Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft
File: iDjoVrInLfF0ulpAqPx9XTAxyso.mft (raw, json)
Hash identifier: rfI0T7E81hm0OzRMx9SvBdeiL8W5sU61dAftJ6tuvKQ=
Subject key identifier: C9:0B:A0:82:AA:90:8D:BC:04:34:48:77:94:62:AE:ED:09:8F:9B:E7
Authority key identifier: 88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA
Certificate issuer: /CN=8838e856b2272df174ba5a40a8fc7d5d3031caca
Certificate serial: 0194BC0505A330407FBF06B6256632AE4BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft
Manifest number: 0D93
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: OZKug-HD4Xa2ZWdFBgCPcOgskwk.roa (hash: 3+egBPFrVIi/azwFyFARnF9adwzzIgSQuiDCKqIhA8c=)
2: iDjoVrInLfF0ulpAqPx9XTAxyso.crl (hash: VQYXxCnUg+DOUrQKLYK+BHB/YfT9TmYLEWMruE54Dbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:a3:30:40:7f:bf:06:b6:25:66:32:ae:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838e856b2272df174ba5a40a8fc7d5d3031caca
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=c90ba082aa908dbc043448779462aeed098f9be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:41:bc:58:d6:54:4f:a1:47:78:a4:8c:43:
ab:d0:47:4d:43:19:e0:19:6e:99:41:d1:d7:d9:8e:
60:4e:c8:f7:d9:52:82:7f:91:47:ae:28:d7:10:ff:
5d:c7:24:96:84:0d:a8:19:e7:60:3c:0b:e2:d4:94:
4c:52:cf:bd:3d:dd:87:b0:40:ff:d6:b5:0e:3c:71:
fc:01:94:82:a8:db:f2:44:77:0a:78:41:0d:b0:7d:
6a:28:63:2f:03:36:38:21:4b:83:59:b9:af:78:7d:
82:6d:6c:b7:92:e1:5c:4d:58:b8:3e:83:f0:ad:aa:
a8:aa:9e:d2:a6:ea:07:88:bf:4a:16:61:93:c9:32:
80:de:b8:5e:cc:94:42:79:d7:f4:9b:92:f4:31:d2:
32:2f:69:91:55:bc:36:db:e2:b9:33:06:e5:39:d9:
c2:9e:01:b3:f3:19:42:21:9d:23:c0:16:70:6c:cf:
64:33:1f:5d:70:71:0f:20:09:c9:f5:6a:96:73:85:
25:23:16:10:d1:a5:eb:77:95:da:27:9f:98:1c:94:
44:73:c4:85:1e:aa:d1:9d:36:4e:7a:ff:72:8f:6c:
c9:3a:6a:68:13:c2:1a:2b:84:de:f3:d7:30:55:ac:
40:84:c6:a5:25:97:56:9a:30:0c:92:d6:a4:d6:bb:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:A0:82:AA:90:8D:BC:04:34:48:77:94:62:AE:ED:09:8F:9B:E7
X509v3 Authority Key Identifier:
keyid:88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:17:64:0b:33:3e:55:02:d4:6f:c8:99:62:df:f7:e3:f8:02:
15:06:22:9a:27:50:70:7d:aa:08:4d:84:d5:8b:c6:4a:24:49:
1c:ed:f8:12:c9:95:93:9f:f3:be:b5:6c:f5:a4:2d:34:6a:3a:
e2:07:47:5f:9a:b7:ea:75:04:8c:62:10:8a:ae:28:69:3c:f9:
d1:d3:ef:e2:d3:86:6e:31:45:a0:25:b3:4f:c5:90:d1:37:c7:
8b:78:f7:ee:df:c6:5b:36:03:c1:92:8e:44:77:f7:49:89:3a:
f9:32:52:b0:6a:09:80:2c:76:70:38:8c:b5:6c:8f:1e:82:bf:
c0:30:cf:c2:e1:c7:2f:6d:d8:a9:a0:39:67:a9:0d:70:7e:c8:
9d:54:e4:40:d2:6d:09:11:ba:c2:7f:dc:56:ad:19:38:39:06:
7d:ec:8b:f1:a0:54:5a:b3:47:d8:58:9b:0c:0f:33:cb:77:ee:
89:b5:55:69:08:bf:ab:f8:fb:ed:2b:88:65:82:1d:6b:4c:34:
94:d6:52:7c:3d:b9:b7:19:d3:c4:8d:94:71:5a:1c:78:45:6c:
80:11:d9:70:c9:1e:96:01:a3:da:2c:8c:48:0c:fc:c9:6e:04:
38:67:65:c7:c7:51:13:f4:94:a7:c5:40:91:bc:08:79:6a:73:
23:1e:f3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQWjMEB/vwa2JWYyrkvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzhlODU2YjIyNzJkZjE3NGJhNWE0MGE4ZmM3ZDVkMzAz
MWNhY2EwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
EyhjOTBiYTA4MmFhOTA4ZGJjMDQzNDQ4Nzc5NDYyYWVlZDA5OGY5YmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf1BvFjWVE+hR3ikjEOr0EdNQxng
GW6ZQdHX2Y5gTsj32VKCf5FHrijXEP9dxySWhA2oGedgPAvi1JRMUs+9Pd2HsED/
1rUOPHH8AZSCqNvyRHcKeEENsH1qKGMvAzY4IUuDWbmveH2CbWy3kuFcTVi4PoPw
raqoqp7SpuoHiL9KFmGTyTKA3rhezJRCedf0m5L0MdIyL2mRVbw22+K5MwblOdnC
ngGz8xlCIZ0jwBZwbM9kMx9dcHEPIAnJ9WqWc4UlIxYQ0aXrd5XaJ5+YHJREc8SF
HqrRnTZOev9yj2zJOmpoE8IaK4Te89cwVaxAhMalJZdWmjAMktak1rsTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkLoIKqkI28BDRId5Riru0Jj5vnMB8GA1UdIwQY
MBaAFIg46FayJy3xdLpaQKj8fV0wMcrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83ZGEzYTktMzRkZi00OGY4LThhMWIt
MDc5ZTExMWVkYmY5LzEvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83ZGEzYTktMzRkZi00OGY4LThhMWItMDc5ZTExMWVkYmY5
LzEvaURqb1ZySW5MZkYwdWxwQXFQeDlYVEF4eXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRdkCzM+
VQLUb8iZYt/34/gCFQYimidQcH2qCE2E1YvGSiRJHO34EsmVk5/zvrVs9aQtNGo6
4gdHX5q36nUEjGIQiq4oaTz50dPv4tOGbjFFoCWzT8WQ0TfHi3j37t/GWzYDwZKO
RHf3SYk6+TJSsGoJgCx2cDiMtWyPHoK/wDDPwuHHL23YqaA5Z6kNcH7InVTkQNJt
CRG6wn/cVq0ZODkGfeyL8aBUWrNH2FibDA8zy3fuibVVaQi/q/j77SuIZYIda0w0
lNZSfD25txnTxI2UcVoceEVsgBHZcMkelgGj2iyMSAz8yW4EOGdlx8dRE/SUp8VA
kbwIeWpzIx7zrA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:49 2025 by rpki-client