Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: rH/N4ILCmFDkig6OG8csuBUb37q62nZUhi2VRJX2VsA=
Subject key identifier: C7:B6:DE:02:FB:11:90:F9:3E:F5:DD:DA:15:D0:F1:25:FB:08:62:F1
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 0194BCE0EADB01DA6D341A75549C1750CE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 1405
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: 2ttxDr4pGnjxuFL3h06WTGhjE60.roa (hash: gb8hbvNo/pcY/swamzsbRwiOgi4eH7YRN51AtOhEfsU=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: mYlPI61cIu6CvgzFh40e7CFY8IfV1tFdNvIL7IpZpwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ea:db:01:da:6d:34:1a:75:54:9c:17:50:ce:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=c7b6de02fb1190f93ef5ddda15d0f125fb0862f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:fd:48:fc:56:58:a9:4a:8f:36:d3:92:a9:
50:d1:04:8a:fe:0e:67:b0:57:f3:83:d1:26:5d:d8:
45:6c:5b:cb:61:d7:97:a4:45:11:7f:b5:b2:ff:b1:
bf:b1:e6:47:39:31:d3:1a:df:cc:7e:ad:d8:46:9c:
b3:2c:94:48:f3:22:59:0e:d1:03:1a:0f:52:67:2c:
95:c8:26:17:ff:aa:f6:ee:10:7e:5a:68:b8:3c:c4:
11:25:be:94:ac:9f:f4:6c:da:87:0f:c0:12:73:9e:
5f:3d:d8:f5:39:78:eb:41:fe:e7:44:f9:7d:b2:81:
02:23:b7:78:f1:26:f5:4d:b8:92:64:8d:0c:a2:5c:
7e:1c:f6:42:df:fc:15:7a:b1:b0:ab:cf:40:20:59:
bb:a9:2b:29:b9:30:53:f9:8a:fc:85:57:aa:df:68:
51:87:5d:5f:93:15:40:46:7d:3f:76:34:64:ff:11:
53:b3:60:3b:0a:b3:86:f2:d4:71:b1:b8:b5:de:8b:
b8:44:d3:17:30:1a:3e:f3:e8:68:74:48:42:71:e5:
38:bb:5e:b4:df:c9:36:e9:9d:e5:59:83:b8:07:1e:
6f:fa:0d:9b:a2:6f:6c:f2:f5:d2:70:01:78:a6:01:
1c:fc:09:b8:a6:0c:ad:15:17:49:74:85:93:e3:5b:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:DE:02:FB:11:90:F9:3E:F5:DD:DA:15:D0:F1:25:FB:08:62:F1
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:85:1a:0a:d6:e5:0f:12:46:90:6e:5d:c1:7f:d6:d4:6b:99:
2e:34:7e:3c:82:c7:f0:4c:4d:02:5d:9b:5b:51:da:d7:f7:94:
7e:64:bc:dd:35:b6:f2:c6:58:33:06:4b:bb:33:0a:1e:2a:42:
e3:d3:4b:f5:f9:eb:2d:6f:35:c9:33:d8:f4:e5:ea:74:e5:ba:
f6:ba:1c:ec:2d:86:f7:8f:25:03:5b:14:07:a1:73:4a:75:74:
91:77:7e:5f:d7:6f:26:8b:5e:96:21:38:8c:4b:b0:1f:ca:24:
30:ed:77:af:a7:4d:a3:e5:f3:58:45:9d:fc:61:ec:cc:42:7c:
67:0e:b9:2f:8a:75:24:71:1d:bd:71:3a:16:c2:fd:c9:28:85:
44:50:fe:cd:78:81:8b:11:c0:b8:a3:04:5b:79:75:f2:a3:4e:
e3:77:dd:5a:d3:11:c0:ec:00:6c:5e:06:7a:6d:ae:31:1a:ad:
72:e0:26:a5:1f:9d:a7:03:81:62:f7:30:fb:56:88:95:cd:1e:
20:26:53:88:71:6e:33:3d:ad:9b:1b:ed:ed:22:e9:96:0d:5e:
c2:2e:13:b2:5b:1c:66:d3:95:61:90:9f:6d:6b:da:2c:a4:8c:
51:bc:86:40:b1:eb:c0:4c:16:3f:59:0b:49:9f:c3:67:2e:cc:
4d:f3:25:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OrbAdptNBp1VJwXUM5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhM2ZlMGI5YzYzMGEzM2UxNzFhMGE1Yzc5M2YzNDBiNDM0
NDY5MzIwHhcNMjUwMTMxMTUwMDQ0WhcNMjUwMjAxMTUwMDQ0WjAzMTEwLwYDVQQD
EyhjN2I2ZGUwMmZiMTE5MGY5M2VmNWRkZGExNWQwZjEyNWZiMDg2MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgT9SPxWWKlKjzbTkqlQ0QSK/g5n
sFfzg9EmXdhFbFvLYdeXpEURf7Wy/7G/seZHOTHTGt/Mfq3YRpyzLJRI8yJZDtED
Gg9SZyyVyCYX/6r27hB+Wmi4PMQRJb6UrJ/0bNqHD8ASc55fPdj1OXjrQf7nRPl9
soECI7d48Sb1TbiSZI0Molx+HPZC3/wVerGwq89AIFm7qSspuTBT+Yr8hVeq32hR
h11fkxVARn0/djRk/xFTs2A7CrOG8tRxsbi13ou4RNMXMBo+8+hodEhCceU4u160
38k26Z3lWYO4Bx5v+g2bom9s8vXScAF4pgEc/Am4pgytFRdJdIWT41uUjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe23gL7EZD5PvXd2hXQ8SX7CGLxMB8GA1UdIwQY
MBaAFIo/4LnGMKM+FxoKXHk/NAtDRGkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mMzlhNDktNTllYS00YzRmLTk4ZmMt
NTNhYWI0MmY0NzZlLzEvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mMzlhNDktNTllYS00YzRmLTk4ZmMtNTNhYWI0MmY0NzZl
LzEvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoUaCtbl
DxJGkG5dwX/W1GuZLjR+PILH8ExNAl2bW1Ha1/eUfmS83TW28sZYMwZLuzMKHipC
49NL9fnrLW81yTPY9OXqdOW69roc7C2G948lA1sUB6FzSnV0kXd+X9dvJoteliE4
jEuwH8okMO13r6dNo+XzWEWd/GHszEJ8Zw65L4p1JHEdvXE6FsL9ySiFRFD+zXiB
ixHAuKMEW3l18qNO43fdWtMRwOwAbF4Gem2uMRqtcuAmpR+dpwOBYvcw+1aIlc0e
ICZTiHFuMz2tmxvt7SLplg1ewi4TslscZtOVYZCfbWvaLKSMUbyGQLHrwEwWP1kL
SZ/DZy7MTfMl6g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:22 2025 by rpki-client