Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: eQvd0kBGKbVQVIftcALZyC5latAbrIVlfcMTt+JILQY=
Subject key identifier: FA:AE:E7:29:B3:A0:0B:FD:B8:C3:7F:E8:9F:7A:DC:87:7A:D8:9F:A2
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 0194BBCE76CDECC7F19CA4E34F7D19B7FF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 0DF9
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: X0aR2iEAsqrwLyS0+uf8D8VivBYLXTIk4rrI9Z2ohjU=)
2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:76:cd:ec:c7:f1:9c:a4:e3:4f:7d:19:b7:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=faaee729b3a00bfdb8c37fe89f7adc877ad89fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:d9:cf:cb:93:d1:63:7e:f9:2d:c2:01:c0:87:
d9:39:17:79:79:59:d1:42:94:28:f4:99:cd:d8:cf:
eb:72:b6:40:9e:b4:a3:42:46:61:aa:fc:93:08:b6:
55:00:27:51:5a:d6:0d:b1:a2:c4:b7:32:8b:02:0c:
41:29:38:2c:59:4c:6a:f1:80:18:22:04:c9:c5:d8:
1e:5b:82:29:4b:7a:ff:54:0e:c6:a7:62:42:e0:c0:
a0:81:4c:cd:11:d0:e5:36:1c:94:34:1d:ea:66:c2:
e5:81:28:76:29:d3:95:37:59:ec:bd:86:e7:e3:6b:
20:65:15:aa:c1:16:f0:0e:2e:1f:bc:b7:f6:60:01:
18:b1:f3:c5:cf:17:e9:58:94:19:77:77:b8:47:a2:
67:f0:73:e6:f1:c9:3d:91:64:c1:6f:c3:46:96:60:
66:89:d1:d5:bc:97:1e:b7:f7:b2:e9:d7:d0:3b:c0:
40:4a:34:b2:26:a8:c9:35:82:05:fa:e8:a1:61:25:
72:63:6e:e9:a1:dd:97:91:6f:57:4e:d6:7d:21:2e:
a4:bd:83:4e:df:57:d4:c7:e1:e9:2b:b6:2e:fc:22:
7b:9c:2c:48:60:ba:4b:16:63:53:ba:43:7b:0a:d9:
63:45:7b:90:4d:fc:d5:5a:6c:2e:2b:79:85:3b:23:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:E7:29:B3:A0:0B:FD:B8:C3:7F:E8:9F:7A:DC:87:7A:D8:9F:A2
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8f:2a:b5:58:55:02:0b:77:4c:8d:b0:af:60:e8:fb:25:68:
44:10:7a:9c:a1:41:df:8f:9b:09:3b:b0:9a:e6:55:a9:ac:b0:
89:0b:b4:3b:1a:65:62:d3:6e:3a:35:bf:39:ad:0e:42:0c:19:
1c:51:72:b1:7a:9e:c6:91:c3:93:36:aa:bb:66:e1:a2:32:fb:
e1:79:27:02:8f:dc:95:f5:ed:e8:e3:03:15:d4:09:c1:92:a3:
b8:57:57:1f:32:97:83:6b:f5:99:52:8c:f5:2a:2b:c1:2a:17:
a6:6f:46:b3:09:54:9f:13:0b:e6:e7:24:6e:be:b1:83:5d:eb:
c3:a8:97:41:86:54:ac:69:39:ab:8a:2d:95:1c:81:b1:e2:19:
1d:85:de:73:5e:22:7f:f0:03:54:7b:0a:04:d8:91:cf:eb:bb:
c7:c0:62:bb:e8:86:16:d8:f8:7c:cd:14:f9:ef:e6:1e:32:5f:
47:c5:48:84:64:4c:e0:36:0f:2c:3d:41:e4:5d:1b:2c:1a:18:
d4:61:69:07:e5:1a:27:3d:7e:cd:2f:6c:5e:c4:8c:0c:0e:ca:
40:c2:c1:f6:f8:69:13:3b:b8:fb:d1:1c:f6:91:f2:a6:42:39:
43:3e:a1:65:01:c0:04:df:b3:aa:1a:71:b1:52:95:bb:d3:e0:
67:76:41:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znbN7MfxnKTjT30Zt/9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0
ODdmOGQwHhcNMjUwMTMxMTAwMDU3WhcNMjUwMjAxMTAwMDU3WjAzMTEwLwYDVQQD
EyhmYWFlZTcyOWIzYTAwYmZkYjhjMzdmZTg5ZjdhZGM4NzdhZDg5ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/tnPy5PRY375LcIBwIfZORd5eVnR
QpQo9JnN2M/rcrZAnrSjQkZhqvyTCLZVACdRWtYNsaLEtzKLAgxBKTgsWUxq8YAY
IgTJxdgeW4IpS3r/VA7Gp2JC4MCggUzNEdDlNhyUNB3qZsLlgSh2KdOVN1nsvYbn
42sgZRWqwRbwDi4fvLf2YAEYsfPFzxfpWJQZd3e4R6Jn8HPm8ck9kWTBb8NGlmBm
idHVvJcet/ey6dfQO8BASjSyJqjJNYIF+uihYSVyY27pod2XkW9XTtZ9IS6kvYNO
31fUx+HpK7Yu/CJ7nCxIYLpLFmNTukN7CtljRXuQTfzVWmwuK3mFOyM0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqu5ymzoAv9uMN/6J963Id62J+iMB8GA1UdIwQY
MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt
YTgyODM2ZGUwNWZjLzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj
LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY8qtVhV
Agt3TI2wr2Do+yVoRBB6nKFB34+bCTuwmuZVqaywiQu0OxplYtNuOjW/Oa0OQgwZ
HFFysXqexpHDkzaqu2bhojL74XknAo/clfXt6OMDFdQJwZKjuFdXHzKXg2v1mVKM
9SorwSoXpm9GswlUnxML5uckbr6xg13rw6iXQYZUrGk5q4otlRyBseIZHYXec14i
f/ADVHsKBNiRz+u7x8Biu+iGFtj4fM0U+e/mHjJfR8VIhGRM4DYPLD1B5F0bLBoY
1GFpB+UaJz1+zS9sXsSMDA7KQMLB9vhpEzu4+9Ec9pHypkI5Qz6hZQHABN+zqhpx
sVKVu9PgZ3ZBZw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:13 2025 by rpki-client