Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: LZZh2Go/wgbIliXoPSyzZI6ykdUq7H43MVbqAvBUakU=
Subject key identifier: 5A:7A:E8:85:42:54:20:D6:D9:2B:B7:D3:86:D1:20:DC:23:1F:FB:8A
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 0194BBCEFBD5D105760B1590BBA16F1BC16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: m0UPDLLyqUwWGQl/iJFWdo/KFRtbAgoqZG4d5Az4VnU=)
2: TD7HLl_luzmut4r9NWbAxbYIOuQ.roa (hash: aVFt60b7VcIpMgon0pjcdJ2lnay9KPMEHvhOesbUmv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fb:d5:d1:05:76:0b:15:90:bb:a1:6f:1b:c1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=5a7ae885425420d6d92bb7d386d120dc231ffb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:22:b7:e2:67:1d:0a:03:39:4f:db:fc:ed:
61:d2:45:75:0a:06:44:94:e2:60:5f:e9:69:b9:13:
da:9b:bb:a0:27:e3:b7:a5:69:9b:f8:72:8a:26:06:
39:b1:cb:f0:a5:31:19:f5:fc:d0:72:11:38:37:a9:
14:68:15:34:37:38:5a:bc:9d:49:2a:c8:8f:0b:1f:
81:b5:f9:89:87:84:37:3f:a3:76:fe:ad:ac:c2:25:
0f:30:1b:67:58:41:4b:cb:db:54:10:67:45:00:21:
e3:8b:08:20:2b:fb:d7:29:0c:0b:ed:04:f2:31:84:
38:1b:c5:c1:ce:6c:88:5c:af:4c:b5:ba:e8:c6:c9:
11:16:75:fb:87:d6:5c:13:d9:9a:37:24:ea:11:74:
17:2d:14:d3:8e:02:8c:37:32:1c:72:fb:c9:a1:62:
ed:28:39:66:d5:aa:10:8c:27:9c:56:26:52:2a:8d:
bf:56:1d:b3:5e:f6:46:b6:89:98:84:00:a2:8e:35:
94:fb:5d:62:81:5d:b1:8d:9b:66:0d:ca:e4:d1:9d:
ce:c4:27:e7:37:6f:38:3d:97:46:6a:6c:e1:af:f6:
e8:96:83:6f:b3:1f:60:a8:c8:ee:c0:16:26:8a:49:
f1:1a:86:3e:fb:19:98:5f:12:2e:87:5e:1f:e1:e8:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:E8:85:42:54:20:D6:D9:2B:B7:D3:86:D1:20:DC:23:1F:FB:8A
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5e:10:42:43:a3:ee:46:ac:39:a0:cd:11:4c:f2:d6:f8:2d:
56:3b:50:87:d0:62:0e:56:cd:f1:ba:22:21:3c:23:58:ba:eb:
af:fc:a1:1b:f6:e8:90:32:87:d7:28:15:4f:3d:bb:5e:c8:e9:
e7:0e:66:87:a4:73:74:0d:cd:05:1d:14:ea:97:0d:49:b1:d9:
a6:99:b7:2e:0d:3d:74:ad:c0:e0:9c:8f:93:dd:1f:9b:4f:c9:
c4:c0:1f:80:53:72:2c:03:ef:da:1d:d4:93:36:53:9e:17:68:
f5:ea:b9:49:7e:61:4b:90:65:01:82:d3:6e:cb:61:bb:b4:a6:
30:25:d4:c5:ef:6f:34:09:9b:55:48:f1:53:90:62:90:3a:da:
b0:24:a8:c6:f5:34:48:9f:91:4d:b2:6e:ab:6d:13:a0:9e:f1:
b6:52:d8:af:ba:7a:16:8c:c4:67:b7:ec:9e:10:ef:3b:43:8a:
2c:a4:ec:e7:dd:e2:12:57:f2:6c:ea:1c:da:af:b0:ef:f8:11:
c6:10:86:c4:c1:53:c3:a9:b1:2e:62:e7:0f:4f:cf:bd:43:15:
ba:d6:ba:ec:91:63:3c:6b:bf:20:32:4b:33:cb:0c:af:8e:33:
68:1d:a1:6f:bf:d0:51:59:9c:be:d3:02:84:0b:e0:7e:5d:e2:
dc:a7:d1:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvvV0QV2CxWQu6FvG8FqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMThlZjA4YjU1ZGRiMjBjODgxNmE2MjFhNDU5Y2RiOTI3
YjMyMDEwHhcNMjUwMTMxMTAwMTMxWhcNMjUwMjAxMTAwMTMxWjAzMTEwLwYDVQQD
Eyg1YTdhZTg4NTQyNTQyMGQ2ZDkyYmI3ZDM4NmQxMjBkYzIzMWZmYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul0it+JnHQoDOU/b/O1h0kV1CgZE
lOJgX+lpuRPam7ugJ+O3pWmb+HKKJgY5scvwpTEZ9fzQchE4N6kUaBU0NzhavJ1J
KsiPCx+BtfmJh4Q3P6N2/q2swiUPMBtnWEFLy9tUEGdFACHjiwggK/vXKQwL7QTy
MYQ4G8XBzmyIXK9MtbroxskRFnX7h9ZcE9maNyTqEXQXLRTTjgKMNzIccvvJoWLt
KDlm1aoQjCecViZSKo2/Vh2zXvZGtomYhACijjWU+11igV2xjZtmDcrk0Z3OxCfn
N284PZdGamzhr/boloNvsx9gqMjuwBYmiknxGoY++xmYXxIuh14f4ej0EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp66IVCVCDW2Su304bRINwjH/uKMB8GA1UdIwQY
MBaAFCAY7wi1XdsgyIFqYhpFnNuSezIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDIt
YTBhYzQ5YWQzNDNmLzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDItYTBhYzQ5YWQzNDNm
LzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiV4QQkOj
7kasOaDNEUzy1vgtVjtQh9BiDlbN8boiITwjWLrrr/yhG/bokDKH1ygVTz27Xsjp
5w5mh6RzdA3NBR0U6pcNSbHZppm3Lg09dK3A4JyPk90fm0/JxMAfgFNyLAPv2h3U
kzZTnhdo9eq5SX5hS5BlAYLTbsthu7SmMCXUxe9vNAmbVUjxU5BikDrasCSoxvU0
SJ+RTbJuq20ToJ7xtlLYr7p6FozEZ7fsnhDvO0OKLKTs593iElfybOoc2q+w7/gR
xhCGxMFTw6mxLmLnD0/PvUMVuta67JFjPGu/IDJLM8sMr44zaB2hb7/QUVmcvtMC
hAvgfl3i3KfRmQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:14 2025 by rpki-client