Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier: ByJuYx2EaC5jhirbMRNjsvTk9ITxixdH6/3eF/m2PUU=
Subject key identifier: 11:CB:68:09:2A:03:3F:63:E7:F1:60:53:95:A7:D4:79:EE:6B:0F:BE
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial: 0194BC72DDCEEE60C3221AB26F701367A1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number: 03AB
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: t0sOKJo4hKALRE0xnFagcAnpvd6e0dN+epkpUgbs+KQ=)
2: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (hash: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dd:ce:ee:60:c3:22:1a:b2:6f:70:13:67:a1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=11cb68092a033f63e7f1605395a7d479ee6b0fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:b1:82:a0:50:12:34:5b:19:b8:1e:91:17:
e8:84:d2:80:89:b3:d9:a1:66:f7:6e:84:67:12:b8:
4b:d0:d0:35:dc:90:52:56:2c:08:30:4e:de:a0:16:
c5:0b:6d:d7:bb:1e:9e:e2:15:f5:27:2a:cb:c2:27:
82:82:05:48:cb:bc:78:00:da:41:84:9b:c0:a1:d6:
60:41:f8:ec:3b:39:6d:9e:b3:c1:2a:43:a3:88:a2:
cb:5b:56:03:9a:45:51:22:53:bd:cd:01:f3:36:04:
17:a3:f0:1e:4d:60:cc:ec:90:29:eb:47:04:88:4c:
99:7d:17:f8:7e:ca:46:d8:76:9f:64:ec:f6:03:63:
3f:b0:ba:fa:7f:c9:34:02:0d:fc:45:7a:d3:32:17:
bc:c8:bd:53:09:6c:b4:09:c8:22:15:42:d2:1a:88:
c4:37:69:83:ba:ec:2b:a8:f1:8c:24:76:d7:dd:4e:
b9:a4:6a:b1:95:0a:e2:fb:6c:ab:67:33:4f:10:fc:
36:8d:b1:df:22:3b:e8:fd:2e:45:2d:5d:ab:ca:88:
10:33:7a:33:16:42:1f:d5:4a:80:00:d8:9a:28:52:
86:aa:64:bb:95:19:a6:43:f5:23:8e:5e:1d:0c:86:
13:47:d1:50:b4:f8:cb:35:58:a7:48:48:8d:c0:c2:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:68:09:2A:03:3F:63:E7:F1:60:53:95:A7:D4:79:EE:6B:0F:BE
X509v3 Authority Key Identifier:
keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d0:89:97:de:92:81:08:7a:0b:0a:f4:a1:e5:73:a7:bc:dc:
4b:a1:21:94:96:4c:95:04:ce:97:8a:07:69:74:1f:39:b1:4b:
bb:7e:3a:88:e6:2b:3e:84:72:93:04:0f:b2:b6:6f:c8:94:3e:
0d:bf:41:2c:90:24:4e:bd:da:4a:80:b1:9b:71:c2:fe:b6:cf:
be:38:f0:eb:b1:3f:6b:9d:87:ac:84:f9:a8:78:98:36:56:5e:
2e:e0:96:40:b3:36:c4:f1:57:89:fb:94:33:e1:1c:a5:47:ea:
37:34:51:60:d1:11:4c:06:97:d8:1f:7e:8a:5f:9c:f1:79:a6:
14:c7:c1:53:56:b6:9e:69:74:61:4a:c8:17:84:be:81:8a:93:
d7:e9:d2:3a:05:0a:69:d4:29:5a:5b:ee:5f:66:c3:b6:f6:db:
ae:5b:84:d6:aa:a6:50:8c:bb:29:f1:ee:ac:c2:5a:de:d9:d1:
be:56:d0:ea:2b:4b:e5:51:0e:f3:d8:92:ce:d5:e3:11:97:85:
79:1c:37:a4:88:1e:74:51:b2:7c:1a:c7:d4:78:13:2b:23:79:
d9:c3:08:65:f9:05:fd:bc:b9:53:70:b1:b5:8f:13:2e:89:e0:
75:be:d7:3f:15:cf:99:ba:8e:0d:03:ab:2f:82:2b:45:0b:b8:
fd:5a:39:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ct3O7mDDIhqyb3ATZ6GlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjI3YWIwZDU1ZjhhZTBkZGE4NmZkZWYxYzM1NzI0ZTE4
ODVlNGYwHhcNMjUwMTMxMTMwMDMxWhcNMjUwMjAxMTMwMDMxWjAzMTEwLwYDVQQD
EygxMWNiNjgwOTJhMDMzZjYzZTdmMTYwNTM5NWE3ZDQ3OWVlNmIwZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/uxgqBQEjRbGbgekRfohNKAibPZ
oWb3boRnErhL0NA13JBSViwIME7eoBbFC23Xux6e4hX1JyrLwieCggVIy7x4ANpB
hJvAodZgQfjsOzltnrPBKkOjiKLLW1YDmkVRIlO9zQHzNgQXo/AeTWDM7JAp60cE
iEyZfRf4fspG2HafZOz2A2M/sLr6f8k0Ag38RXrTMhe8yL1TCWy0CcgiFULSGojE
N2mDuuwrqPGMJHbX3U65pGqxlQri+2yrZzNPEPw2jbHfIjvo/S5FLV2ryogQM3oz
FkIf1UqAANiaKFKGqmS7lRmmQ/Ujjl4dDIYTR9FQtPjLNVinSEiNwMJG1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHLaAkqAz9j5/FgU5Wn1Hnuaw++MB8GA1UdIwQY
MBaAFCKyerDVX4rg3ahv3vHDVyThiF5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgt
ZGU2NjQ0YzNkYWVkLzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgtZGU2NjQ0YzNkYWVk
LzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNCJl96S
gQh6Cwr0oeVzp7zcS6EhlJZMlQTOl4oHaXQfObFLu346iOYrPoRykwQPsrZvyJQ+
Db9BLJAkTr3aSoCxm3HC/rbPvjjw67E/a52HrIT5qHiYNlZeLuCWQLM2xPFXifuU
M+EcpUfqNzRRYNERTAaX2B9+il+c8XmmFMfBU1a2nml0YUrIF4S+gYqT1+nSOgUK
adQpWlvuX2bDtvbbrluE1qqmUIy7KfHurMJa3tnRvlbQ6itL5VEO89iSztXjEZeF
eRw3pIgedFGyfBrH1HgTKyN52cMIZfkF/by5U3CxtY8TLongdb7XPxXPmbqODQOr
L4IrRQu4/Vo5bA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:08 2025 by rpki-client