Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
File: immKFPthpoevCmP3xlXAAfZwEoI.mft (raw, json)
Hash identifier: mpZtI7D+X9+CTmNsuKf22kf+64xCCababe1nvJAP0IQ=
Subject key identifier: 8D:48:64:85:AC:E1:62:58:91:4F:F5:16:46:AD:4E:E2:1D:01:66:C6
Authority key identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
Certificate issuer: /CN=8a698a14fb61a687af0a63f7c655c001f6701282
Certificate serial: 0194BD17B0077A1E7C5719BF91DF9A3685D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
Manifest number: 01C4
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: P1m93kQnbl9hCPZ7gjvBSz2QduY.roa (hash: Vw3jwkUFPb+4FTO/pTKFTwQSjK1reP+BMicWKiuZXfs=)
2: immKFPthpoevCmP3xlXAAfZwEoI.crl (hash: DnxU3hvwJgcygPaweoeXWhLU7LwDnFli0xVl8OMSQFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b0:07:7a:1e:7c:57:19:bf:91:df:9a:36:85:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a698a14fb61a687af0a63f7c655c001f6701282
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=8d486485ace16258914ff51646ad4ee21d0166c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c5:c0:7c:52:ad:67:21:92:f8:5b:b2:c3:fd:
fe:6b:1a:90:4b:64:f7:74:87:27:35:eb:c2:79:ec:
b7:3f:c1:aa:b7:ea:eb:48:06:49:c0:f3:00:7b:3f:
27:09:c4:a2:8a:81:ff:2b:9a:4c:92:ed:a0:9f:31:
e3:21:a9:6f:a6:19:0a:79:34:e3:08:47:61:2c:ed:
67:cb:9f:34:6a:e1:ac:b9:b7:2a:d1:45:1c:55:6a:
df:1f:ea:e9:a4:1e:18:b8:41:38:a1:f4:81:e6:fa:
b0:4a:c0:47:5b:c0:fc:12:e0:55:5a:0c:24:b3:48:
53:c5:fb:99:94:99:a5:db:52:c2:e7:2f:94:62:10:
92:12:c1:84:20:3f:c1:e4:71:78:26:8b:1a:bb:aa:
4a:88:7a:c7:aa:3c:ab:96:81:67:9f:79:90:8b:a3:
81:36:13:96:b6:59:fe:58:9c:ec:30:76:c2:a5:4b:
c2:2a:b6:43:cf:60:75:00:4d:17:57:64:98:a5:88:
ff:86:18:78:4c:6b:86:61:15:06:26:10:3d:62:d5:
5e:c3:32:bb:42:45:d8:15:25:29:0d:29:32:bc:25:
e5:88:bf:98:c4:ca:17:57:0f:c4:37:40:18:54:40:
b7:80:83:4e:bb:0f:3c:95:53:45:89:e0:a9:51:01:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:48:64:85:AC:E1:62:58:91:4F:F5:16:46:AD:4E:E2:1D:01:66:C6
X509v3 Authority Key Identifier:
keyid:8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1b:d0:9e:85:e6:4b:6c:6f:54:43:8d:c6:13:ce:6e:52:c3:
09:2b:c5:66:ab:c1:9f:4b:96:bb:eb:2a:a0:49:f0:dd:c1:c5:
69:a8:ef:f6:d2:57:6f:80:2f:71:e5:4c:d5:f9:b7:99:ef:b5:
74:29:39:d5:bd:f2:b3:73:b8:6e:61:4a:e0:bd:d0:4f:d9:c5:
a2:0d:fc:39:af:12:a5:2a:66:12:7e:5e:1e:3d:bd:83:15:98:
3a:44:08:8d:db:a4:4b:37:37:b1:50:1d:a1:96:8f:f4:ae:74:
89:d2:9d:dd:88:66:1f:73:7b:37:81:2e:03:b2:ef:bb:26:8c:
a7:86:21:da:fe:2b:18:86:02:19:73:18:d3:12:09:c2:9b:5c:
08:99:da:41:29:75:06:21:88:20:a8:56:15:7c:42:e1:0e:f7:
83:e3:8c:3d:14:18:04:e6:72:b0:dc:71:cc:d0:12:ce:2c:9b:
02:89:3b:29:fa:54:da:e8:7b:93:16:aa:c6:bf:61:00:ef:e0:
49:6f:20:cf:31:de:27:2a:1e:75:53:88:db:41:3a:3f:96:48:
a9:b0:6a:02:67:fa:0e:b0:60:38:cf:5b:1d:14:aa:c4:c3:d9:
bf:8c:5b:57:1d:f4:47:59:53:ae:01:41:18:ce:74:0e:74:28:
bf:f9:20:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7AHeh58Vxm/kd+aNoXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjk4YTE0ZmI2MWE2ODdhZjBhNjNmN2M2NTVjMDAxZjY3
MDEyODIwHhcNMjUwMTMxMTYwMDMzWhcNMjUwMjAxMTYwMDMzWjAzMTEwLwYDVQQD
Eyg4ZDQ4NjQ4NWFjZTE2MjU4OTE0ZmY1MTY0NmFkNGVlMjFkMDE2NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sXAfFKtZyGS+Fuyw/3+axqQS2T3
dIcnNevCeey3P8Gqt+rrSAZJwPMAez8nCcSiioH/K5pMku2gnzHjIalvphkKeTTj
CEdhLO1ny580auGsubcq0UUcVWrfH+rppB4YuEE4ofSB5vqwSsBHW8D8EuBVWgwk
s0hTxfuZlJml21LC5y+UYhCSEsGEID/B5HF4Josau6pKiHrHqjyrloFnn3mQi6OB
NhOWtln+WJzsMHbCpUvCKrZDz2B1AE0XV2SYpYj/hhh4TGuGYRUGJhA9YtVewzK7
QkXYFSUpDSkyvCXliL+YxMoXVw/EN0AYVEC3gINOuw88lVNFieCpUQF7NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1IZIWs4WJYkU/1FkatTuIdAWbGMB8GA1UdIwQY
MBaAFIppihT7YaaHrwpj98ZVwAH2cBKCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zM2QyMjYtN2M0My00YzgzLTk0YWQt
MjE4Mjg5ZDgxYzUzLzEvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zM2QyMjYtN2M0My00YzgzLTk0YWQtMjE4Mjg5ZDgxYzUz
LzEvaW1tS0ZQdGhwb2V2Q21QM3hsWEFBZlp3RW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxvQnoXm
S2xvVEONxhPOblLDCSvFZqvBn0uWu+sqoEnw3cHFaajv9tJXb4AvceVM1fm3me+1
dCk51b3ys3O4bmFK4L3QT9nFog38Oa8SpSpmEn5eHj29gxWYOkQIjdukSzc3sVAd
oZaP9K50idKd3YhmH3N7N4EuA7LvuyaMp4Yh2v4rGIYCGXMY0xIJwptcCJnaQSl1
BiGIIKhWFXxC4Q73g+OMPRQYBOZysNxxzNASziybAok7KfpU2uh7kxaqxr9hAO/g
SW8gzzHeJyoedVOI20E6P5ZIqbBqAmf6DrBgOM9bHRSqxMPZv4xbVx30R1lTrgFB
GM50DnQov/kg6A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:26 2025 by rpki-client