Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
File: iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json)
Hash identifier: Y892u34PDyTikktbvguNJt0LeXv05WFzPfM8+8yEbdI=
Subject key identifier: DD:3A:AB:46:CC:7D:67:D5:68:0B:08:1E:F8:D2:BC:5B:49:29:E1:D6
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial: 0194BC3C5F173E23B36E132E596CDF6C361A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa (hash: C2nYBT6rKIdGBRSYm5JfeMMp+MUUrWzb3x2zB3OMlgE=)
2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: arO8bsz8DykuMBfC3Uu/6BIxXmbcBzxx/BoTd5L05vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5f:17:3e:23:b3:6e:13:2e:59:6c:df:6c:36:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=dd3aab46cc7d67d5680b081ef8d2bc5b4929e1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:7a:d9:a2:c7:cc:7f:47:d4:8b:b6:b3:03:
ab:d3:b3:26:9d:e1:ca:76:e8:31:51:35:98:26:75:
a4:3d:9e:b6:97:80:5b:5b:74:ba:7e:e7:e9:b8:1f:
8c:ab:c5:b2:0f:73:e3:46:0b:43:6a:a9:60:2e:f6:
72:e4:de:93:b3:4a:09:af:e0:79:81:f2:28:42:dd:
e4:49:2d:ed:b4:9f:e7:64:8f:88:9d:b8:14:c6:e8:
a5:49:b1:54:e0:c1:50:e6:e3:73:b2:7e:c8:96:a4:
bb:e0:1a:15:56:36:bc:e4:08:66:41:18:89:82:e1:
15:1c:a3:e7:ae:31:26:05:f3:60:b7:da:b7:7e:59:
a5:de:02:53:a5:9d:2a:8f:0c:7e:4c:72:5c:64:a1:
c6:4b:00:a2:58:28:69:5b:6a:cd:0e:85:7f:fb:0c:
1f:db:cf:63:c6:5e:40:63:58:04:44:45:77:bd:ba:
b6:25:6f:cb:63:79:42:fe:de:9f:c2:e0:07:07:76:
a1:79:41:b7:32:1b:29:e8:66:12:12:99:5a:f5:a4:
d9:04:af:a2:5c:64:5d:20:3e:af:02:23:07:b9:aa:
45:fd:78:f7:30:6c:3f:42:6e:0a:56:12:94:e0:24:
be:36:f2:90:be:2f:9a:d2:65:b7:36:02:2a:f6:92:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:AB:46:CC:7D:67:D5:68:0B:08:1E:F8:D2:BC:5B:49:29:E1:D6
X509v3 Authority Key Identifier:
keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:03:29:e3:29:9e:41:5b:0e:e1:ec:8a:1e:4a:d8:7a:74:24:
c2:b5:7d:c0:8a:5b:68:69:f0:22:f6:61:cb:54:20:c9:42:3a:
c1:1e:bb:43:93:26:7f:18:69:d5:e6:83:2b:01:81:3f:b7:39:
69:9b:88:d4:b3:cb:31:69:8a:6e:93:5d:96:03:4e:8e:86:29:
3d:a4:f8:9b:14:26:83:1b:08:29:34:67:37:2b:03:d9:d1:1c:
b3:db:c9:90:03:81:41:4d:40:57:02:82:89:72:d1:b9:c0:9a:
01:99:d7:47:b3:41:1c:66:36:ba:fe:be:e3:a7:a7:1a:3a:c5:
46:b2:ea:ec:87:c3:a0:d7:88:14:b8:23:42:3f:5e:f3:73:c0:
f0:d2:a5:47:32:1b:ac:32:aa:85:91:41:d0:27:11:5b:f1:c6:
e4:01:b7:96:af:d2:be:04:ac:7c:69:8f:d7:a3:ae:42:14:6f:
4c:78:5e:f5:93:d1:05:3b:fa:6b:7a:33:c0:a9:cb:86:29:b9:
6b:7c:1f:32:d7:91:22:e6:3a:53:00:ed:67:76:f8:cd:2f:80:
0a:a7:66:df:59:ba:81:d8:42:4d:89:4c:bf:8f:ac:9a:09:9f:
48:fd:ae:eb:06:8b:02:ff:03:fd:6d:8e:61:3c:bb:86:75:a6:
6d:36:d0:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PF8XPiOzbhMuWWzfbDYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWNiODg5M2U5NDE4MDc0N2VlYzE5NzVlZDU2MDRjNGRk
YmUwYzUwHhcNMjUwMTMxMTIwMTAwWhcNMjUwMjAxMTIwMTAwWjAzMTEwLwYDVQQD
EyhkZDNhYWI0NmNjN2Q2N2Q1NjgwYjA4MWVmOGQyYmM1YjQ5MjllMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjx62aLHzH9H1Iu2swOr07MmneHK
dugxUTWYJnWkPZ62l4BbW3S6fufpuB+Mq8WyD3PjRgtDaqlgLvZy5N6Ts0oJr+B5
gfIoQt3kSS3ttJ/nZI+InbgUxuilSbFU4MFQ5uNzsn7IlqS74BoVVja85AhmQRiJ
guEVHKPnrjEmBfNgt9q3flml3gJTpZ0qjwx+THJcZKHGSwCiWChpW2rNDoV/+wwf
289jxl5AY1gEREV3vbq2JW/LY3lC/t6fwuAHB3aheUG3Mhsp6GYSEpla9aTZBK+i
XGRdID6vAiMHuapF/Xj3MGw/Qm4KVhKU4CS+NvKQvi+a0mW3NgIq9pIXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN06q0bMfWfVaAsIHvjSvFtJKeHWMB8GA1UdIwQY
MBaAFImsuIk+lBgHR+7Bl17VYExN2+DFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wY2Q0YmUtMjQ3Zi00ZGUyLTkzOGMt
ZjBjZDhiYjU1MmUwLzEvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wY2Q0YmUtMjQ3Zi00ZGUyLTkzOGMtZjBjZDhiYjU1MmUw
LzEvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQMp4yme
QVsO4eyKHkrYenQkwrV9wIpbaGnwIvZhy1QgyUI6wR67Q5Mmfxhp1eaDKwGBP7c5
aZuI1LPLMWmKbpNdlgNOjoYpPaT4mxQmgxsIKTRnNysD2dEcs9vJkAOBQU1AVwKC
iXLRucCaAZnXR7NBHGY2uv6+46enGjrFRrLq7IfDoNeIFLgjQj9e83PA8NKlRzIb
rDKqhZFB0CcRW/HG5AG3lq/SvgSsfGmP16OuQhRvTHhe9ZPRBTv6a3ozwKnLhim5
a3wfMteRIuY6UwDtZ3b4zS+ACqdm31m6gdhCTYlMv4+smgmfSP2u6waLAv8D/W2O
YTy7hnWmbTbQ7g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:24 2025 by rpki-client