Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier: 801gN37z5qQt6xwsf9rRrlHKeFs+B2G8FDz3W+1Zz6w=
Subject key identifier: 63:8E:CA:C2:48:F5:C7:3C:5E:FB:2A:2A:6D:22:AB:20:7D:F6:58:4C
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 0194BCE0DF8258C28F4B4906522A2D8CD0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number: 0F7E
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: EJEuDnvuXiXSyssiuX3zmzznLmY.roa (hash: Oz6+eDgQ3iUmX8LJR3oXdjyr343hyansN3/KTvsHwJc=)
2: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: 5f+GdGUshd/Qb33MxLc++w8FO9mDNRxSgOCjOVaufWg=)
3: nrEMql0zV0P3dpHmZH6RSxKuJFg.roa (hash: 1gVFTzoG8NuAbMx8im63wNse5kBK1gIOddqrPu/oX6A=)
4: oCdnapI8_jAqvSx-q8QqfeZBfpI.roa (hash: 4dP+f2erpGi6jIqWI+u+ltnYaQjR1Rx/ox+mHYa6aIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:82:58:c2:8f:4b:49:06:52:2a:2d:8c:d0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=638ecac248f5c73c5efb2a2a6d22ab207df6584c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:f3:0f:fa:ee:20:c9:8f:5c:96:9e:df:35:
26:56:f4:ff:1a:1c:4a:ba:1b:cb:8d:19:a9:78:98:
fb:58:ae:28:12:27:c5:d0:13:6e:18:bd:28:c3:46:
63:f7:19:17:f4:88:43:6e:f0:2d:86:97:62:57:bb:
06:b7:75:dd:88:e4:c2:c9:ec:ac:64:8a:d2:86:01:
14:40:c4:4d:ba:7d:94:c6:d2:ef:ec:cb:e7:52:eb:
c6:1a:b9:bc:aa:63:12:88:21:5b:b0:c3:c2:ed:02:
30:50:08:5e:16:ed:b1:94:59:b2:1e:a8:b2:4b:76:
00:8c:e8:9e:f0:1a:71:af:e3:52:2b:6f:06:f6:5f:
10:b3:41:e7:8a:c2:b6:9c:83:a8:15:a9:99:68:22:
0b:91:fe:a4:06:cc:ab:47:bb:ba:fb:ae:62:fc:b1:
f2:c3:01:04:1a:6e:d2:48:64:b8:92:01:79:3d:bc:
20:bc:d5:3b:dc:58:bc:ee:28:31:76:b7:7b:5c:dd:
41:61:6d:15:d6:ad:51:eb:6f:b4:12:cb:a0:b7:24:
aa:ae:8a:66:80:bb:19:eb:87:fd:34:4d:cd:33:3a:
a7:e4:f4:87:66:18:be:d4:95:98:2a:37:25:5c:22:
ba:8e:06:5d:a8:38:65:ba:ff:d2:04:2b:29:c2:62:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8E:CA:C2:48:F5:C7:3C:5E:FB:2A:2A:6D:22:AB:20:7D:F6:58:4C
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:12:3d:27:23:1b:28:5b:9d:8d:ec:1c:a3:c1:a7:34:93:15:
8b:62:a3:39:f2:81:88:ae:bf:3f:8c:02:b2:3b:96:3a:96:4f:
99:93:f6:c6:95:c6:01:f6:2d:0f:39:75:4d:6a:76:37:3c:a5:
d2:86:18:04:23:fb:4f:28:ad:89:ea:14:85:b9:f1:5f:74:72:
66:ac:88:19:ec:ea:83:70:03:eb:90:1f:f4:7b:ae:76:98:70:
20:19:2d:ee:c6:68:b0:9f:50:55:cd:04:3b:4f:b1:62:18:63:
5f:95:27:11:6a:43:3e:ac:ce:19:d2:51:5f:12:84:27:31:51:
74:2d:b8:ef:63:ae:b3:0d:2e:fb:56:94:d3:17:d3:1f:fd:a8:
8a:af:46:8c:fb:1b:c7:ea:b5:c7:f2:1a:86:a4:41:03:20:f3:
82:50:40:51:a8:07:ff:16:5e:e7:5d:07:d1:9a:0b:3b:06:cb:
94:8f:b0:f5:04:78:61:e4:07:2a:99:85:21:60:0d:2c:a6:05:
ca:82:c0:be:d8:51:f0:49:1e:42:09:ae:8b:ad:a0:cc:78:b3:
99:0e:9e:d3:45:f6:7c:5e:4e:23:75:15:e8:70:dd:03:5e:c8:
fd:33:27:47:14:58:70:5c:3c:b6:d2:62:28:5c:79:4e:e1:9c:
b9:95:5a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84N+CWMKPS0kGUiotjNDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I0OTFkY2NiNTYzMjIxNmQ4MGI0OGY4ZDYyODZiMWVm
ZmQ4ZDcwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
Eyg2MzhlY2FjMjQ4ZjVjNzNjNWVmYjJhMmE2ZDIyYWIyMDdkZjY1ODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDnzD/ruIMmPXJae3zUmVvT/GhxK
uhvLjRmpeJj7WK4oEifF0BNuGL0ow0Zj9xkX9IhDbvAthpdiV7sGt3XdiOTCyeys
ZIrShgEUQMRNun2UxtLv7MvnUuvGGrm8qmMSiCFbsMPC7QIwUAheFu2xlFmyHqiy
S3YAjOie8Bpxr+NSK28G9l8Qs0HnisK2nIOoFamZaCILkf6kBsyrR7u6+65i/LHy
wwEEGm7SSGS4kgF5PbwgvNU73Fi87igxdrd7XN1BYW0V1q1R62+0EsugtySqropm
gLsZ64f9NE3NMzqn5PSHZhi+1JWYKjclXCK6jgZdqDhluv/SBCspwmIm2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOOysJI9cc8XvsqKm0iqyB99lhMMB8GA1UdIwQY
MBaAFCF7SR3MtWMiFtgLSPjWKGse/9jXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAt
NmRlMDVhMzE2MjM5LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAtNmRlMDVhMzE2MjM5
LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRI9JyMb
KFudjewco8GnNJMVi2KjOfKBiK6/P4wCsjuWOpZPmZP2xpXGAfYtDzl1TWp2Nzyl
0oYYBCP7TyitieoUhbnxX3RyZqyIGezqg3AD65Af9HuudphwIBkt7sZosJ9QVc0E
O0+xYhhjX5UnEWpDPqzOGdJRXxKEJzFRdC2472Ousw0u+1aU0xfTH/2oiq9GjPsb
x+q1x/IahqRBAyDzglBAUagH/xZe510H0ZoLOwbLlI+w9QR4YeQHKpmFIWANLKYF
yoLAvthR8EkeQgmui62gzHizmQ6e00X2fF5OI3UV6HDdA17I/TMnRxRYcFw8ttJi
KFx5TuGcuZVaTQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:17 2025 by rpki-client