Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: NHNdwRG7i+wZbvm4OAe7QDS9gt/k9+OpmtY6Z5X9Q4w=
Subject key identifier: 08:19:B3:4D:7D:40:DC:76:CB:3F:0F:7C:F9:02:A5:A1:09:1D:CA:60
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 0194BC05118C62C486FE441775159B2C6202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 017B
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: pMyDBgAl0VbSto0jusTZJYIEaNv7+YyB9zOb72wu/9M=)
2: RFpSEEfmfhQM7TNBHUvPYNYCE48.roa (hash: iHrN3ygMDkDOsg7Lw4ctlZrjgMs+0h97Al7X6knMEEI=)
3: UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa (hash: Q3D4Rh06gP+xE8oXAtIwLH3P2XhdWnZQyb1Lpy85O7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:11:8c:62:c4:86:fe:44:17:75:15:9b:2c:62:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=0819b34d7d40dc76cb3f0f7cf902a5a1091dca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:ff:10:4b:b4:6e:52:5d:45:ef:b3:49:16:
f2:a9:ad:74:07:3a:26:83:e4:97:e6:84:09:25:cd:
90:33:74:dc:c6:d7:6e:16:5f:dc:82:d3:57:86:b4:
03:8c:31:af:97:da:0e:2b:ed:9d:0f:44:57:a9:17:
40:ec:20:0f:99:d4:66:ce:7f:50:b8:07:f6:c3:9e:
a1:aa:9d:28:96:25:23:c9:99:40:74:8f:af:c1:fc:
e9:54:45:6d:db:3c:9e:f8:ff:41:5a:3c:f0:2a:d6:
b2:a4:c0:15:3d:88:77:07:70:d7:c6:da:d4:34:6a:
f1:a9:5b:50:55:f1:3e:86:d2:79:5a:22:2f:5f:01:
25:1a:6d:80:c2:03:ab:6f:34:ea:0f:2e:4d:9b:f5:
aa:a0:bc:3b:9a:a2:98:2b:6a:b7:d3:2c:ee:bc:3f:
64:74:57:06:92:44:2b:89:75:25:ad:07:2e:4c:6c:
56:42:0e:74:9d:e1:4b:6e:0d:de:32:1d:dd:ab:08:
f4:8d:23:77:c3:fe:6d:df:91:03:1f:a3:f9:27:5e:
2d:53:ba:34:e5:61:56:f2:0e:1b:f4:dd:f9:03:8a:
7f:eb:9a:4c:07:84:ba:47:64:f9:96:cf:c9:99:4a:
8d:e1:44:cd:08:ce:5b:30:4f:a1:99:f5:7a:44:e8:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:19:B3:4D:7D:40:DC:76:CB:3F:0F:7C:F9:02:A5:A1:09:1D:CA:60
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bd:b1:23:63:b4:bd:b9:ee:ff:ed:f7:86:bb:54:3f:e3:ff:
31:67:8f:77:25:e9:3a:bc:5d:cf:f9:56:92:01:fe:db:fd:83:
fb:8a:dc:5f:11:71:3c:1b:fb:c4:49:b9:e3:0d:8c:ed:b4:66:
b3:d5:34:7d:bf:78:2a:32:df:ca:e5:a4:1a:bb:64:58:57:4b:
9b:73:08:d1:81:2e:90:6e:49:e0:21:a9:72:a5:35:8b:25:0e:
71:11:39:bb:e6:c4:6f:4d:ad:a2:dc:a7:db:9b:ea:9c:93:27:
92:ac:74:1c:5d:0f:3c:4f:48:74:24:e8:e4:2a:5c:f2:e3:7d:
3d:2c:ba:be:cf:7a:68:12:9d:49:25:77:c4:45:01:31:8c:ac:
2b:90:03:dc:b0:05:1f:bf:b0:60:c2:7b:ee:83:07:7f:3b:15:
a1:01:94:cd:08:e2:82:bd:06:a4:a8:35:74:70:22:b1:ad:f8:
8b:01:0c:90:93:b0:0f:0c:3f:04:2a:65:d8:df:57:c2:98:fc:
19:e1:57:dc:2e:ff:37:82:d8:23:dd:47:96:36:b4:d3:e5:fd:
e4:35:b7:bb:5e:ad:fb:59:9d:ba:0e:44:fa:6e:3a:a0:79:4a:
c5:3f:12:07:32:b1:77:23:e0:60:da:77:b2:cc:36:53:68:b4:
70:16:66:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRGMYsSG/kQXdRWbLGICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODJhMTk3MzQwZDM1ODRlNmFjMTdjMWZiMmE5OTAwYWU0
ZjYwM2MwHhcNMjUwMTMxMTEwMDM2WhcNMjUwMjAxMTEwMDM2WjAzMTEwLwYDVQQD
EygwODE5YjM0ZDdkNDBkYzc2Y2IzZjBmN2NmOTAyYTVhMTA5MWRjYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+n/EEu0blJdRe+zSRbyqa10Bzom
g+SX5oQJJc2QM3TcxtduFl/cgtNXhrQDjDGvl9oOK+2dD0RXqRdA7CAPmdRmzn9Q
uAf2w56hqp0oliUjyZlAdI+vwfzpVEVt2zye+P9BWjzwKtaypMAVPYh3B3DXxtrU
NGrxqVtQVfE+htJ5WiIvXwElGm2AwgOrbzTqDy5Nm/WqoLw7mqKYK2q30yzuvD9k
dFcGkkQriXUlrQcuTGxWQg50neFLbg3eMh3dqwj0jSN3w/5t35EDH6P5J14tU7o0
5WFW8g4b9N35A4p/65pMB4S6R2T5ls/JmUqN4UTNCM5bME+hmfV6ROiATQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgZs019QNx2yz8PfPkCpaEJHcpgMB8GA1UdIwQY
MBaAFNiCoZc0DTWE5qwXwfsqmQCuT2A8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUt
YjA1YWU1Y2EyZDVlLzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUtYjA1YWU1Y2EyZDVl
LzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMb2xI2O0
vbnu/+33hrtUP+P/MWePdyXpOrxdz/lWkgH+2/2D+4rcXxFxPBv7xEm54w2M7bRm
s9U0fb94KjLfyuWkGrtkWFdLm3MI0YEukG5J4CGpcqU1iyUOcRE5u+bEb02totyn
25vqnJMnkqx0HF0PPE9IdCTo5Cpc8uN9PSy6vs96aBKdSSV3xEUBMYysK5AD3LAF
H7+wYMJ77oMHfzsVoQGUzQjigr0GpKg1dHAisa34iwEMkJOwDww/BCpl2N9Xwpj8
GeFX3C7/N4LYI91Hlja00+X95DW3u16t+1mdug5E+m46oHlKxT8SBzKxdyPgYNp3
ssw2U2i0cBZmYA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:56 2025 by rpki-client