Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: Nom8mcMyLrQn15mkl2vNy2TbEoPyuzhgHxPgwwSYe0E=
Subject key identifier: A1:1E:50:19:83:4B:4D:D4:AC:8F:93:76:C0:86:82:BC:0A:C4:19:74
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 0194BD4E7267B05F26EE7F8AC1241DDC0741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 02EE
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: iMy3PhjLNKI08zmk9p7X0CpWQVic/ejrCol9MjD6LEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:67:b0:5f:26:ee:7f:8a:c1:24:1d:dc:07:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=a11e5019834b4dd4ac8f9376c08682bc0ac41974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:55:85:2d:9c:c0:d2:64:61:19:b0:f9:82:
58:64:98:61:a6:38:ff:83:43:8e:2a:31:43:05:00:
dc:4e:07:5c:3d:9f:a8:55:5c:56:82:73:49:e6:a3:
6c:0c:b9:16:ef:65:68:28:b4:2a:43:12:90:ed:14:
bb:f1:3e:c7:7e:3e:b9:2b:2d:d3:d2:a2:3f:f9:a4:
13:ac:5a:f9:65:16:64:4c:b8:8c:eb:6d:b0:a9:5a:
26:9e:0a:12:b2:72:66:2c:fd:ae:67:1a:bc:91:58:
13:e4:9a:f1:58:5d:84:b9:fc:d6:dd:0f:d3:e1:f2:
85:51:f5:54:9e:e3:fc:9f:cf:b8:ad:7a:58:34:12:
31:50:e6:5f:b5:ce:25:96:ff:fa:a4:2f:a8:34:5e:
6e:eb:46:99:6b:ca:59:d7:80:4a:f1:41:7c:84:e1:
9e:eb:92:39:20:6d:fd:bb:75:2f:bb:c6:e9:ed:73:
60:44:74:cc:e2:48:91:6c:b7:78:70:3d:df:6c:41:
ea:26:cd:22:9d:35:c5:62:88:dd:45:cb:28:67:0b:
a9:c2:87:4a:04:82:ce:0e:72:30:1a:58:b3:e2:5a:
fc:4e:5b:ad:e7:11:eb:42:d1:4b:e8:8f:fe:b2:20:
fd:6a:07:5e:fb:ad:78:e8:05:87:e7:63:63:d6:f5:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:50:19:83:4B:4D:D4:AC:8F:93:76:C0:86:82:BC:0A:C4:19:74
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c0:62:25:20:2b:85:60:29:a1:47:18:0a:ed:0f:76:11:72:
4a:9c:6a:78:00:84:94:30:e2:b3:d9:97:9a:54:07:fa:1d:84:
e4:bc:77:1c:9a:81:ce:53:c1:57:d7:01:87:f9:16:41:4f:3a:
e7:f7:c0:7d:a4:e3:06:ea:ac:42:d0:65:28:30:6b:91:ce:b5:
66:a2:1a:78:53:36:0e:5d:a6:df:7f:06:78:3f:b6:ca:6d:35:
93:17:b1:dd:53:a9:a9:1b:00:ee:ae:8c:49:88:89:b4:2d:55:
20:4d:9b:fb:8d:02:fc:37:92:87:e7:c9:55:73:90:99:f7:ad:
52:a4:05:db:8b:49:0e:e6:cb:78:fc:b4:27:93:a2:f9:0c:47:
4b:39:32:fb:ca:4a:15:cc:e5:3b:e3:5e:2e:5a:ed:4a:90:59:
de:d2:28:67:0e:16:5c:60:c4:d3:51:4a:17:6c:bb:30:49:63:
82:66:e6:62:7e:d9:1b:b1:84:65:e6:60:24:28:b3:70:84:2d:
27:1f:35:ef:43:9b:c5:54:6c:b1:3a:79:f4:66:cb:7b:be:3b:
b1:ff:07:59:c2:b6:67:af:c4:24:40:7f:da:40:c0:66:bd:78:
5c:9e:d4:38:55:a9:a5:d4:97:01:a5:fd:4a:fc:3c:3a:3e:cb:
d6:7b:9b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnJnsF8m7n+KwSQd3AdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNzNmODM3MzVjOGFiMTBhMGE4ZDQ0ZTE3MDEyOGYwMjM4
NDZlNzkwHhcNMjUwMTMxMTcwMDIyWhcNMjUwMjAxMTcwMDIyWjAzMTEwLwYDVQQD
EyhhMTFlNTAxOTgzNGI0ZGQ0YWM4ZjkzNzZjMDg2ODJiYzBhYzQxOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCpVhS2cwNJkYRmw+YJYZJhhpjj/
g0OOKjFDBQDcTgdcPZ+oVVxWgnNJ5qNsDLkW72VoKLQqQxKQ7RS78T7Hfj65Ky3T
0qI/+aQTrFr5ZRZkTLiM622wqVomngoSsnJmLP2uZxq8kVgT5JrxWF2EufzW3Q/T
4fKFUfVUnuP8n8+4rXpYNBIxUOZftc4llv/6pC+oNF5u60aZa8pZ14BK8UF8hOGe
65I5IG39u3Uvu8bp7XNgRHTM4kiRbLd4cD3fbEHqJs0inTXFYojdRcsoZwupwodK
BILODnIwGliz4lr8Tlut5xHrQtFL6I/+siD9agde+6146AWH52Nj1vUTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEeUBmDS03UrI+TdsCGgrwKxBl0MB8GA1UdIwQY
MBaAFItz+Dc1yKsQoKjUThcBKPAjhG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQt
NjVkZDdmNTJlNDZjLzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQtNjVkZDdmNTJlNDZj
LzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8BiJSAr
hWApoUcYCu0PdhFySpxqeACElDDis9mXmlQH+h2E5Lx3HJqBzlPBV9cBh/kWQU86
5/fAfaTjBuqsQtBlKDBrkc61ZqIaeFM2Dl2m338GeD+2ym01kxex3VOpqRsA7q6M
SYiJtC1VIE2b+40C/DeSh+fJVXOQmfetUqQF24tJDubLePy0J5Oi+QxHSzky+8pK
FczlO+NeLlrtSpBZ3tIoZw4WXGDE01FKF2y7MEljgmbmYn7ZG7GEZeZgJCizcIQt
Jx8170ObxVRssTp59GbLe747sf8HWcK2Z6/EJEB/2kDAZr14XJ7UOFWppdSXAaX9
Svw8Oj7L1nubSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:15 2025 by rpki-client