Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier: xZi4rcWbR/osYKxUAebR9NzZ9z8+AWm86yk8lGcjKuU=
Subject key identifier: F6:3F:94:EF:83:CB:93:FF:EE:99:CE:47:E3:5B:5E:39:BE:73:AB:6C
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 0194BCE0DBBD24A5A47ADFD3D2406BCEF7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number: 02B8
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: QMMy8yKbXHEJwsJqLmy-L7XC5s8.roa (hash: YyXDtgRgJkHfVXUNq/vL+FBOo2ylA/9ZRjglYBypKl4=)
2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: 89x5JqeQTb5hG00APRcRTiKmwEezNPPAovYYaNq0k1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:db:bd:24:a5:a4:7a:df:d3:d2:40:6b:ce:f7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=f63f94ef83cb93ffee99ce47e35b5e39be73ab6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:a7:b1:c4:0b:dc:36:e0:26:69:b1:63:26:
72:dc:1b:86:8b:27:c2:04:cb:25:a2:a9:b7:93:d9:
17:2d:3b:26:b8:e1:54:bc:c7:69:8a:90:2c:df:59:
78:6e:be:1c:55:81:b9:9e:45:32:59:42:15:e5:f3:
6a:2b:65:e9:24:08:ad:e2:ea:a5:6c:5a:39:57:a1:
1f:4f:e0:eb:49:54:36:a5:f2:ea:b8:8c:39:43:84:
ed:2d:a1:85:96:b5:ed:21:54:b3:6d:2e:01:86:d3:
a0:e4:fc:57:c9:8b:ac:27:f5:25:7c:24:66:be:2d:
34:76:7c:44:cb:5b:c0:6a:ae:f3:b8:1a:5b:8c:d7:
08:78:f6:06:5a:0b:8e:af:4b:94:ad:49:51:ce:6e:
80:80:43:6d:ac:e2:a4:1c:4c:39:7a:26:02:8d:e7:
ec:46:51:97:51:ae:83:63:60:22:53:64:a2:59:38:
ce:69:9f:ad:1e:c1:68:f0:2f:ed:8c:8c:84:17:91:
b3:f7:03:11:66:d6:a6:67:ea:03:c1:5a:ac:d4:eb:
eb:06:03:53:ef:8e:43:66:f9:c0:84:34:95:f6:59:
95:19:50:43:b7:69:86:85:94:f3:c7:6e:36:fa:68:
19:a4:38:15:82:02:86:01:cc:e7:2b:3c:62:db:a1:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3F:94:EF:83:CB:93:FF:EE:99:CE:47:E3:5B:5E:39:BE:73:AB:6C
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c8:a5:cb:9c:a6:07:0c:9b:8a:4f:af:cc:37:35:be:36:a6:
81:1f:df:17:bc:84:67:42:d9:f8:14:ec:f7:01:ae:da:bc:21:
6d:f2:61:b3:f8:5b:64:97:4f:f5:e4:a4:79:e1:44:44:86:f9:
3f:62:f7:75:55:ab:7e:41:1d:08:95:0d:35:64:34:12:8b:68:
26:4a:d5:05:9e:bf:05:3a:0e:4e:db:48:89:f8:ac:ff:d0:84:
14:23:31:9a:fd:32:16:12:aa:19:f4:71:e4:b3:1f:97:1b:2f:
84:f1:38:93:f1:e7:70:a0:da:c2:c3:20:c1:56:5c:c5:10:cf:
06:b7:e0:d4:3f:31:3c:02:f5:4b:58:bc:0e:52:5a:ac:a7:06:
4f:ba:2d:a2:34:5c:ea:b9:29:49:c1:6a:bd:1b:d9:28:d9:21:
28:a9:a4:af:9b:4a:3f:35:62:bf:d2:d0:52:e1:ad:84:96:11:
66:33:9d:55:11:a8:56:7b:60:bd:51:65:e6:1f:94:eb:d1:38:
a4:60:e7:9a:6e:45:42:5a:d9:98:7f:42:75:f6:a0:25:f8:7a:
56:38:48:3a:8d:e9:6b:a8:4f:9d:c5:ee:bf:a5:b8:f4:33:95:
b3:cb:93:67:c8:cc:be:ca:7e:d4:d1:f0:a3:fe:3d:96:65:f3:
1d:c6:f5:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Nu9JKWket/T0kBrzvfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm
ODQ5MzYwHhcNMjUwMTMxMTUwMDQwWhcNMjUwMjAxMTUwMDQwWjAzMTEwLwYDVQQD
EyhmNjNmOTRlZjgzY2I5M2ZmZWU5OWNlNDdlMzViNWUzOWJlNzNhYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v2nscQL3DbgJmmxYyZy3BuGiyfC
BMsloqm3k9kXLTsmuOFUvMdpipAs31l4br4cVYG5nkUyWUIV5fNqK2XpJAit4uql
bFo5V6EfT+DrSVQ2pfLquIw5Q4TtLaGFlrXtIVSzbS4BhtOg5PxXyYusJ/UlfCRm
vi00dnxEy1vAaq7zuBpbjNcIePYGWguOr0uUrUlRzm6AgENtrOKkHEw5eiYCjefs
RlGXUa6DY2AiU2SiWTjOaZ+tHsFo8C/tjIyEF5Gz9wMRZtamZ+oDwVqs1OvrBgNT
745DZvnAhDSV9lmVGVBDt2mGhZTzx242+mgZpDgVggKGAcznKzxi26GZEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPY/lO+Dy5P/7pnOR+NbXjm+c6tsMB8GA1UdIwQY
MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt
ZjViYjJiMmQ2M2JlLzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl
LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8ily5ym
Bwybik+vzDc1vjamgR/fF7yEZ0LZ+BTs9wGu2rwhbfJhs/hbZJdP9eSkeeFERIb5
P2L3dVWrfkEdCJUNNWQ0EotoJkrVBZ6/BToOTttIifis/9CEFCMxmv0yFhKqGfRx
5LMflxsvhPE4k/HncKDawsMgwVZcxRDPBrfg1D8xPAL1S1i8DlJarKcGT7otojRc
6rkpScFqvRvZKNkhKKmkr5tKPzViv9LQUuGthJYRZjOdVRGoVntgvVFl5h+U69E4
pGDnmm5FQlrZmH9CdfagJfh6VjhIOo3pa6hPncXuv6W49DOVs8uTZ8jMvsp+1NHw
o/49lmXzHcb1Bw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:02:06 2025 by rpki-client