Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: osyLc2HoxFCT2bgff1RV/f/SSMKgv52txG2ddLmxnS0=
Subject key identifier: F1:A1:A2:E5:24:D3:E7:60:3B:F1:28:8C:AD:58:D9:D1:3D:9C:89:FC
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 0194BCAA3E4489D562F5C4DECD3E629215EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 114C
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: BncBCJV3qTdscWlUcQP0QxwbtDCrH6L1zNVKnPN7F8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3e:44:89:d5:62:f5:c4:de:cd:3e:62:92:15:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=f1a1a2e524d3e7603bf1288cad58d9d13d9c89fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:17:cd:01:f6:ff:a1:03:72:15:c6:8a:b6:
e5:88:e8:35:73:d4:d4:90:01:c4:95:93:72:07:9a:
40:ba:f5:c1:74:1e:7d:72:2e:21:03:5c:ef:b9:b3:
61:69:1c:9c:f5:6e:ce:a2:e6:27:24:f7:21:8a:4d:
90:38:96:40:f9:e9:cd:bc:b0:22:e9:b8:fd:77:6d:
b9:99:b2:e7:cb:e1:94:3e:85:02:19:19:28:32:6a:
53:03:7a:a0:87:0a:42:81:fa:76:6f:81:f5:2b:a4:
06:69:0e:63:01:89:21:62:9e:69:9c:66:a3:4f:1a:
2b:e3:bd:46:12:e1:1f:26:d2:32:a1:ed:cb:c6:b9:
6b:3b:3a:9a:17:2b:da:b5:8f:37:53:7a:9f:68:bd:
b6:18:56:d5:70:5e:bb:2c:8b:5b:19:dc:5b:5f:1b:
ea:2e:67:1d:ff:73:af:52:43:31:a5:f4:76:18:a1:
89:1e:a2:7f:b6:b5:8d:59:a1:e3:c1:27:78:2e:a3:
8e:eb:b2:fe:fd:bb:d4:0c:a6:6a:17:42:6a:ed:59:
c4:a5:2b:a9:c6:85:90:05:81:c6:d2:72:8e:f0:98:
0c:3b:57:ab:ef:2f:3b:6d:f4:4b:6d:83:67:57:1a:
e7:1d:b7:8f:29:2b:d0:a5:21:58:15:02:68:f5:f5:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:A2:E5:24:D3:E7:60:3B:F1:28:8C:AD:58:D9:D1:3D:9C:89:FC
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:05:8c:81:9f:fa:fa:23:66:81:10:85:83:4e:a3:87:f8:53:
d8:62:b5:51:fe:f9:7a:e4:fd:5b:4d:b7:19:58:a1:31:03:c1:
3c:5e:86:2a:30:f0:6c:38:ad:d1:35:0e:65:40:ab:1d:c0:db:
de:2c:5a:ce:e5:0f:59:e6:b4:e0:b4:5f:8d:49:72:ec:bd:74:
b2:3d:41:8b:fe:f3:94:98:4d:d4:6c:33:8c:8a:0e:c7:ab:df:
e5:2e:1d:a0:8d:1e:b6:cd:94:5a:01:d1:78:de:82:39:d9:90:
3e:81:05:56:25:2a:ad:45:61:c0:83:d7:4b:9c:62:ac:0f:ac:
98:9e:ac:37:e8:e8:15:9b:fc:f0:fe:ba:75:b1:e8:d8:52:d6:
ee:7e:ea:82:95:ea:14:c7:45:f4:ea:7c:f7:15:e3:3f:14:b1:
2c:b3:b8:4f:24:85:2b:a7:21:d9:6b:12:64:f2:66:61:44:d7:
52:8f:b7:ca:f4:26:95:fc:6c:bb:61:88:a6:95:09:b9:f1:03:
66:fa:7c:1b:b7:9b:2c:9f:d0:e1:c8:eb:ab:48:15:9d:5a:e0:
79:35:81:c8:9c:75:75:fc:42:54:8a:3c:f3:e7:e3:37:bf:78:
fe:cb:f5:65:5b:d9:5b:e6:9d:41:97:7a:95:b3:69:ca:70:4a:
8a:c0:41:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qj5EidVi9cTezT5ikhXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OThkYjhjYjg2MWJiYmRkMWZiNzU2MmRlZjRkNzdkODY0
MmMzMjQwHhcNMjUwMTMxMTQwMTAxWhcNMjUwMjAxMTQwMTAxWjAzMTEwLwYDVQQD
EyhmMWExYTJlNTI0ZDNlNzYwM2JmMTI4OGNhZDU4ZDlkMTNkOWM4OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtcXzQH2/6EDchXGirbliOg1c9TU
kAHElZNyB5pAuvXBdB59ci4hA1zvubNhaRyc9W7OouYnJPchik2QOJZA+enNvLAi
6bj9d225mbLny+GUPoUCGRkoMmpTA3qghwpCgfp2b4H1K6QGaQ5jAYkhYp5pnGaj
Txor471GEuEfJtIyoe3LxrlrOzqaFyvatY83U3qfaL22GFbVcF67LItbGdxbXxvq
Lmcd/3OvUkMxpfR2GKGJHqJ/trWNWaHjwSd4LqOO67L+/bvUDKZqF0Jq7VnEpSup
xoWQBYHG0nKO8JgMO1er7y87bfRLbYNnVxrnHbePKSvQpSFYFQJo9fWBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGhouUk0+dgO/EojK1Y2dE9nIn8MB8GA1UdIwQY
MBaAFIiY24y4Ybu90ft1Yt70132GQsMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYt
MTYwYzI0YzY2NjMwLzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYtMTYwYzI0YzY2NjMw
LzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAWMgZ/6
+iNmgRCFg06jh/hT2GK1Uf75euT9W023GVihMQPBPF6GKjDwbDit0TUOZUCrHcDb
3ixazuUPWea04LRfjUly7L10sj1Bi/7zlJhN1GwzjIoOx6vf5S4doI0ets2UWgHR
eN6COdmQPoEFViUqrUVhwIPXS5xirA+smJ6sN+joFZv88P66dbHo2FLW7n7qgpXq
FMdF9Op89xXjPxSxLLO4TySFK6ch2WsSZPJmYUTXUo+3yvQmlfxsu2GIppUJufED
Zvp8G7ebLJ/Q4cjrq0gVnVrgeTWByJx1dfxCVIo88+fjN794/sv1ZVvZW+adQZd6
lbNpynBKisBBfg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:54 2025 by rpki-client