Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: Wy6zlnNLuvlF6JjFRpUjrdW4R9IPyt0BM99lifTnATs=
Subject key identifier: 6D:F3:8E:30:19:BC:E0:AE:72:82:66:63:81:83:BD:12:BD:00:31:4A
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 0194BC3C94DA347DB03275AFE6E08CEA70F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: sV/UrFsWJD3kSRrs9UT91tWnXmaU3ascQj0Kb+6GTlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:da:34:7d:b0:32:75:af:e6:e0:8c:ea:70:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=6df38e3019bce0ae728266638183bd12bd00314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:53:9f:87:c5:88:8f:95:41:5c:51:0c:aa:
49:6c:3b:47:3e:eb:d3:b8:ff:9f:3e:72:f3:a2:11:
2c:34:4b:95:c4:2e:ba:cf:48:a8:ec:8e:fb:69:78:
8e:cd:89:c6:63:d3:ba:5c:7b:f4:1d:40:e0:f7:42:
c5:b6:42:14:05:b7:b2:10:52:63:d5:a0:34:0d:41:
bd:44:f4:a5:62:79:81:d4:ad:ee:62:33:ca:3f:0e:
d1:32:ca:50:0c:9b:20:c5:66:66:57:6d:62:d3:6f:
67:82:a4:66:7f:51:e5:a6:b5:b7:1c:39:f0:18:d3:
f9:91:d1:74:b7:36:d7:44:3e:1c:c2:82:98:24:bf:
26:89:91:bf:ec:fa:c0:e0:fe:3d:2a:c9:88:8b:59:
92:24:19:dd:dc:07:9d:88:5a:dc:6b:91:0d:c1:8d:
cf:19:e0:f2:16:f7:88:bf:f3:e2:cb:a2:c0:9e:44:
a0:a9:a7:fc:53:ee:db:f8:97:25:5a:df:cf:2e:f7:
5d:10:f9:99:db:81:af:54:dd:3c:08:0f:27:5b:14:
8a:0b:b7:b1:b2:13:e3:0c:1b:0b:d6:06:f3:f1:89:
a5:4a:ec:88:85:92:60:c8:ed:8c:3d:3b:8b:ec:f5:
3f:43:37:09:f7:08:22:90:7f:d4:60:ec:a3:b1:3a:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F3:8E:30:19:BC:E0:AE:72:82:66:63:81:83:BD:12:BD:00:31:4A
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e6:0f:fc:3c:17:e6:b7:61:5c:5b:28:40:8a:d9:f2:b7:d9:
96:f0:d0:58:18:23:22:2c:4c:ca:b8:bc:90:09:9e:30:09:fa:
0f:f6:e0:b0:37:6e:27:56:b5:7b:7c:3e:c0:a2:60:88:76:b6:
37:8f:f3:70:4c:83:74:1c:75:5a:80:08:c7:fe:31:88:7a:7a:
77:89:d8:be:3a:00:ff:79:a9:e5:f9:a3:b0:5c:5e:54:db:4a:
9e:f1:b5:58:57:9f:ec:9f:1d:2b:14:69:5e:58:dd:29:f2:c9:
7f:f2:a1:ae:f7:27:2a:cd:92:4c:7f:e2:89:9b:90:37:60:57:
55:e1:3f:d8:3a:34:7f:d3:6e:96:6a:29:51:36:38:ec:db:32:
e1:85:63:49:06:40:ab:4d:52:30:0d:f7:d9:35:69:c7:87:e4:
21:5c:71:fd:b2:99:b7:25:f8:7c:60:2b:97:6e:58:39:82:6e:
99:88:7c:e7:89:db:dc:d8:96:4a:55:c9:78:8e:57:3a:73:d4:
bc:71:53:b5:46:eb:9b:b3:d0:d0:f5:df:65:b5:3f:64:2a:46:
25:a0:c0:f1:96:8e:bb:34:ee:dc:20:d6:53:81:16:dd:73:f6:
83:d9:61:9a:d3:38:4e:99:e8:4f:45:22:78:b1:d9:af:d5:af:
d1:b6:f4:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJTaNH2wMnWv5uCM6nD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5N2RhNjAwMWIxMjM4MzA2OGZlNzFhMzBmOGNmMjg1YzY2
ODMwZmUwHhcNMjUwMTMxMTIwMTE0WhcNMjUwMjAxMTIwMTE0WjAzMTEwLwYDVQQD
Eyg2ZGYzOGUzMDE5YmNlMGFlNzI4MjY2NjM4MTgzYmQxMmJkMDAzMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfBTn4fFiI+VQVxRDKpJbDtHPuvT
uP+fPnLzohEsNEuVxC66z0io7I77aXiOzYnGY9O6XHv0HUDg90LFtkIUBbeyEFJj
1aA0DUG9RPSlYnmB1K3uYjPKPw7RMspQDJsgxWZmV21i029ngqRmf1HlprW3HDnw
GNP5kdF0tzbXRD4cwoKYJL8miZG/7PrA4P49KsmIi1mSJBnd3AediFrca5ENwY3P
GeDyFveIv/Piy6LAnkSgqaf8U+7b+JclWt/PLvddEPmZ24GvVN08CA8nWxSKC7ex
shPjDBsL1gbz8YmlSuyIhZJgyO2MPTuL7PU/QzcJ9wgikH/UYOyjsTpaoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3zjjAZvOCucoJmY4GDvRK9ADFKMB8GA1UdIwQY
MBaAFIl9pgAbEjgwaP5xow+M8oXGaDD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzkt
ODRmYWFmMTA1YTk3LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzktODRmYWFmMTA1YTk3
LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+YP/DwX
5rdhXFsoQIrZ8rfZlvDQWBgjIixMyri8kAmeMAn6D/bgsDduJ1a1e3w+wKJgiHa2
N4/zcEyDdBx1WoAIx/4xiHp6d4nYvjoA/3mp5fmjsFxeVNtKnvG1WFef7J8dKxRp
XljdKfLJf/KhrvcnKs2STH/iiZuQN2BXVeE/2Do0f9NulmopUTY47Nsy4YVjSQZA
q01SMA332TVpx4fkIVxx/bKZtyX4fGArl25YOYJumYh854nb3NiWSlXJeI5XOnPU
vHFTtUbrm7PQ0PXfZbU/ZCpGJaDA8ZaOuzTu3CDWU4EW3XP2g9lhmtM4TpnoT0Ui
eLHZr9Wv0bb0+A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:34 2025 by rpki-client