Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier: YivjRJu65z7LvPsbV2PbwGL8VoH8C93sRxwgggVuoms=
Subject key identifier: E7:64:F6:E2:8F:B5:FB:25:18:47:7B:9C:CD:2D:22:DA:05:DF:9D:EA
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 0194BBCDC2F6CBF2406405C54A51F561CBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number: 0423
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: Y4sICU63ha9zJlhS7qW2J4u6uws.roa (hash: 8r93NKrnyk82rf3aCFqULEgo5C+BAoN2QmF3G7aUJlU=)
2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: 20b3dEsxuypzRgZILBy6ayGqx5uMtZNbt9kBsDOn4NA=)
3: wIm0A8W2Phgt1OO5oeTqTztju0g.roa (hash: NlYQ1T7mFBGddxYYpTaeqb8uAIXp1pec66MhW6UVFnE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:f6:cb:f2:40:64:05:c5:4a:51:f5:61:cb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=e764f6e28fb5fb2518477b9ccd2d22da05df9dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:41:89:f7:08:20:50:2e:d6:95:71:fa:89:
7f:f4:c1:bb:41:ca:59:07:90:f6:a3:51:81:97:a2:
3d:5f:06:80:e9:40:48:ce:1d:c2:a3:39:ef:cd:8c:
a6:24:f7:71:b5:46:d5:13:bd:6e:21:31:d7:46:1e:
90:71:e9:ab:35:e6:74:b5:e6:5c:d9:29:c3:e2:81:
24:9c:df:81:48:5e:a5:2a:81:bc:37:1d:08:0f:e5:
00:e0:65:b5:c5:ad:89:23:f4:20:d3:63:c4:71:5a:
21:66:34:e8:b9:10:0e:1d:4a:7b:3e:23:c0:31:a8:
15:8c:97:58:0f:fc:94:4a:47:98:ea:48:32:94:8f:
24:61:81:c8:08:33:5d:cf:22:76:8e:55:dd:c0:f0:
5b:03:d7:48:85:2d:0a:78:74:30:a1:b3:d6:03:b3:
04:91:66:1a:28:e8:2b:b0:ee:e8:6a:d0:89:47:71:
27:34:a7:c0:14:b0:86:34:48:97:c6:be:fd:4c:2e:
6f:af:f4:56:79:1d:3a:c6:fa:50:c7:bd:0c:d2:1a:
ba:aa:e5:12:47:90:53:13:3e:29:73:22:9a:fa:52:
bb:d6:29:8c:51:49:d9:1a:93:47:94:1a:b3:18:60:
4f:03:6f:f8:e2:63:27:97:05:5a:1f:e6:d2:69:25:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:64:F6:E2:8F:B5:FB:25:18:47:7B:9C:CD:2D:22:DA:05:DF:9D:EA
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ea:2f:70:bc:54:c9:98:b7:bb:1d:88:e5:62:46:17:13:19:
06:52:d4:e7:b1:f4:fa:22:73:34:8e:65:2a:79:8b:4c:b1:a7:
d8:6a:7d:37:d3:6e:22:cd:44:ef:33:82:67:b4:81:b2:a7:f9:
49:ee:ee:59:d5:ff:b3:27:ed:56:42:38:cd:26:fe:22:a9:7f:
5f:96:5e:4d:eb:36:c6:cd:b1:e5:98:d4:44:d3:37:43:c7:f1:
6b:ed:77:29:a1:af:45:95:51:99:ed:8b:53:83:4d:ef:54:84:
ff:15:cc:f8:ef:e1:bf:7d:29:d3:01:94:2f:a1:0e:91:cc:da:
06:ce:92:98:c4:f6:e2:66:ad:5f:e4:63:18:ee:0f:d5:d5:35:
9d:df:f5:88:ae:55:73:96:5b:00:80:f2:2c:7e:a3:cc:0f:3e:
f9:8c:ee:96:40:ca:9c:24:b6:7f:a2:7e:f9:ca:7f:da:93:6d:
b1:8a:ee:1a:81:f8:75:f5:55:cd:ae:69:aa:25:85:2c:b2:6b:
5e:8f:e1:f3:b3:f1:d9:db:af:52:d6:f6:01:9a:e2:0c:e9:c2:
9f:5f:84:29:cc:f2:55:05:df:21:61:50:c2:74:51:da:6d:80:
10:5f:d4:52:a9:cd:48:39:60:44:96:09:60:c7:c6:d7:be:aa:
29:e9:e8:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcL2y/JAZAXFSlH1YcvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Njc4Y2EzNGMzYzYzNjVmYjYxNmE2NjA3NzE2MGE0OTRh
NmU5ZDYwHhcNMjUwMTMxMTAwMDExWhcNMjUwMjAxMTAwMDExWjAzMTEwLwYDVQQD
EyhlNzY0ZjZlMjhmYjVmYjI1MTg0NzdiOWNjZDJkMjJkYTA1ZGY5ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B1BifcIIFAu1pVx+ol/9MG7QcpZ
B5D2o1GBl6I9XwaA6UBIzh3CoznvzYymJPdxtUbVE71uITHXRh6QcemrNeZ0teZc
2SnD4oEknN+BSF6lKoG8Nx0ID+UA4GW1xa2JI/Qg02PEcVohZjTouRAOHUp7PiPA
MagVjJdYD/yUSkeY6kgylI8kYYHICDNdzyJ2jlXdwPBbA9dIhS0KeHQwobPWA7ME
kWYaKOgrsO7oatCJR3EnNKfAFLCGNEiXxr79TC5vr/RWeR06xvpQx70M0hq6quUS
R5BTEz4pcyKa+lK71imMUUnZGpNHlBqzGGBPA2/44mMnlwVaH+bSaSXknQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdk9uKPtfslGEd7nM0tItoF353qMB8GA1UdIwQY
MBaAFIhnjKNMPGNl+2FqZgdxYKSUpunWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQt
Zjg1ZjcyMWZiMWI4LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQtZjg1ZjcyMWZiMWI4
LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+ovcLxU
yZi3ux2I5WJGFxMZBlLU57H0+iJzNI5lKnmLTLGn2Gp9N9NuIs1E7zOCZ7SBsqf5
Se7uWdX/syftVkI4zSb+Iql/X5ZeTes2xs2x5ZjURNM3Q8fxa+13KaGvRZVRme2L
U4NN71SE/xXM+O/hv30p0wGUL6EOkczaBs6SmMT24matX+RjGO4P1dU1nd/1iK5V
c5ZbAIDyLH6jzA8++YzulkDKnCS2f6J++cp/2pNtsYruGoH4dfVVza5pqiWFLLJr
Xo/h87Px2duvUtb2AZriDOnCn1+EKczyVQXfIWFQwnRR2m2AEF/UUqnNSDlgRJYJ
YMfG176qKeno5g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:43 2025 by rpki-client