Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier: UD5lnwEwGTEkrxGw6PIV+odfVQJ9B7TxdG8zrlA9jyw=
Subject key identifier: CD:BA:91:76:0D:68:B9:05:2B:A8:75:C8:C9:59:CC:6C:85:5F:5D:38
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial: 0194BC7328A682CA18763763025343B2697A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number: 03ED
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: BkDrM4-atcp10Br--qbvg_yK1zg.roa (hash: OQTXLqdYWvwdj8zXSXiFu8x5dJlCSPxgy4/Qhi1Yohc=)
2: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: qthgVTa+4oEQBa+jOOqS9pF2CJUIp7A2gbtB5u+X2h0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:28:a6:82:ca:18:76:37:63:02:53:43:b2:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=cdba91760d68b9052ba875c8c959cc6c855f5d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:b2:c1:07:f6:79:cb:b8:7c:b0:0f:10:d0:
61:6c:8d:a8:34:3c:0a:9e:0f:f2:28:f6:4c:26:c2:
29:3e:f2:46:fe:47:42:6d:d8:2c:21:4a:53:33:ff:
ba:66:c8:95:5c:3a:6e:87:a4:5e:52:14:1c:c0:69:
97:31:a5:95:0a:be:bf:e1:42:e6:99:98:71:4f:b0:
95:0f:cb:17:30:bc:2a:55:2e:75:2f:d6:97:18:8f:
60:a3:8c:dd:fa:7e:4f:dd:bb:5b:7b:78:de:33:d9:
b6:b8:b2:a8:0a:b0:91:98:e2:68:a0:7d:70:ad:a5:
77:48:1a:30:34:1b:e6:c0:81:df:84:3d:b0:fb:21:
18:8b:0e:bf:54:66:ce:b3:b2:2e:25:d4:12:f7:09:
d4:3d:56:48:a7:b2:ae:c1:38:ea:62:26:bd:3d:3a:
d8:3c:1e:83:4c:05:9f:b6:11:22:29:af:4f:a2:94:
e0:6f:15:cd:f8:70:4d:e9:43:b3:5b:2f:1f:ff:8e:
c3:ba:2c:f1:cb:34:7b:87:c4:b3:19:24:64:d7:4d:
a2:c4:ec:28:f5:96:85:25:7d:6a:2e:55:1f:10:31:
3e:ea:59:00:2d:42:1f:f3:e0:2c:68:3e:9e:50:1e:
67:71:99:50:db:2f:3a:f3:83:51:fd:f1:d1:e8:3f:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BA:91:76:0D:68:B9:05:2B:A8:75:C8:C9:59:CC:6C:85:5F:5D:38
X509v3 Authority Key Identifier:
keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:bc:b8:f7:48:55:ad:5a:82:56:86:86:2b:f6:99:6a:9a:
2b:91:99:1b:a6:d9:02:cb:48:fa:78:f9:e9:ef:96:39:75:52:
a8:24:b4:42:4e:cb:bf:9d:0a:82:f2:dd:6e:be:32:70:f9:a0:
4f:6f:fd:fe:1e:b6:8c:46:ef:e6:eb:38:1c:68:6a:1b:4f:f9:
48:68:94:13:c8:a2:09:57:32:68:d1:6e:d8:e0:a7:22:af:3c:
be:f2:c6:25:b0:4c:e1:39:6c:8c:d2:00:1b:37:1d:8c:4f:3d:
03:db:fb:49:d2:03:58:cc:4e:ac:c2:8b:c4:a7:14:12:73:69:
05:21:59:a1:1d:e6:7b:2f:0d:df:ba:d9:3d:67:33:3b:55:49:
f2:db:a7:f8:b1:84:80:00:d5:73:85:5f:56:a3:9e:c1:0c:e6:
7f:74:f6:6e:17:65:48:1c:5c:e7:40:93:cf:0c:c0:74:66:aa:
58:45:f9:ea:84:8a:42:e1:9b:7c:2b:fa:e2:56:46:2d:24:cf:
74:e8:f4:10:b7:b4:45:17:d8:1f:43:3d:4b:98:44:38:c1:89:
cd:e3:99:02:40:15:f9:7c:cc:cc:2d:d4:51:7f:42:a9:6a:47:
c6:c9:64:b3:dc:00:e4:d1:3f:61:f6:ae:2a:68:69:61:6b:26:
97:a7:49:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyimgsoYdjdjAlNDsml6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxY2Y1MzQ4MWQxMzNiYWNmNTI3ODY4ZGJhMWIzNzYzZTNk
NmRkYTcwHhcNMjUwMTMxMTMwMDUxWhcNMjUwMjAxMTMwMDUxWjAzMTEwLwYDVQQD
EyhjZGJhOTE3NjBkNjhiOTA1MmJhODc1YzhjOTU5Y2M2Yzg1NWY1ZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHyywQf2ecu4fLAPENBhbI2oNDwK
ng/yKPZMJsIpPvJG/kdCbdgsIUpTM/+6ZsiVXDpuh6ReUhQcwGmXMaWVCr6/4ULm
mZhxT7CVD8sXMLwqVS51L9aXGI9go4zd+n5P3btbe3jeM9m2uLKoCrCRmOJooH1w
raV3SBowNBvmwIHfhD2w+yEYiw6/VGbOs7IuJdQS9wnUPVZIp7KuwTjqYia9PTrY
PB6DTAWfthEiKa9PopTgbxXN+HBN6UOzWy8f/47DuizxyzR7h8SzGSRk102ixOwo
9ZaFJX1qLlUfEDE+6lkALUIf8+AsaD6eUB5ncZlQ2y8684NR/fHR6D+D7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM26kXYNaLkFK6h1yMlZzGyFX104MB8GA1UdIwQY
MBaAFCHPU0gdEzus9SeGjbobN2Pj1t2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWM5VFNCMFRPNnoxSjRhTnVoczNZLVBXM2FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS83MjViODgtYzUyMy00MzEzLTllMzAt
MDJjMWUxOWE3MWQ1LzEvSWM5VFNCMFRPNnoxSjRhTnVoczNZLVBXM2FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS83MjViODgtYzUyMy00MzEzLTllMzAtMDJjMWUxOWE3MWQ1
LzEvSWM5VFNCMFRPNnoxSjRhTnVoczNZLVBXM2FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSu8uPdI
Va1aglaGhiv2mWqaK5GZG6bZAstI+nj56e+WOXVSqCS0Qk7Lv50KgvLdbr4ycPmg
T2/9/h62jEbv5us4HGhqG0/5SGiUE8iiCVcyaNFu2OCnIq88vvLGJbBM4TlsjNIA
GzcdjE89A9v7SdIDWMxOrMKLxKcUEnNpBSFZoR3mey8N37rZPWczO1VJ8tun+LGE
gADVc4VfVqOewQzmf3T2bhdlSBxc50CTzwzAdGaqWEX56oSKQuGbfCv64lZGLSTP
dOj0ELe0RRfYH0M9S5hEOMGJzeOZAkAV+XzMzC3UUX9CqWpHxslks9wA5NE/Yfau
KmhpYWsml6dJlg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:25 2025 by rpki-client