Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: JLd5EZQ2IC1ReEc/iPj9VIXXm8roEuMjSvVO8dUmhYg=
Subject key identifier: 28:5B:DA:41:41:D3:B7:E1:78:26:A4:A6:13:CE:43:2F:92:B1:DE:52
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 0194BBCED575876D430F21CC3E403C2FCBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 132F
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: 1a5LAqShEuWNx2mtGVMd9R/aR5O3xmBIt7/6eSSmH6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d5:75:87:6d:43:0f:21:cc:3e:40:3c:2f:cb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=285bda4141d3b7e17826a4a613ce432f92b1de52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:63:b1:1b:d2:d3:da:b1:92:9e:19:a0:31:
99:28:21:2c:28:f2:17:9b:14:d7:98:cb:1b:ee:36:
af:c5:5b:93:fd:43:cf:03:de:f0:ad:b8:69:c1:0e:
34:bb:b1:a1:b9:7b:a7:45:de:38:0d:d3:cc:0d:0c:
d4:ae:d3:cd:d9:61:78:ea:17:75:74:5a:89:4e:a7:
7c:63:d4:13:50:1e:be:17:b2:a3:88:06:d1:f0:41:
b3:eb:1f:cf:8c:33:a0:d9:3d:c6:84:22:b1:a0:ce:
b9:d5:91:ac:56:89:6c:03:8a:87:bc:d7:a5:68:e4:
53:ab:6e:16:6d:75:56:ed:d2:3d:ea:e4:31:9d:30:
76:af:8f:53:92:de:70:2d:1c:40:59:d1:d2:1d:19:
6d:ab:83:28:57:53:de:78:98:82:03:ca:71:aa:49:
ff:ce:25:a1:2a:6b:20:c2:6c:a6:6a:8f:5c:b5:36:
08:4c:f8:e9:78:fc:95:37:f7:cd:67:90:6b:47:cd:
84:b5:07:c4:cd:55:fa:05:f4:f2:c5:21:06:ad:18:
47:b1:d4:11:9e:51:aa:cc:ee:f0:e4:2f:a4:05:44:
72:d4:32:38:5b:98:c5:63:c3:22:65:c7:0b:89:69:
f5:56:bf:dc:f4:f8:9e:d8:b5:c6:b8:f4:e5:e7:b2:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5B:DA:41:41:D3:B7:E1:78:26:A4:A6:13:CE:43:2F:92:B1:DE:52
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:97:9f:e7:03:a9:e0:4d:e7:b3:16:a7:f6:91:27:08:47:84:
44:4b:39:0f:af:d1:0c:8b:e9:58:fb:d2:d5:41:e8:b2:75:a1:
d1:98:b5:4b:9f:9f:c9:d1:98:41:61:39:8e:34:38:42:29:18:
d4:77:82:df:22:23:d9:dd:10:51:b9:09:0f:bc:fb:1d:7a:b7:
8b:f9:66:a0:31:58:e5:74:87:09:96:25:d1:46:0e:12:e5:66:
ab:92:6c:13:3e:f1:43:29:c7:9f:48:42:59:1c:f4:47:63:3e:
d0:9b:fd:e9:e5:a4:84:ff:c0:bf:83:f9:79:d2:52:66:5e:bb:
e1:c0:63:96:36:27:00:c8:64:4c:49:ad:dc:24:38:33:b8:4f:
35:0e:1f:eb:b0:be:bc:60:3b:19:eb:82:da:1e:9a:0c:49:72:
06:e4:12:b2:92:91:18:08:cf:16:a7:1d:b4:c8:d8:f0:92:c1:
b7:0e:6f:41:a2:3d:82:dd:13:be:f4:27:64:4d:8f:34:d3:78:
cb:90:13:1d:d4:3d:c2:34:93:9a:0f:f4:65:88:a7:97:6a:94:
7c:cd:87:64:45:2d:07:f3:3d:2f:9b:6e:db:25:d8:8f:c4:2f:
57:d3:bd:3d:8b:1d:44:73:5c:5e:92:88:fc:f0:88:db:d1:bd:
37:4e:1c:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztV1h21DDyHMPkA8L8vuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOTIwOTRkNjkxZGY0YTdjMzhmMTZiNzU1NTdlOWMyNmQ0
YWM2OTIwHhcNMjUwMTMxMTAwMTIxWhcNMjUwMjAxMTAwMTIxWjAzMTEwLwYDVQQD
EygyODViZGE0MTQxZDNiN2UxNzgyNmE0YTYxM2NlNDMyZjkyYjFkZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcxjsRvS09qxkp4ZoDGZKCEsKPIX
mxTXmMsb7javxVuT/UPPA97wrbhpwQ40u7GhuXunRd44DdPMDQzUrtPN2WF46hd1
dFqJTqd8Y9QTUB6+F7KjiAbR8EGz6x/PjDOg2T3GhCKxoM651ZGsVolsA4qHvNel
aORTq24WbXVW7dI96uQxnTB2r49Tkt5wLRxAWdHSHRltq4MoV1PeeJiCA8pxqkn/
ziWhKmsgwmymao9ctTYITPjpePyVN/fNZ5BrR82EtQfEzVX6BfTyxSEGrRhHsdQR
nlGqzO7w5C+kBURy1DI4W5jFY8MiZccLiWn1Vr/c9Pie2LXGuPTl57L1nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChb2kFB07fheCakphPOQy+Ssd5SMB8GA1UdIwQY
MBaAFLKSCU1pHfSnw48Wt1VX6cJtSsaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAt
MTVhMDkzZTJiYjhmLzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAtMTVhMDkzZTJiYjhm
LzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJef5wOp
4E3nsxan9pEnCEeEREs5D6/RDIvpWPvS1UHosnWh0Zi1S5+fydGYQWE5jjQ4QikY
1HeC3yIj2d0QUbkJD7z7HXq3i/lmoDFY5XSHCZYl0UYOEuVmq5JsEz7xQynHn0hC
WRz0R2M+0Jv96eWkhP/Av4P5edJSZl674cBjljYnAMhkTEmt3CQ4M7hPNQ4f67C+
vGA7GeuC2h6aDElyBuQSspKRGAjPFqcdtMjY8JLBtw5vQaI9gt0TvvQnZE2PNNN4
y5ATHdQ9wjSTmg/0ZYinl2qUfM2HZEUtB/M9L5tu2yXYj8QvV9O9PYsdRHNcXpKI
/PCI29G9N04cqQ==
-----END CERTIFICATE-----
Generated at Thu May 1 07:33:08 2025 by rpki-client