Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: 9O/MDtF811iEzpRJKOvJjpVqa52/fgmbY7PWFcOuqJg=
Subject key identifier: 1C:73:40:C8:62:F6:CE:72:5F:7E:39:EF:A9:54:B6:FA:80:70:A7:96
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 0194BBCEF230CC63BA66B21BE91F72C08046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 37
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: 9mgLb8wkjrqpjCoSDVe054K246GEEIg+xJEFyYMjPVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f2:30:cc:63:ba:66:b2:1b:e9:1f:72:c0:80:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=1c7340c862f6ce725f7e39efa954b6fa8070a796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:9b:06:f8:19:6e:bd:da:f4:23:e1:a8:d2:
35:2e:91:b8:27:1b:ff:e3:cf:b0:3c:5d:20:11:8c:
ab:81:7f:f9:b5:e4:15:93:73:88:c9:c9:40:da:49:
ce:b2:64:a6:2a:65:c3:22:9a:fb:00:90:dd:e6:6e:
45:37:0f:68:37:61:c4:59:8c:9a:80:db:65:f2:1b:
ab:c5:db:cd:d4:cd:ed:8e:ea:84:d1:4e:30:ef:22:
a4:f8:af:c2:2e:5e:1a:3b:10:1e:fd:d2:8f:d1:a7:
0e:7f:b4:4a:e4:3b:b5:47:af:7d:d3:2f:bd:8b:d9:
26:3e:35:4f:45:5d:f8:f6:a9:98:d4:c4:90:90:b0:
65:fb:fe:07:64:90:2d:1a:b7:f0:c7:d5:49:d8:88:
45:be:4f:84:f5:6a:19:be:48:4d:51:43:6c:e1:24:
6e:5c:ca:ce:b7:c5:33:81:76:2e:be:10:56:0e:57:
a8:68:c0:19:cb:3e:9f:38:95:df:ea:a3:15:23:2a:
a1:30:02:33:f9:11:c7:cf:8d:21:35:a9:fc:aa:f6:
0c:e5:55:5a:20:84:a8:ab:f3:0d:81:e7:77:24:ee:
8d:cb:67:a8:11:19:b4:ab:45:c8:52:02:d2:be:56:
e1:ee:b8:fb:2a:0e:46:7f:ee:67:00:58:d4:82:7b:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:40:C8:62:F6:CE:72:5F:7E:39:EF:A9:54:B6:FA:80:70:A7:96
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6f:32:41:70:4f:91:61:17:50:7e:14:f1:19:07:5c:d1:a3:
cf:11:dc:7e:18:e7:71:60:c7:fd:81:e6:26:45:bc:ec:3b:79:
9b:08:07:21:42:3f:18:c9:71:55:64:28:a5:12:97:5f:d8:04:
2a:25:49:dd:3a:80:6f:25:46:7d:7a:5b:0e:72:54:aa:bb:37:
ee:fa:bb:c8:4f:c5:82:8f:40:97:ef:66:82:29:e8:23:d0:4a:
a2:ad:d4:ce:d1:b0:bb:1f:5d:52:f2:05:02:20:22:5e:16:a4:
dc:71:8b:7a:4a:a5:79:3b:7a:15:03:76:ed:49:1d:83:fc:45:
41:9a:11:e1:65:d8:74:be:00:10:fd:03:5c:3e:9b:6a:ff:f1:
d3:aa:df:a2:42:09:62:ad:9f:a7:18:c5:de:2b:64:5e:10:90:
fd:19:19:f1:9a:44:17:14:cb:18:45:4e:ad:59:66:02:2b:b3:
ef:75:fb:c6:38:71:62:22:28:bc:71:14:b0:c1:59:9f:2f:a8:
bc:f1:b3:d6:a0:03:dc:f6:3c:3b:bb:8a:95:3c:9e:5a:cc:ae:
8c:f9:c6:e8:92:ed:4a:b4:12:e3:9b:72:0d:4a:f1:96:c6:59:
de:18:4c:04:d2:f5:8e:2a:82:a1:b3:06:48:b7:3f:c6:20:77:
ea:d7:7d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvIwzGO6ZrIb6R9ywIBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTBlN2UzYzkxNzVlYjk4ZmY3ODE1ZDMwNzZmYjAyOTk2
YTczNGEwHhcNMjUwMTMxMTAwMTI5WhcNMjUwMjAxMTAwMTI5WjAzMTEwLwYDVQQD
EygxYzczNDBjODYyZjZjZTcyNWY3ZTM5ZWZhOTU0YjZmYTgwNzBhNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCybBvgZbr3a9CPhqNI1LpG4Jxv/
48+wPF0gEYyrgX/5teQVk3OIyclA2knOsmSmKmXDIpr7AJDd5m5FNw9oN2HEWYya
gNtl8hurxdvN1M3tjuqE0U4w7yKk+K/CLl4aOxAe/dKP0acOf7RK5Du1R6990y+9
i9kmPjVPRV349qmY1MSQkLBl+/4HZJAtGrfwx9VJ2IhFvk+E9WoZvkhNUUNs4SRu
XMrOt8UzgXYuvhBWDleoaMAZyz6fOJXf6qMVIyqhMAIz+RHHz40hNan8qvYM5VVa
IISoq/MNged3JO6Ny2eoERm0q0XIUgLSvlbh7rj7Kg5Gf+5nAFjUgns+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxzQMhi9s5yX34576lUtvqAcKeWMB8GA1UdIwQY
MBaAFIgQ5+PJF165j/eBXTB2+wKZanNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82Y2UwYjEtYzc3Ni00ZWZmLTgxYWMt
MmVlZGFjZTRhYWM5LzEvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82Y2UwYjEtYzc3Ni00ZWZmLTgxYWMtMmVlZGFjZTRhYWM5
LzEvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn28yQXBP
kWEXUH4U8RkHXNGjzxHcfhjncWDH/YHmJkW87Dt5mwgHIUI/GMlxVWQopRKXX9gE
KiVJ3TqAbyVGfXpbDnJUqrs37vq7yE/Fgo9Al+9mginoI9BKoq3UztGwux9dUvIF
AiAiXhak3HGLekqleTt6FQN27Ukdg/xFQZoR4WXYdL4AEP0DXD6bav/x06rfokIJ
Yq2fpxjF3itkXhCQ/RkZ8ZpEFxTLGEVOrVlmAiuz73X7xjhxYiIovHEUsMFZny+o
vPGz1qAD3PY8O7uKlTyeWsyujPnG6JLtSrQS45tyDUrxlsZZ3hhMBNL1jiqCobMG
SLc/xiB36td9Qw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:02:39 2025 by rpki-client