Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: NhPAT3FpawLp8781pcr5AtxXyUl8ffjUyIiLQDK3Fxo=
Subject key identifier: 2F:E1:4C:1A:BC:29:25:8B:C3:D7:FD:7C:AA:B1:E7:81:22:4C:F7:A1
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 0194BC3BEFA65D664009C73DB8EED464DB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: LcB/8CqgSz8HFcsIX8KPKo05ZwCxApXnSKgdimBQkCI=)
2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ef:a6:5d:66:40:09:c7:3d:b8:ee:d4:64:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=2fe14c1abc29258bc3d7fd7caab1e781224cf7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:c8:e3:b6:b9:6b:29:bd:8a:e6:56:5f:0c:
b3:ae:2e:33:f6:ab:c1:29:8c:2a:88:9b:1e:a6:74:
6f:47:20:9c:c6:f9:45:45:65:d8:0f:69:fe:44:25:
84:d9:b2:e1:43:e1:ae:81:a2:bb:bc:46:c6:1b:a6:
3d:44:d3:7d:d6:79:21:8a:92:f1:71:58:62:81:76:
0a:db:cb:bf:51:20:61:3a:cc:80:5c:b8:14:af:1a:
f3:ab:e0:09:30:59:f3:62:ba:37:68:0b:0f:c2:7d:
75:4a:e9:85:74:7a:17:2f:13:9d:dc:69:9f:22:38:
52:e4:bb:d5:62:08:83:de:15:70:da:b5:47:23:67:
06:f4:c4:32:a0:d9:e7:38:b0:22:31:eb:08:75:62:
f3:17:80:ee:16:de:6b:22:f2:a0:f2:15:71:64:0c:
60:73:36:1f:7f:ab:d3:16:bb:1a:80:2c:7d:e5:20:
bb:61:88:e0:37:60:c2:75:ae:a7:a6:92:24:cb:e8:
8c:06:a3:06:aa:83:4b:9e:ed:64:64:e9:e1:ee:5f:
4c:96:af:3f:0d:e1:b3:bc:c6:13:2b:6e:d2:5b:ff:
1b:81:63:3a:3a:49:41:73:b7:4f:a8:d0:b3:f7:a0:
c6:bc:18:56:36:87:af:62:16:cb:d5:ab:53:22:9e:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:4C:1A:BC:29:25:8B:C3:D7:FD:7C:AA:B1:E7:81:22:4C:F7:A1
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:95:c0:2b:aa:54:af:7d:64:90:a2:aa:61:67:48:90:46:8b:
08:65:3c:6a:2f:80:d7:7c:75:24:30:22:68:27:db:2a:0e:7d:
5f:d3:2b:23:1a:32:0c:f0:de:89:db:8a:7d:9c:84:6b:16:fc:
c3:51:cc:3e:72:8c:e6:44:b7:7c:19:e1:16:85:32:d5:28:c9:
6a:e2:bb:80:c2:57:65:b6:11:87:39:d3:7a:73:7b:79:56:98:
fd:8d:7c:2f:12:46:c2:38:b4:1d:c8:f4:54:1f:8c:9d:0c:07:
de:57:0f:03:91:8d:db:5f:cf:2a:8f:1f:34:3f:1e:6f:f7:39:
34:02:69:97:e9:a5:d9:90:62:84:b5:db:30:ec:ae:ad:c1:9c:
14:ac:7d:cd:d3:a1:d1:cc:b9:98:b3:a1:26:51:64:99:70:fd:
25:27:e9:2a:e6:2b:77:13:d6:6b:32:88:92:a6:ca:3f:5d:19:
bc:51:bb:67:a9:4a:59:7d:33:de:28:8d:fa:ae:67:3f:c1:e9:
c7:d0:97:fc:96:7d:d6:c5:c2:20:09:30:34:6f:c7:ee:2f:4b:
a1:01:a8:7e:75:d4:35:de:93:6f:cf:c3:b3:fd:c4:3d:d3:8c:
f7:a9:3f:8c:c1:fd:65:ab:46:46:b9:74:64:2a:c1:61:bd:0b:
16:97:e0:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O++mXWZACcc9uO7UZNtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjk1YjNhYmExZWE0ZTY1NDc4OGM1MTY0MTQ1OGNjOTk1
NzgwNDAwHhcNMjUwMTMxMTIwMDMxWhcNMjUwMjAxMTIwMDMxWjAzMTEwLwYDVQQD
EygyZmUxNGMxYWJjMjkyNThiYzNkN2ZkN2NhYWIxZTc4MTIyNGNmN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfrI47a5aym9iuZWXwyzri4z9qvB
KYwqiJsepnRvRyCcxvlFRWXYD2n+RCWE2bLhQ+GugaK7vEbGG6Y9RNN91nkhipLx
cVhigXYK28u/USBhOsyAXLgUrxrzq+AJMFnzYro3aAsPwn11SumFdHoXLxOd3Gmf
IjhS5LvVYgiD3hVw2rVHI2cG9MQyoNnnOLAiMesIdWLzF4DuFt5rIvKg8hVxZAxg
czYff6vTFrsagCx95SC7YYjgN2DCda6nppIky+iMBqMGqoNLnu1kZOnh7l9Mlq8/
DeGzvMYTK27SW/8bgWM6OklBc7dPqNCz96DGvBhWNoevYhbL1atTIp6k7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/hTBq8KSWLw9f9fKqx54EiTPehMB8GA1UdIwQY
MBaAFIppWzq6HqTmVHiMUWQUWMyZV4BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81MzgxOTQtNzU2MC00NDU2LWI0NWMt
Y2EyNmMyMmNmYWZkLzEvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81MzgxOTQtNzU2MC00NDU2LWI0NWMtY2EyNmMyMmNmYWZk
LzEvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJXAK6pU
r31kkKKqYWdIkEaLCGU8ai+A13x1JDAiaCfbKg59X9MrIxoyDPDeiduKfZyEaxb8
w1HMPnKM5kS3fBnhFoUy1SjJauK7gMJXZbYRhznTenN7eVaY/Y18LxJGwji0Hcj0
VB+MnQwH3lcPA5GN21/PKo8fND8eb/c5NAJpl+ml2ZBihLXbMOyurcGcFKx9zdOh
0cy5mLOhJlFkmXD9JSfpKuYrdxPWazKIkqbKP10ZvFG7Z6lKWX0z3iiN+q5nP8Hp
x9CX/JZ91sXCIAkwNG/H7i9LoQGofnXUNd6Tb8/Ds/3EPdOM96k/jMH9ZatGRrl0
ZCrBYb0LFpfgmA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:19:54 2025 by rpki-client