Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: lzpep689rLoDqSkQtLv/rduZx+4pvhatttNNoF7BZn4=
Subject key identifier: 4B:41:50:2E:62:C9:85:EB:08:F0:D5:F5:1D:F7:72:A4:EE:64:53:1A
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 0194BBCE303315483EFE02CC2211E9A4D708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 0E9A
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: 2DsV0P4+hvUGhnZKACOBXjH28oGWNHPp2VB8Uy8h6Pg=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:30:33:15:48:3e:fe:02:cc:22:11:e9:a4:d7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=4b41502e62c985eb08f0d5f51df772a4ee64531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:b9:82:61:43:ff:71:be:8b:3c:b8:10:5a:
21:73:6d:4b:8b:3e:d8:01:a0:e3:a6:62:18:22:3f:
be:d1:ed:71:74:27:33:d6:23:a4:0a:82:15:aa:d2:
97:fa:a1:90:ee:45:5d:95:0b:71:90:2b:8e:10:cf:
68:a0:c0:a5:85:8f:9c:2b:0f:38:c7:a8:53:ca:56:
a4:c8:43:21:8f:a5:ff:ed:81:f0:b7:e2:05:34:87:
40:ad:0c:89:ef:6a:04:d6:f9:6c:fa:8d:5c:c7:fa:
e0:1b:9a:8d:3c:ff:fe:2b:50:bb:19:c4:2f:9a:6a:
99:0c:89:01:80:d4:b5:2e:c9:ff:97:73:9f:49:8f:
f9:48:48:db:4e:f0:08:17:fa:2b:8e:81:a8:98:a3:
82:c4:61:0e:25:d0:6f:7b:7c:33:d5:33:fe:95:6d:
bf:d0:13:6c:9b:6f:8b:97:65:9f:06:75:fa:02:f8:
24:91:af:e1:67:9c:1f:db:40:11:36:25:2b:49:02:
1d:13:b8:c8:99:f5:3c:48:96:ff:3c:35:08:1b:f2:
b1:d0:fc:57:d7:f4:86:70:bb:a7:29:96:e5:72:8e:
3c:e8:dd:a0:9b:c6:29:e2:e2:58:b7:9d:ec:8e:3d:
b0:c7:ef:c1:d7:18:12:4d:af:1f:83:45:27:4b:2d:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:50:2E:62:C9:85:EB:08:F0:D5:F5:1D:F7:72:A4:EE:64:53:1A
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bc:41:3f:82:9f:79:7c:e5:0e:bb:62:ba:09:73:91:92:b6:
37:f5:c8:c7:ee:f5:18:1f:4b:72:3d:c9:c7:68:db:8e:99:6a:
06:3c:2e:60:14:e5:ec:23:87:cf:60:a4:1a:3d:1f:ef:ff:43:
38:45:e9:40:ba:75:4c:d4:95:49:65:af:5c:d7:f3:d0:45:b8:
59:60:da:d0:2c:11:22:0f:ea:18:0a:36:1b:fc:87:b9:6b:da:
64:fe:f5:17:de:63:c5:12:17:c0:7e:bd:df:71:32:a5:3f:64:
b7:68:53:89:6e:0d:19:14:e0:ab:14:54:ce:77:92:a1:92:95:
c2:f9:43:d6:0a:5c:62:91:e5:71:ec:4d:aa:f9:27:14:b7:1a:
d8:b3:85:d1:5d:69:aa:42:7d:cf:e9:e0:bc:ae:19:b3:d7:79:
a4:6c:3b:be:c7:3c:c8:b2:0a:7f:de:07:15:84:4f:18:6d:35:
ea:9a:4d:88:23:be:38:16:41:18:31:f1:70:64:2d:ec:9d:07:
d3:bd:1c:11:f5:3d:41:50:dd:ed:51:35:c1:10:cb:67:79:b4:
a3:ff:5e:61:6a:e8:2d:8f:04:9b:da:5d:ef:79:ed:ac:bd:f5:
eb:22:fc:9f:5c:ec:e5:c6:7f:bc:f4:c4:90:97:a9:d3:dd:3e:
49:5d:0d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjAzFUg+/gLMIhHppNcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3
NTJmYTIwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
Eyg0YjQxNTAyZTYyYzk4NWViMDhmMGQ1ZjUxZGY3NzJhNGVlNjQ1MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNe5gmFD/3G+izy4EFohc21Liz7Y
AaDjpmIYIj++0e1xdCcz1iOkCoIVqtKX+qGQ7kVdlQtxkCuOEM9ooMClhY+cKw84
x6hTylakyEMhj6X/7YHwt+IFNIdArQyJ72oE1vls+o1cx/rgG5qNPP/+K1C7GcQv
mmqZDIkBgNS1Lsn/l3OfSY/5SEjbTvAIF/orjoGomKOCxGEOJdBve3wz1TP+lW2/
0BNsm2+Ll2WfBnX6Avgkka/hZ5wf20ARNiUrSQIdE7jImfU8SJb/PDUIG/Kx0PxX
1/SGcLunKZblco486N2gm8Yp4uJYt53sjj2wx+/B1xgSTa8fg0UnSy0HgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtBUC5iyYXrCPDV9R33cqTuZFMaMB8GA1UdIwQY
MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt
ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4
LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLxBP4Kf
eXzlDrtiuglzkZK2N/XIx+71GB9Lcj3Jx2jbjplqBjwuYBTl7COHz2CkGj0f7/9D
OEXpQLp1TNSVSWWvXNfz0EW4WWDa0CwRIg/qGAo2G/yHuWvaZP71F95jxRIXwH69
33EypT9kt2hTiW4NGRTgqxRUzneSoZKVwvlD1gpcYpHlcexNqvknFLca2LOF0V1p
qkJ9z+ngvK4Zs9d5pGw7vsc8yLIKf94HFYRPGG016ppNiCO+OBZBGDHxcGQt7J0H
070cEfU9QVDd7VE1wRDLZ3m0o/9eYWroLY8Em9pd73ntrL316yL8n1zs5cZ/vPTE
kJep090+SV0NZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:01 2025 by rpki-client