15:07:9d:8a:5e:a4:a9:07:
06:9a:37:b2:4c:79:53:03:fe:6a:d2:8e:17:5f:27:
a7:84:61:53:f8:3e:b6:4b:81:de:5b:8e:06:49:26:
75:fe:a1:4a:33:85:7d:84:f3:44:6d:43:02:67:f2:
9c:8a:88:ae:b8:4d:e8:ec:f6:f8:be:ee:aa:f5:09:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:EE:34:CD:A5:EF:D4:91:85:A8:28:41:F8:29:C9:D8:7E:30:18
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c9:84:56:f4:52:f6:74:ff:b9:97:bc:92:94:2d:09:30:32:
bc:22:55:53:1e:d1:66:39:da:45:40:ac:c7:4c:f4:65:70:3a:
75:ae:d8:57:2f:37:27:ec:48:7c:2e:ec:d6:34:7d:a6:12:19:
fa:46:92:29:1f:74:e3:5f:0c:85:26:bb:99:71:54:e7:4b:3a:
c2:46:25:bd:10:bc:8b:89:16:db:f9:80:cb:6b:b5:da:78:0e:
66:ed:73:a4:89:6e:fa:33:3f:d7:4c:0f:59:23:8e:e2:48:48:
06:81:ec:ea:a3:64:e5:5d:8d:fc:65:7a:01:64:d6:ed:16:45:
96:7b:80:af:c2:b4:04:6e:f5:45:77:81:7a:6f:73:30:d8:91:
d0:46:15:a7:62:1e:52:6c:1f:93:75:b0:08:73:3a:48:eb:84:
1e:41:ab:9f:36:c6:3d:4e:c2:4b:ae:b1:a1:06:52:de:f3:13:
bc:07:13:1c:2e:55:4e:77:dc:08:3d:4d:6b:1c:42:92:af:a2:
a1:6e:2b:94:a1:02:1a:8e:22:61:88:18:a3:1c:a6:97:03:4c:
ca:19:af:d2:37:de:56:fc:bc:70:60:57:06:b5:a8:8c:80:89:
a3:b9:8b:29:1c:44:27:9c:55:dc:a6:85:80:28:23:c8:6e:af:
bb:74:55:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/ej6w6a3i1J+ArDYzJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNWNmMGQzMTcwNGI1OWQ3ZWViMDE4NTQ4MjAyZDNhNTcw
ZGE5MzIwHhcNMjUwMTMxMTYwMDUxWhcNMjUwMjAxMTYwMDUxWjAzMTEwLwYDVQQD
Eyg0ODQzZWUzNGNkYTVlZmQ0OTE4NWE4Mjg0MWY4MjljOWQ4N2UzMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux0hlO7tmtVp3zSEFWFbq7s395SB
UALxoiAaDxZjJ1IamD2L/f3USKGpcfDSBUYD+4psZzftYMKdkqSX486tg1wyAzgt
XDVXspyrC/fTXQC/rVYpJ2mWPWlqp6pX6nusN4Jlkj25iuhqwjmyD96dTnddsZFT
axgeNv9xrGbwf4rYh8D2FJ1ieUc4mYnrSybNKPefNqIp1UR9rCr/4OodyIyKZ5TI
UCYWO8DzzsacEIqaDAwKiAwT7Y30FQedil6kqQcGmjeyTHlTA/5q0o4XXyenhGFT
+D62S4HeW44GSSZ1/qFKM4V9hPNEbUMCZ/KcioiuuE3o7Pb4vu6q9QkzxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhD7jTNpe/UkYWoKEH4KcnYfjAYMB8GA1UdIwQY
MBaAFCJc8NMXBLWdfusBhUggLTpXDakyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQt
MDBiYzkwM2QyNjIxLzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQtMDBiYzkwM2QyNjIx
LzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMmEVvRS
9nT/uZe8kpQtCTAyvCJVUx7RZjnaRUCsx0z0ZXA6da7YVy83J+xIfC7s1jR9phIZ
+kaSKR90418MhSa7mXFU50s6wkYlvRC8i4kW2/mAy2u12ngOZu1zpIlu+jM/10wP
WSOO4khIBoHs6qNk5V2N/GV6AWTW7RZFlnuAr8K0BG71RXeBem9zMNiR0EYVp2Ie
Umwfk3WwCHM6SOuEHkGrnzbGPU7CS66xoQZS3vMTvAcTHC5VTnfcCD1NaxxCkq+i
oW4rlKECGo4iYYgYoxymlwNMyhmv0jfeVvy8cGBXBrWojICJo7mLKRxEJ5xV3KaF
gCgjyG6vu3RVUg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:54 2025 by rpki-client