Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
File: 1ikBDNsLMSwy4Hqvm3INc9O806s.mft (raw, json)
Hash identifier: RrmdypsCPXPqNqYDPIRV8MEPtjvQNv2QBuuLHCReU0E=
Subject key identifier: DB:CE:F6:C2:FE:2D:09:33:55:C3:2F:1B:3B:9D:D7:89:92:26:E9:65
Authority key identifier: D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
Certificate issuer: /CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Certificate serial: 0194BC7335B405C2C1513DFCBFEB892B4803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:54 +0000
Manifest this update: Fri 31 Jan 2025 13:00:54 +0000
Manifest next update: Sat 01 Feb 2025 13:00:54 +0000
Files and hashes: 1: 1ikBDNsLMSwy4Hqvm3INc9O806s.crl (hash: WnvCvPnaESZcGtMl8I9OzIJF7h3KvsjCC8nIIzDJWLE=)
2: 24_KLR4ZTxixXjMFlfIhygqGc5A.roa (hash: moxDA+OQx2vpPS9xIam1x12sDttHtdnUlxnInWiXYBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:35:b4:05:c2:c1:51:3d:fc:bf:eb:89:2b:48:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Validity
Not Before: Jan 31 13:00:54 2025 GMT
Not After : Feb 1 13:00:54 2025 GMT
Subject: CN=dbcef6c2fe2d093355c32f1b3b9dd7899226e965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:01:ef:15:14:93:46:29:9d:04:54:40:74:
a7:3b:c4:c1:0b:95:e1:48:55:9e:2c:a4:3e:47:58:
04:5d:4a:99:c1:65:48:d4:a5:a1:1d:d2:a8:22:c9:
48:bd:2d:cd:56:43:3a:b1:47:26:82:a0:1d:f8:3e:
e9:82:f7:99:28:c9:a1:87:89:23:5c:50:49:6d:97:
3e:9a:29:33:45:45:42:54:47:42:e4:9f:cd:b6:39:
94:49:62:ab:15:11:a1:38:8b:a5:d6:d4:b7:71:81:
cc:ba:ce:2f:75:d1:a2:60:61:69:04:de:cf:2e:55:
d1:57:7f:13:9a:62:d2:87:3b:5c:c9:8f:aa:c1:c2:
cd:01:84:b9:bf:be:03:d2:f3:e2:0b:82:aa:bd:cc:
cb:fa:59:2a:b2:6c:30:1c:33:36:45:5e:7f:48:2e:
9c:ac:74:5e:d1:69:6f:49:af:0f:0c:45:7d:0d:33:
43:ca:a7:f5:43:ae:36:6d:77:62:ee:fb:6c:b0:ea:
b1:84:31:ce:42:6a:17:34:40:37:fd:c8:a7:02:9a:
b7:f9:5c:0c:91:7e:1a:ba:97:cc:79:35:f4:84:2c:
ad:e0:a7:e1:ee:83:a7:73:bd:6d:25:50:87:b9:cd:
5f:fa:d1:dd:01:ef:5c:7b:4f:44:4a:e0:41:40:5a:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CE:F6:C2:FE:2D:09:33:55:C3:2F:1B:3B:9D:D7:89:92:26:E9:65
X509v3 Authority Key Identifier:
keyid:D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:66:bf:5e:38:0e:02:d5:79:cb:46:f2:42:3c:10:ba:1f:df:
b4:c4:56:95:fc:b4:ae:a1:49:1d:8e:ca:5c:46:f6:e4:b6:68:
c3:39:c1:a3:ff:1a:e8:d1:5b:71:4a:24:a3:96:58:94:ae:b5:
c8:a0:2c:7e:c7:fa:29:8f:6c:53:3e:0d:b9:91:4c:e2:50:76:
0c:bd:01:c8:33:52:a0:77:af:4c:a6:47:dd:d4:30:fc:93:00:
57:d4:4a:f4:3b:b6:ed:82:05:d1:82:00:4b:97:1e:ac:97:a5:
b2:56:40:72:5c:27:42:85:16:96:7a:a0:e9:0d:f2:f7:64:cc:
e8:4f:83:96:cf:63:72:aa:94:3a:f4:9e:57:8c:a0:c5:53:2f:
ad:e7:17:92:21:42:12:71:0e:36:59:e2:c6:76:27:3c:58:f0:
0a:76:f8:a1:42:b6:24:61:e8:a2:01:b6:44:e5:75:cf:de:74:
95:e3:04:2a:39:32:66:d3:2a:18:d4:d2:4d:4f:3c:0b:9b:de:
7b:cd:61:74:fe:87:27:c1:1d:68:0c:5d:f8:5b:7e:4b:da:05:
62:2f:4c:1b:a7:85:ba:bc:a0:29:c5:24:03:bb:a2:8c:f8:f6:
59:2c:67:0a:b5:5d:43:c2:8f:38:36:99:05:75:97:e9:d2:a9:
81:a6:e3:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8czW0BcLBUT38v+uJK0gDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjkwMTBjZGIwYjMxMmMzMmUwN2FhZjliNzIwZDczZDNi
Y2QzYWIwHhcNMjUwMTMxMTMwMDU0WhcNMjUwMjAxMTMwMDU0WjAzMTEwLwYDVQQD
EyhkYmNlZjZjMmZlMmQwOTMzNTVjMzJmMWIzYjlkZDc4OTkyMjZlOTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvcB7xUUk0YpnQRUQHSnO8TBC5Xh
SFWeLKQ+R1gEXUqZwWVI1KWhHdKoIslIvS3NVkM6sUcmgqAd+D7pgveZKMmhh4kj
XFBJbZc+mikzRUVCVEdC5J/NtjmUSWKrFRGhOIul1tS3cYHMus4vddGiYGFpBN7P
LlXRV38TmmLShztcyY+qwcLNAYS5v74D0vPiC4KqvczL+lkqsmwwHDM2RV5/SC6c
rHRe0WlvSa8PDEV9DTNDyqf1Q642bXdi7vtssOqxhDHOQmoXNEA3/cinApq3+VwM
kX4aupfMeTX0hCyt4Kfh7oOnc71tJVCHuc1f+tHdAe9ce09ESuBBQFo8EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvO9sL+LQkzVcMvGzud14mSJullMB8GA1UdIwQY
MBaAFNYpAQzbCzEsMuB6r5tyDXPTvNOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlrQkROc0xNU3d5NEhxdm0zSU5jOU84MDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xOTRjMWUtOTcxMC00ZDM1LTgyM2It
NWRkMzM5OTRhMjQxLzEvMWlrQkROc0xNU3d5NEhxdm0zSU5jOU84MDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xOTRjMWUtOTcxMC00ZDM1LTgyM2ItNWRkMzM5OTRhMjQx
LzEvMWlrQkROc0xNU3d5NEhxdm0zSU5jOU84MDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2a/XjgO
AtV5y0byQjwQuh/ftMRWlfy0rqFJHY7KXEb25LZowznBo/8a6NFbcUoko5ZYlK61
yKAsfsf6KY9sUz4NuZFM4lB2DL0ByDNSoHevTKZH3dQw/JMAV9RK9Du27YIF0YIA
S5cerJelslZAclwnQoUWlnqg6Q3y92TM6E+Dls9jcqqUOvSeV4ygxVMvrecXkiFC
EnEONlnixnYnPFjwCnb4oUK2JGHoogG2ROV1z950leMEKjkyZtMqGNTSTU88C5ve
e81hdP6HJ8EdaAxd+Ft+S9oFYi9MG6eFurygKcUkA7uijPj2WSxnCrVdQ8KPODaZ
BXWX6dKpgabj7w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:25 2025 by rpki-client