Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: p7LmROENvT6/xE0stX3Z5xmN6aG6qFGYcyNy2x29lnE=
Subject key identifier: B5:E3:05:71:21:D1:99:60:1E:C6:6D:8E:86:E6:09:F1:46:E4:23:A1
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 0194BC052E4D1DE9A3A9D6CB20D02C4407A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0754
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: u+MOv2MUfGs+nA7JIs1g3CdOoxrxPe+1KmbHGnDfhys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2e:4d:1d:e9:a3:a9:d6:cb:20:d0:2c:44:07:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=b5e3057121d199601ec66d8e86e609f146e423a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:f3:a7:f3:4b:71:e8:54:ec:86:8b:eb:77:
3a:ff:5e:1c:8a:7f:9a:76:e7:f4:60:df:2b:df:6b:
c9:1a:7c:a3:0f:13:81:4e:2c:46:db:7c:06:5d:d7:
a3:89:ce:34:1c:df:cf:7a:34:91:21:55:64:cc:b8:
10:b4:37:72:36:7c:b0:83:5c:f8:e5:88:a7:3b:26:
71:b2:68:ef:80:b3:5e:ee:7b:67:1e:b3:d8:7e:d5:
c2:27:04:d3:72:bf:4f:26:8d:fc:82:ad:12:19:64:
23:c5:6f:35:12:7b:89:4e:22:c0:c8:07:62:d9:25:
61:80:3c:47:af:ea:b3:1a:bb:44:8b:00:db:9f:76:
80:a6:28:ab:d8:8c:c0:89:3b:d3:96:7d:65:f4:fb:
ea:5d:a0:56:0d:5a:b4:2d:9e:b8:c1:b2:a1:83:24:
43:94:26:d0:d0:fc:c1:7a:5c:94:72:93:ef:6e:5a:
68:fe:8c:73:bb:49:81:3d:94:9b:a9:62:bd:8d:24:
78:12:cf:23:3f:95:a2:b5:32:64:62:fc:03:f9:f8:
ef:24:61:51:45:2d:e0:ee:4f:0e:a8:0a:21:64:46:
91:c1:73:fa:01:75:a5:e2:6f:e8:23:45:56:b5:64:
74:60:f5:b7:ca:b0:fe:97:c8:c9:db:67:5d:64:79:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:05:71:21:D1:99:60:1E:C6:6D:8E:86:E6:09:F1:46:E4:23:A1
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7e:65:df:17:9e:18:33:41:8f:63:82:d0:48:fb:af:9e:21:
e1:1c:2d:b9:5e:d6:48:c1:a3:11:06:86:30:56:47:69:af:bc:
9a:6f:8f:d7:c3:c2:7b:47:26:dc:ed:18:d4:dd:a4:7e:f0:8c:
9a:07:96:90:04:ca:39:c8:6d:ae:01:2e:d2:e9:e8:15:dc:7d:
c6:ef:4c:38:c8:51:56:72:38:03:9b:68:d6:bd:54:24:d9:09:
03:eb:c0:f6:de:9b:5f:ae:6f:81:fb:a1:9c:87:23:de:e6:9c:
57:ce:d7:92:bc:d2:63:c2:0c:c8:f9:54:95:5f:df:2d:49:da:
e0:52:85:95:b1:87:04:23:25:99:79:24:bd:1b:3d:3a:40:55:
73:af:1f:21:e3:b7:b8:7c:88:cf:77:55:e9:9a:83:f8:3f:a6:
c3:a8:57:03:fe:02:5c:06:b9:91:82:45:42:cf:d7:fd:75:d3:
fd:fe:33:24:c3:3c:16:d6:c5:35:c1:4b:3b:95:e8:60:5f:b4:
c5:23:8c:c9:e7:28:e3:e9:73:89:d4:28:c3:64:ef:7f:7e:12:
5f:a9:11:45:3c:b8:e0:fe:79:f5:0a:4c:3f:91:21:67:c1:c5:
09:48:fc:19:a5:70:2f:ec:7b:38:76:c3:a5:28:58:49:b0:22:
55:0f:32:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BS5NHemjqdbLINAsRAemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjUwMTMxMTEwMDQzWhcNMjUwMjAxMTEwMDQzWjAzMTEwLwYDVQQD
EyhiNWUzMDU3MTIxZDE5OTYwMWVjNjZkOGU4NmU2MDlmMTQ2ZTQyM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvozzp/NLcehU7IaL63c6/14cin+a
duf0YN8r32vJGnyjDxOBTixG23wGXdejic40HN/PejSRIVVkzLgQtDdyNnywg1z4
5YinOyZxsmjvgLNe7ntnHrPYftXCJwTTcr9PJo38gq0SGWQjxW81EnuJTiLAyAdi
2SVhgDxHr+qzGrtEiwDbn3aApiir2IzAiTvTln1l9PvqXaBWDVq0LZ64wbKhgyRD
lCbQ0PzBelyUcpPvblpo/oxzu0mBPZSbqWK9jSR4Es8jP5WitTJkYvwD+fjvJGFR
RS3g7k8OqAohZEaRwXP6AXWl4m/oI0VWtWR0YPW3yrD+l8jJ22ddZHnZ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXjBXEh0ZlgHsZtjobmCfFG5COhMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn35l3xee
GDNBj2OC0Ej7r54h4RwtuV7WSMGjEQaGMFZHaa+8mm+P18PCe0cm3O0Y1N2kfvCM
mgeWkATKOchtrgEu0unoFdx9xu9MOMhRVnI4A5to1r1UJNkJA+vA9t6bX65vgfuh
nIcj3uacV87XkrzSY8IMyPlUlV/fLUna4FKFlbGHBCMlmXkkvRs9OkBVc68fIeO3
uHyIz3dV6ZqD+D+mw6hXA/4CXAa5kYJFQs/X/XXT/f4zJMM8FtbFNcFLO5XoYF+0
xSOMyeco4+lzidQow2Tvf34SX6kRRTy44P559QpMP5EhZ8HFCUj8GaVwL+x7OHbD
pShYSbAiVQ8ySQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:00 2025 by rpki-client