Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File: ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier: 2MW8rs2lv0OJMjc6rLwyOshOfrk3UhgmI1lUMA8Tn3c=
Subject key identifier: D7:D9:22:24:12:2C:9C:D4:87:B8:A2:66:AE:2E:BF:0D:30:08:E8:7B
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial: 0194BBCE395AB6B8ADCBFA027389A89CA289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number: 049C
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: QZfdfKYdR1muqeE9OJILMDGI/VqmIxipC4uCHMAgyDI=)
2: yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa (hash: tqsjDiQKQV8NCrndn0YK64CRZXV/LsyL/cUUrtUlQAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:5a:b6:b8:ad:cb:fa:02:73:89:a8:9c:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=d7d92224122c9cd487b8a266ae2ebf0d3008e87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:b5:cb:33:67:3c:fc:19:54:a0:d9:27:a6:
4e:4e:6f:e8:1f:9f:67:11:1a:8e:cd:90:8b:32:80:
f2:5c:be:e8:07:0d:c0:a7:79:8a:87:3c:f2:f6:9b:
be:02:d1:31:d0:26:d8:2d:16:fc:56:71:52:37:31:
6f:6b:06:89:21:53:74:ba:59:a0:3e:b4:15:68:e1:
a4:05:a9:9a:d1:d1:b3:14:3c:c1:40:5a:e1:5d:48:
af:20:30:b0:19:5d:17:bb:43:10:19:9d:98:01:1f:
fe:f8:59:1e:99:7a:99:fa:89:a5:26:7d:e9:dc:01:
8a:ca:17:83:91:8a:96:4a:5a:b9:54:db:f9:6f:65:
9b:33:d5:54:88:23:f0:b3:eb:ef:00:c1:e3:f6:0a:
fa:00:86:9b:e2:03:96:45:87:b0:f7:1c:06:00:9d:
56:a6:f2:df:cd:67:d8:52:40:93:9c:69:de:aa:bd:
55:e0:6d:fb:eb:23:89:f1:fa:7e:e5:24:c5:2d:44:
bd:a0:6f:da:37:f5:06:61:b0:c6:49:15:43:85:95:
a9:0f:bb:86:c5:70:ad:c3:72:3a:45:16:2c:34:78:
20:7a:0d:1f:7c:dd:83:ba:2a:a9:92:18:bc:81:04:
b1:fb:82:4d:76:b1:2b:85:32:03:5c:aa:99:3f:3f:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D9:22:24:12:2C:9C:D4:87:B8:A2:66:AE:2E:BF:0D:30:08:E8:7B
X509v3 Authority Key Identifier:
keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2f:76:b2:54:1c:43:54:84:1b:91:5c:5b:47:bc:3c:77:f8:
d3:22:d2:ed:e4:75:b8:31:a9:db:52:b4:d9:10:9c:80:ac:77:
76:0d:e1:4b:68:83:8e:40:8d:a8:74:61:57:73:e8:47:fd:ca:
7d:56:fc:ed:3f:16:ba:be:b5:b7:16:b9:07:5f:ae:14:a1:36:
0d:06:00:a7:40:f6:7f:df:d8:4e:01:a2:1a:f9:89:11:be:12:
cf:28:30:e4:6a:92:b6:42:bc:f9:c1:c8:61:a7:d9:67:30:a0:
9a:16:ae:13:97:c9:e8:ed:9e:61:7e:4b:f0:74:74:19:45:b5:
83:3d:9e:d6:e6:0c:d3:a1:c6:cb:79:f5:6b:6c:be:be:12:52:
0d:9a:2a:d3:01:fa:0d:13:12:cf:17:64:24:ba:7b:44:fa:7b:
c3:8d:b5:32:b1:ae:7b:00:47:6f:bc:6c:3a:46:cc:e8:7a:d6:
b0:2d:ff:d9:e0:e0:e6:53:28:85:63:ed:12:f5:47:ef:56:f3:
ee:fc:a5:16:cb:15:3a:60:de:20:a5:94:37:85:d4:99:b3:70:
30:1a:6f:35:2b:f6:76:fb:b3:c5:44:56:62:c8:42:55:b8:7a:
d0:00:9e:ae:87:ca:e8:4e:fd:fc:7f:78:45:22:d3:59:bb:1c:
7d:bd:d5:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjlatrity/oCc4monKKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzRhN2EzZmViYWZiYzg0MDBhYmUxZGMxMmYyMmM2YzFl
OGE1YmUwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
EyhkN2Q5MjIyNDEyMmM5Y2Q0ODdiOGEyNjZhZTJlYmYwZDMwMDhlODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyre1yzNnPPwZVKDZJ6ZOTm/oH59n
ERqOzZCLMoDyXL7oBw3Ap3mKhzzy9pu+AtEx0CbYLRb8VnFSNzFvawaJIVN0ulmg
PrQVaOGkBama0dGzFDzBQFrhXUivIDCwGV0Xu0MQGZ2YAR/++FkemXqZ+omlJn3p
3AGKyheDkYqWSlq5VNv5b2WbM9VUiCPws+vvAMHj9gr6AIab4gOWRYew9xwGAJ1W
pvLfzWfYUkCTnGneqr1V4G376yOJ8fp+5STFLUS9oG/aN/UGYbDGSRVDhZWpD7uG
xXCtw3I6RRYsNHggeg0ffN2Duiqpkhi8gQSx+4JNdrErhTIDXKqZPz/h3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfZIiQSLJzUh7iiZq4uvw0wCOh7MB8GA1UdIwQY
MBaAFIo0p6P+uvvIQAq+HcEvIsbB6KW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMt
YjYyOWJiNDc2MmYwLzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMtYjYyOWJiNDc2MmYw
LzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC92slQc
Q1SEG5FcW0e8PHf40yLS7eR1uDGp21K02RCcgKx3dg3hS2iDjkCNqHRhV3PoR/3K
fVb87T8Wur61txa5B1+uFKE2DQYAp0D2f9/YTgGiGvmJEb4Szygw5GqStkK8+cHI
YafZZzCgmhauE5fJ6O2eYX5L8HR0GUW1gz2e1uYM06HGy3n1a2y+vhJSDZoq0wH6
DRMSzxdkJLp7RPp7w421MrGuewBHb7xsOkbM6HrWsC3/2eDg5lMohWPtEvVH71bz
7vylFssVOmDeIKWUN4XUmbNwMBpvNSv2dvuzxURWYshCVbh60ACerofK6E79/H94
RSLTWbscfb3V9A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:04 2025 by rpki-client