Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File: Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier: NHV/2Etu0QMUGqVvXJT2eUE5SPyO5KM43XCOihzKuks=
Subject key identifier: B4:FA:05:4D:35:DC:F4:44:64:97:CF:2A:1F:C4:CF:94:F4:0B:73:6A
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 0194BD17999895F9100CADD979998BE0434C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number: 038E
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: VKR5jWMjWLlxc4LBnd8fuybG59kxiGEBfayBM/c6Mk8=)
2: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (hash: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:99:98:95:f9:10:0c:ad:d9:79:99:8b:e0:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=b4fa054d35dcf4446497cf2a1fc4cf94f40b736a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:1e:53:ce:c0:a0:da:f3:5c:77:cc:7b:e7:
ec:24:3b:f5:dd:19:40:89:05:0d:5b:a1:57:03:7f:
ee:1c:5d:d1:53:3e:76:18:1a:0f:87:7f:0d:2b:2c:
f9:77:05:0c:2d:cb:d0:e8:af:64:be:f1:98:8f:06:
ec:ef:c8:e9:e4:13:e1:b0:e8:94:97:14:a6:7c:08:
b3:bc:8b:16:6d:b7:55:db:ec:57:39:31:78:6a:62:
70:d4:db:44:81:2b:80:49:cd:ed:c9:1e:dc:d8:52:
d3:7e:61:a6:d6:12:64:45:a2:53:a2:f0:fb:99:dd:
d2:27:eb:dc:59:cf:bf:38:66:86:9c:2c:65:89:86:
94:b2:3d:bd:cc:62:99:27:73:fb:45:2b:32:18:16:
0d:5d:95:ee:a7:67:de:b5:8c:ae:ae:65:ee:6a:12:
c5:76:e3:5c:9e:04:47:9c:ab:99:76:e8:22:0c:14:
4d:b3:ed:d9:0b:f2:57:2c:fe:8f:32:97:d8:58:02:
22:15:c8:4e:a2:7d:f1:d1:e4:ec:70:34:99:a2:9e:
ad:a3:03:b1:57:93:ef:1b:0b:38:46:83:2c:0f:6b:
82:f4:97:08:f8:5c:e5:ae:ad:34:6a:4f:a5:be:46:
cc:55:cf:da:40:56:e9:eb:40:f3:fd:d3:8d:22:7e:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:05:4D:35:DC:F4:44:64:97:CF:2A:1F:C4:CF:94:F4:0B:73:6A
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8b:66:1f:87:f2:52:63:28:36:9c:97:44:83:2e:cb:b7:50:
52:ef:1e:bb:e1:bf:88:5b:51:05:07:e8:d6:69:9d:94:53:7c:
ba:8e:7d:82:aa:3e:49:80:5e:be:d1:d9:90:1b:1d:62:fc:76:
55:63:89:be:b8:1b:01:e8:83:e0:78:97:7e:2f:49:74:b3:1b:
5e:32:14:24:46:eb:0b:74:36:93:4f:fc:09:47:e9:f2:da:17:
39:25:58:de:5a:a9:ef:33:df:11:95:a1:89:85:c2:64:75:64:
7a:22:95:ac:42:17:47:08:56:44:10:df:6f:49:6e:2b:0a:6a:
cd:b3:ef:20:1a:49:8c:76:27:05:d5:41:ef:e0:98:14:ed:88:
19:57:be:93:ca:d3:80:f0:f8:6b:cb:85:1c:aa:b3:f0:a1:da:
5e:92:06:06:47:96:97:7a:aa:a7:f1:58:92:70:46:92:95:4c:
30:72:87:ba:16:42:6f:73:42:41:c2:54:c0:f1:81:f0:c0:a4:
1f:be:e1:f7:fc:3a:61:7f:80:db:0c:33:fa:fa:44:87:6d:02:
e9:3e:a3:89:ed:7d:87:91:7e:de:b4:f5:76:e2:6b:d1:9e:49:
13:79:1d:22:c9:a2:5c:1c:80:74:54:31:7f:52:1b:66:e3:cb:
c4:29:88:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5mYlfkQDK3ZeZmL4ENMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWJlMGUwNjkwMGQ3Yjk2MDc2YzAwYmI1MGQ0ZjlkYzAz
OTJmNTkwHhcNMjUwMTMxMTYwMDI3WhcNMjUwMjAxMTYwMDI3WjAzMTEwLwYDVQQD
EyhiNGZhMDU0ZDM1ZGNmNDQ0NjQ5N2NmMmExZmM0Y2Y5NGY0MGI3MzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc0eU87AoNrzXHfMe+fsJDv13RlA
iQUNW6FXA3/uHF3RUz52GBoPh38NKyz5dwUMLcvQ6K9kvvGYjwbs78jp5BPhsOiU
lxSmfAizvIsWbbdV2+xXOTF4amJw1NtEgSuASc3tyR7c2FLTfmGm1hJkRaJTovD7
md3SJ+vcWc+/OGaGnCxliYaUsj29zGKZJ3P7RSsyGBYNXZXup2fetYyurmXuahLF
duNcngRHnKuZdugiDBRNs+3ZC/JXLP6PMpfYWAIiFchOon3x0eTscDSZop6towOx
V5PvGws4RoMsD2uC9JcI+Fzlrq00ak+lvkbMVc/aQFbp60Dz/dONIn7HMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT6BU013PREZJfPKh/Ez5T0C3NqMB8GA1UdIwQY
MBaAFCGr4OBpANe5YHbAC7UNT53AOS9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mMmVjMDktNTQ0NS00NGZmLTk5MTUt
ZGVlOWFhZWZmYzlkLzEvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mMmVjMDktNTQ0NS00NGZmLTk5MTUtZGVlOWFhZWZmYzlk
LzEvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYItmH4fy
UmMoNpyXRIMuy7dQUu8eu+G/iFtRBQfo1mmdlFN8uo59gqo+SYBevtHZkBsdYvx2
VWOJvrgbAeiD4HiXfi9JdLMbXjIUJEbrC3Q2k0/8CUfp8toXOSVY3lqp7zPfEZWh
iYXCZHVkeiKVrEIXRwhWRBDfb0luKwpqzbPvIBpJjHYnBdVB7+CYFO2IGVe+k8rT
gPD4a8uFHKqz8KHaXpIGBkeWl3qqp/FYknBGkpVMMHKHuhZCb3NCQcJUwPGB8MCk
H77h9/w6YX+A2wwz+vpEh20C6T6jie19h5F+3rT1duJr0Z5JE3kdIsmiXByAdFQx
f1IbZuPLxCmIPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:28 2025 by rpki-client