Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: e39AtVOftJLzZMhbrbZgAUoyRWqlCleDZQVO9MjDWQs=
Subject key identifier: A0:E5:D3:39:C1:9A:D7:69:0F:8F:07:48:31:B8:63:69:04:B7:8A:37
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 0194BCE0AE17359744C97179D374C374F4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 1211
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: 6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa (hash: NThSJkZPm+DD4/mAcNhw9miEjuzZudxLC0TeMXxTy6I=)
2: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: ISblnI6Rnvn7XHzCeHUMwNdMYujD8t262asrz+DQ980=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:17:35:97:44:c9:71:79:d3:74:c3:74:f4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=a0e5d339c19ad7690f8f074831b8636904b78a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:b5:b1:c1:f7:98:c3:7b:af:cb:f6:bd:91:
f3:68:28:b6:db:0c:d1:23:3a:01:f1:2c:7c:02:a5:
1f:d6:71:23:87:19:2b:3e:da:ad:e4:0b:44:6e:9a:
00:20:ef:b4:6e:df:b9:e2:ff:b4:b8:90:49:50:11:
c7:d0:4a:bb:03:d5:c8:f1:6e:59:20:d8:bd:c0:7e:
34:7e:a3:9f:74:09:3e:9c:3d:c3:ad:05:82:cc:a4:
82:fc:4c:a6:cc:2c:2e:e0:4f:2d:b1:91:fd:18:7b:
1b:a9:08:8c:16:32:92:70:0f:c2:c8:66:3a:b8:46:
33:11:cd:bf:66:cd:48:44:c7:c2:c8:48:67:fc:f3:
d2:56:7a:2b:b2:d6:04:ce:ac:c7:83:77:9e:ab:53:
80:6a:28:d7:f8:3a:b1:ee:e4:91:f6:53:47:46:8f:
d3:9c:ca:68:e7:60:d7:9a:70:58:ec:ea:60:76:73:
2f:a7:14:08:0b:35:e6:84:85:ee:e4:b4:64:55:ce:
f7:cb:0d:10:5e:33:d2:3f:7e:e5:4b:c0:68:20:55:
d0:70:fa:b7:ca:3d:6c:d6:63:5f:ab:f4:b7:61:b3:
39:c7:01:0c:51:ce:8a:b8:ed:9c:a9:44:4e:50:89:
1a:92:7f:d8:db:48:9d:ed:21:e7:86:29:69:f0:38:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:D3:39:C1:9A:D7:69:0F:8F:07:48:31:B8:63:69:04:B7:8A:37
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e6:70:c0:7e:be:a9:03:0b:39:49:55:dc:34:2f:c6:c9:00:
e8:5a:26:97:7f:d7:c4:9d:7a:10:05:aa:a1:c6:2c:ee:2c:4d:
7f:7c:79:70:17:43:8b:2a:65:48:f6:3e:f6:17:f5:44:61:dc:
6c:a2:eb:a1:d8:e5:59:66:1e:eb:a7:aa:e6:3e:e9:28:ad:3c:
ce:c4:bd:bb:de:5c:1e:53:7f:d7:ab:a8:8f:db:83:d1:fc:30:
29:bb:72:6b:8e:e5:48:83:4f:47:f6:4b:ee:34:eb:26:82:93:
6b:04:33:b5:aa:de:08:c1:53:1d:82:99:76:92:3d:09:49:22:
c1:d9:11:3a:54:88:c4:f0:16:7e:f2:91:9d:df:7b:12:5d:46:
a1:8f:18:81:42:15:28:c4:97:b9:7f:3b:62:6d:33:1e:92:c3:
81:09:c0:e5:22:c2:ad:ec:b2:79:6b:e0:77:5a:b3:ab:e4:64:
3a:90:1a:55:f9:32:6d:af:a1:0f:26:94:49:94:14:59:f1:42:
55:c9:fe:6d:fd:4c:ef:7f:3b:3f:73:9b:68:bb:4d:85:5d:1f:
68:9f:ac:f0:7f:6f:12:f0:f2:ea:21:bf:e5:79:23:77:d7:db:
04:eb:57:65:ee:ce:4e:5a:bc:8f:41:7c:a8:fe:73:9f:78:e7:
b0:11:2a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84K4XNZdEyXF503TDdPTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTcyZjNlZDIzZTIyOTRmOWJiNmJhNjYwMjQ2MTY2YzEz
ZjgzMjQwHhcNMjUwMTMxMTUwMDI4WhcNMjUwMjAxMTUwMDI4WjAzMTEwLwYDVQQD
EyhhMGU1ZDMzOWMxOWFkNzY5MGY4ZjA3NDgzMWI4NjM2OTA0Yjc4YTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUC1scH3mMN7r8v2vZHzaCi22wzR
IzoB8Sx8AqUf1nEjhxkrPtqt5AtEbpoAIO+0bt+54v+0uJBJUBHH0Eq7A9XI8W5Z
INi9wH40fqOfdAk+nD3DrQWCzKSC/EymzCwu4E8tsZH9GHsbqQiMFjKScA/CyGY6
uEYzEc2/Zs1IRMfCyEhn/PPSVnorstYEzqzHg3eeq1OAaijX+Dqx7uSR9lNHRo/T
nMpo52DXmnBY7OpgdnMvpxQICzXmhIXu5LRkVc73yw0QXjPSP37lS8BoIFXQcPq3
yj1s1mNfq/S3YbM5xwEMUc6KuO2cqUROUIkakn/Y20id7SHnhilp8DhWqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDl0znBmtdpD48HSDG4Y2kEt4o3MB8GA1UdIwQY
MBaAFCKnLz7SPiKU+btrpmAkYWbBP4MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80Nzk2NzMtOTY2Ny00ZWRhLWJiYmQt
YjBiMmVhYWVlZDYxLzEvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80Nzk2NzMtOTY2Ny00ZWRhLWJiYmQtYjBiMmVhYWVlZDYx
LzEvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauZwwH6+
qQMLOUlV3DQvxskA6Foml3/XxJ16EAWqocYs7ixNf3x5cBdDiyplSPY+9hf1RGHc
bKLrodjlWWYe66eq5j7pKK08zsS9u95cHlN/16uoj9uD0fwwKbtya47lSINPR/ZL
7jTrJoKTawQztareCMFTHYKZdpI9CUkiwdkROlSIxPAWfvKRnd97El1GoY8YgUIV
KMSXuX87Ym0zHpLDgQnA5SLCreyyeWvgd1qzq+RkOpAaVfkyba+hDyaUSZQUWfFC
Vcn+bf1M7387P3ObaLtNhV0faJ+s8H9vEvDy6iG/5Xkjd9fbBOtXZe7OTlq8j0F8
qP5zn3jnsBEq4w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:07 2025 by rpki-client