Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: 4v81ba5+aVbZlC9tqQa8iEdwgz0HXKFl6mPx6LqXK7s=
Subject key identifier: A3:A3:B0:E9:AD:C4:1E:DB:A8:52:1D:8D:F1:FE:56:13:0B:57:1F:06
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 0194BC05151FAB1215D0EAF71EA676BD71F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 08BF
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: Fiar-ENd6nnmoEdCXbLpcIPIC8k.roa (hash: QQnwLsS3aNsC6jrod8mH1TrmnCup6aH2qx4uUiV6rWs=)
2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: JDF5/HiaR+zvYWWpBnZGwc3tkGpKJhTEdETo+tMMGcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:1f:ab:12:15:d0:ea:f7:1e:a6:76:bd:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=a3a3b0e9adc41edba8521d8df1fe56130b571f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:3e:48:8b:58:77:7f:f8:c8:aa:e8:36:3d:
bb:e8:d3:f1:dc:70:40:d0:3d:17:dc:99:94:b1:05:
e9:b4:27:65:1d:16:eb:bd:82:f5:02:d1:42:d7:ac:
cd:c1:c4:c3:be:ae:10:a4:af:66:da:78:dc:a6:b1:
a3:4a:88:76:f0:39:29:d2:94:c0:ee:a1:c7:65:90:
c8:63:09:f2:06:61:ce:36:20:13:6d:a2:2d:40:d4:
8e:87:bc:5a:ad:7b:12:48:21:2c:d4:26:80:b2:63:
05:f4:75:90:de:05:88:55:07:2b:40:bc:17:57:d7:
22:70:f5:67:03:c2:bc:47:6e:6f:89:11:95:a8:85:
d9:99:0a:d0:20:d5:ec:11:3e:a0:1e:9d:36:24:a6:
7f:72:a6:04:54:62:1d:e0:2a:7c:4b:d8:de:91:2a:
03:d9:93:8e:83:c3:d1:4e:ca:95:ee:00:ed:54:b1:
ce:8f:3e:90:52:c0:e2:a0:fc:5a:5e:6c:29:89:f4:
ed:79:16:30:95:0c:fb:c0:8e:a4:a3:e4:f7:79:0b:
e7:a5:0c:d7:61:e9:d5:5f:95:b6:e7:d3:4a:08:74:
0a:73:8e:72:77:e4:97:83:12:29:18:04:b2:80:de:
f6:c1:4d:74:70:8f:c8:54:56:ed:00:ee:a5:69:bc:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:B0:E9:AD:C4:1E:DB:A8:52:1D:8D:F1:FE:56:13:0B:57:1F:06
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:aa:7d:d7:f9:6a:88:6d:66:2d:9f:57:b9:af:3d:a5:e4:ff:
cc:f2:a5:b6:fa:67:c0:4e:28:46:03:a9:9b:4d:69:26:b1:9e:
70:55:e1:62:58:0d:03:59:27:95:82:d7:27:3b:af:5a:c0:59:
85:09:db:d4:19:f7:7e:e4:8b:9a:1c:a4:58:86:f1:d6:54:c7:
e5:95:e1:3e:6f:d8:74:af:50:db:d5:ee:e0:ad:34:43:e8:b4:
8c:aa:07:d4:1e:3e:8f:62:55:f6:f6:3c:0a:26:47:f3:64:82:
0d:57:16:3a:79:a5:5b:4d:cb:51:ea:30:ba:17:60:d2:53:26:
c7:69:37:42:c3:c1:07:25:71:4d:fc:d0:82:00:d3:2c:be:6a:
f6:72:e6:dc:63:e3:0d:7e:86:a4:49:be:5c:9b:24:20:b0:c3:
05:bc:17:7f:c8:5c:bc:76:69:fc:50:0c:44:71:07:49:4f:9e:
a2:11:41:fc:be:57:1e:a9:b5:20:32:be:26:a0:c8:f4:0d:d1:
e1:3b:6a:30:6b:da:fa:81:42:28:6e:24:e7:0b:c3:7c:2c:f5:
ac:02:68:95:e4:f7:6e:59:04:cd:b2:e6:10:45:cd:85:07:00:
cf:26:a7:33:0b:83:f3:42:0e:dd:b5:d8:ba:b5:a4:ff:ea:44:
5d:95:d6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRUfqxIV0Or3HqZ2vXHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOTJkOTZkZmI2NmNiMTgwNjlkOGJkMTVjOWU5MGNkOTEy
NGYwMDMwHhcNMjUwMTMxMTEwMDM3WhcNMjUwMjAxMTEwMDM3WjAzMTEwLwYDVQQD
EyhhM2EzYjBlOWFkYzQxZWRiYTg1MjFkOGRmMWZlNTYxMzBiNTcxZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiE+SItYd3/4yKroNj276NPx3HBA
0D0X3JmUsQXptCdlHRbrvYL1AtFC16zNwcTDvq4QpK9m2njcprGjSoh28Dkp0pTA
7qHHZZDIYwnyBmHONiATbaItQNSOh7xarXsSSCEs1CaAsmMF9HWQ3gWIVQcrQLwX
V9cicPVnA8K8R25viRGVqIXZmQrQINXsET6gHp02JKZ/cqYEVGId4Cp8S9jekSoD
2ZOOg8PRTsqV7gDtVLHOjz6QUsDioPxaXmwpifTteRYwlQz7wI6ko+T3eQvnpQzX
YenVX5W259NKCHQKc45yd+SXgxIpGASygN72wU10cI/IVFbtAO6labz8zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOjsOmtxB7bqFIdjfH+VhMLVx8GMB8GA1UdIwQY
MBaAFCKS2W37ZssYBp2L0VyekM2RJPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEt
OTllZTYxNmNhODViLzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEtOTllZTYxNmNhODVi
LzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKp91/lq
iG1mLZ9Xua89peT/zPKltvpnwE4oRgOpm01pJrGecFXhYlgNA1knlYLXJzuvWsBZ
hQnb1Bn3fuSLmhykWIbx1lTH5ZXhPm/YdK9Q29Xu4K00Q+i0jKoH1B4+j2JV9vY8
CiZH82SCDVcWOnmlW03LUeowuhdg0lMmx2k3QsPBByVxTfzQggDTLL5q9nLm3GPj
DX6GpEm+XJskILDDBbwXf8hcvHZp/FAMRHEHSU+eohFB/L5XHqm1IDK+JqDI9A3R
4TtqMGva+oFCKG4k5wvDfCz1rAJoleT3blkEzbLmEEXNhQcAzyanMwuD80IO3bXY
urWk/+pEXZXWMA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:07 2025 by rpki-client