Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
File: I9FK_odQITwoDltovvsYhm95SX8.mft (raw, json)
Hash identifier: Ogv6Nqh9q39ON2iqC/5ihzyydYQHB/4ieC47T4zikR4=
Subject key identifier: BA:D8:E4:51:D8:A2:3F:B0:D0:7B:7D:0B:B7:F1:2C:CB:3D:49:C5:68
Authority key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
Certificate issuer: /CN=23d14afe8750213c280e5b68befb18866f79497f
Certificate serial: 0194BBCDE99D5B9F0997999EDB7B3C6B6332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
Manifest number: AB
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: I9FK_odQITwoDltovvsYhm95SX8.crl (hash: vKXsjatJORgUuSl3Iqw/auXAGX2VMOmavJ+Zbt8uJNI=)
2: bfd_WpvacXpVJP__dq6vej5IyyY.roa (hash: /B+pNt8vIwVV5x8COrKPeKukz7hh0c0T1g3kvtIg6Z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:9d:5b:9f:09:97:99:9e:db:7b:3c:6b:63:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d14afe8750213c280e5b68befb18866f79497f
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=bad8e451d8a23fb0d07b7d0bb7f12ccb3d49c568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:aa:f4:dd:5e:7d:3c:79:44:0b:ff:95:ed:
bd:cf:53:a2:f8:42:3f:f7:d8:19:90:e1:03:5a:eb:
99:0a:38:38:a4:b9:bd:fa:eb:27:06:e7:21:97:3a:
42:26:af:3c:ca:55:e5:fa:a0:f4:02:a3:40:00:9f:
23:13:aa:2b:9b:fb:f6:d5:b1:3d:8c:6e:02:43:80:
f1:3a:ac:80:da:61:53:f5:c2:bf:08:0d:f6:a0:1c:
e1:67:cd:e1:7c:dc:7c:cd:c0:19:cc:2d:34:0e:ed:
df:72:bf:4c:e3:77:ad:cf:1d:3f:cf:51:68:5d:15:
f0:5d:4e:02:11:a9:f1:f0:6d:58:2a:e8:24:51:a0:
78:ae:f9:2b:ee:08:84:24:a9:4c:38:1a:e7:1e:ed:
c9:f4:9c:1a:97:4b:8f:93:04:6a:74:fa:9b:4b:2f:
70:55:c2:c0:c5:9a:0c:c2:7d:63:2e:2a:13:63:24:
8a:36:db:12:57:9a:45:91:2b:1b:8d:65:b1:68:3f:
00:3e:c5:49:37:ac:a3:2a:50:3f:46:b4:81:ae:73:
06:65:5f:28:07:92:a0:57:65:d3:0c:3e:62:de:06:
bc:89:e8:04:e0:b1:d5:34:d8:fb:38:11:ba:ee:fa:
11:5a:08:2c:34:11:cb:77:22:8b:25:3b:9c:f3:65:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:E4:51:D8:A2:3F:B0:D0:7B:7D:0B:B7:F1:2C:CB:3D:49:C5:68
X509v3 Authority Key Identifier:
keyid:23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:91:61:ba:a7:6d:c7:bb:60:0f:da:3c:55:da:a2:8c:b0:
3b:0c:8d:ca:13:35:95:be:65:27:87:c4:b6:70:b9:9e:f6:5b:
11:e3:1e:78:af:e3:56:4e:2b:db:fa:6f:14:ef:b6:ac:2f:c1:
f6:47:f6:a6:7b:18:59:c3:7b:fb:ee:6b:20:c1:ec:4d:c3:57:
8f:74:88:46:47:1b:45:03:6f:e6:c0:ca:fa:e9:8b:9e:06:54:
35:54:04:37:9b:4c:29:0d:09:93:8e:56:7a:00:76:b7:1b:2b:
fb:ce:47:6f:f3:e0:12:de:ca:07:73:07:82:10:8d:04:13:c1:
d7:0f:9a:b8:1a:21:2a:e2:9a:c8:0d:b3:6a:6b:ad:65:dc:23:
10:e4:88:44:9b:e2:bb:56:a2:ea:36:59:7d:4b:7e:de:8d:f0:
84:29:a9:ec:3b:7a:89:14:65:4d:1f:57:af:74:d5:3f:37:6c:
1c:87:1a:1a:f6:10:d7:18:76:a9:1a:41:0a:24:86:c3:3f:9a:
cc:5f:d8:b3:88:62:7d:af:8f:95:92:d3:1c:d4:d9:11:23:f5:
e1:7d:21:3c:a9:dc:76:08:3a:0a:fc:fc:e9:95:02:97:31:f9:
5c:03:e0:c9:62:d4:12:78:8e:5c:65:ff:b6:8b:64:33:76:d1:
e6:b8:77:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zemdW58Jl5me23s8a2MyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDE0YWZlODc1MDIxM2MyODBlNWI2OGJlZmIxODg2NmY3
OTQ5N2YwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
EyhiYWQ4ZTQ1MWQ4YTIzZmIwZDA3YjdkMGJiN2YxMmNjYjNkNDljNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Wq9N1efTx5RAv/le29z1Oi+EI/
99gZkOEDWuuZCjg4pLm9+usnBuchlzpCJq88ylXl+qD0AqNAAJ8jE6orm/v21bE9
jG4CQ4DxOqyA2mFT9cK/CA32oBzhZ83hfNx8zcAZzC00Du3fcr9M43etzx0/z1Fo
XRXwXU4CEanx8G1YKugkUaB4rvkr7giEJKlMOBrnHu3J9Jwal0uPkwRqdPqbSy9w
VcLAxZoMwn1jLioTYySKNtsSV5pFkSsbjWWxaD8APsVJN6yjKlA/RrSBrnMGZV8o
B5KgV2XTDD5i3ga8iegE4LHVNNj7OBG67voRWggsNBHLdyKLJTuc82XvtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrY5FHYoj+w0Ht9C7fxLMs9ScVoMB8GA1UdIwQY
MBaAFCPRSv6HUCE8KA5baL77GIZveUl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84OWY4NDUtNTc2NS00YzExLTkyY2Qt
ODQ3MmNhNDBmN2E3LzEvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84OWY4NDUtNTc2NS00YzExLTkyY2QtODQ3MmNhNDBmN2E3
LzEvSTlGS19vZFFJVHdvRGx0b3Z2c1lobTk1U1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVuRYbqn
bce7YA/aPFXaooywOwyNyhM1lb5lJ4fEtnC5nvZbEeMeeK/jVk4r2/pvFO+2rC/B
9kf2pnsYWcN7++5rIMHsTcNXj3SIRkcbRQNv5sDK+umLngZUNVQEN5tMKQ0Jk45W
egB2txsr+85Hb/PgEt7KB3MHghCNBBPB1w+auBohKuKayA2zamutZdwjEOSIRJvi
u1ai6jZZfUt+3o3whCmp7Dt6iRRlTR9Xr3TVPzdsHIcaGvYQ1xh2qRpBCiSGwz+a
zF/Ys4hifa+PlZLTHNTZESP14X0hPKncdgg6Cvz86ZUClzH5XAPgyWLUEniOXGX/
totkM3bR5rh3xw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:57 2025 by rpki-client