Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: dlPGdG3bEQtn2B9czQ7w/CsLUIq8OVKclr6MYIKp0bc=
Subject key identifier: AA:6F:47:D1:D6:32:BB:CC:22:4B:CD:29:63:16:00:77:A3:C1:60:D7
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 0194BCE0EB38B673034FC65A2F5519B34091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 05AE
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: l7c5depUvFOodWPgRkUXT9WT/wkel/jwZSnBDgKvw1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:38:b6:73:03:4f:c6:5a:2f:55:19:b3:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=aa6f47d1d632bbcc224bcd2963160077a3c160d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:eb:e7:1c:da:e3:56:ea:bf:1d:a6:e2:f7:
7a:24:ce:f1:54:cf:2c:13:6a:64:e6:15:cb:dc:a7:
80:0e:4b:e9:a8:ab:05:14:27:51:89:24:7f:6d:11:
94:7f:f0:cc:da:a2:32:e3:6e:04:8b:12:01:21:fd:
ef:99:b7:6c:52:f5:97:88:8c:82:3c:d0:38:84:87:
26:19:f4:ae:01:68:55:fe:92:98:bb:32:93:5c:be:
ba:50:9a:db:2b:ac:0e:01:07:63:7e:e2:57:5b:cb:
57:60:14:bc:99:06:c1:43:25:b8:1e:c6:8c:97:5b:
f8:88:18:63:3f:ca:00:6d:38:43:e8:a7:d1:72:e9:
2e:e8:80:ed:98:a2:45:bf:19:05:4e:9f:3c:69:8a:
57:64:2c:8b:90:9e:a1:f3:99:b7:be:2e:82:66:b8:
7b:f6:33:16:41:1f:d0:b3:53:c1:a0:a5:a0:cb:e9:
34:18:81:ad:ff:5b:57:27:1e:e1:e7:5e:0f:66:7c:
e6:ff:b9:5d:7d:7c:2b:a4:c3:68:b4:60:fc:ef:d1:
05:d2:ba:4d:1a:07:d0:c6:09:1c:a4:2f:d6:33:fc:
da:c5:c6:dd:31:e1:28:df:bf:3a:b9:8c:8c:31:a2:
6a:2f:82:e0:8d:ed:ed:2c:9c:d0:58:1d:2e:fa:f1:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6F:47:D1:D6:32:BB:CC:22:4B:CD:29:63:16:00:77:A3:C1:60:D7
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e4:f9:27:ca:4c:ed:41:ff:80:7a:30:84:ce:22:70:95:34:
97:a8:10:12:87:20:d0:63:12:b7:46:df:e2:6c:9d:31:96:3c:
46:fb:f7:ab:75:7f:3a:26:b3:91:04:f1:16:a5:4d:17:4e:bf:
d4:4b:0f:f2:ab:06:c1:47:60:8f:6a:72:d7:be:5c:75:34:17:
a5:1f:64:e3:1a:7b:96:bc:59:54:18:31:f9:c6:fd:20:66:08:
a5:e7:cc:04:48:cb:d8:c3:c7:e2:f0:4b:1b:c8:d7:0e:54:ca:
a0:3a:78:0a:6f:63:12:a4:d8:db:83:b5:c6:ea:b8:3d:2a:8d:
c6:e8:78:30:50:c1:8e:d1:7e:80:3d:9f:c8:3e:76:1c:2c:e4:
ab:f1:a6:ae:84:b8:ce:dc:72:7b:fa:6b:1c:c7:ca:67:fd:77:
c7:c8:c3:37:20:ce:22:24:bf:b3:5e:4e:4c:92:7d:9d:5c:bd:
12:06:92:67:5f:9d:26:43:25:d4:3e:66:a1:73:1c:9e:85:56:
fb:38:1d:b0:60:78:64:e5:4f:be:97:5b:a2:8c:d8:81:92:96:
9e:ad:2b:72:8b:4a:9a:35:17:6c:a8:27:80:46:0b:03:88:3d:
1d:f4:e0:35:52:c2:85:25:7d:c8:f5:ad:75:20:9b:8a:53:75:
74:64:4c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Os4tnMDT8ZaL1UZs0CRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjYwNmNlYTc5YjVhYmU4MTY4M2E2MzM3OWIzOTI4OWIy
Y2FiOTMwHhcNMjUwMTMxMTUwMDQ0WhcNMjUwMjAxMTUwMDQ0WjAzMTEwLwYDVQQD
EyhhYTZmNDdkMWQ2MzJiYmNjMjI0YmNkMjk2MzE2MDA3N2EzYzE2MGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssvr5xza41bqvx2m4vd6JM7xVM8s
E2pk5hXL3KeADkvpqKsFFCdRiSR/bRGUf/DM2qIy424EixIBIf3vmbdsUvWXiIyC
PNA4hIcmGfSuAWhV/pKYuzKTXL66UJrbK6wOAQdjfuJXW8tXYBS8mQbBQyW4HsaM
l1v4iBhjP8oAbThD6KfRcuku6IDtmKJFvxkFTp88aYpXZCyLkJ6h85m3vi6CZrh7
9jMWQR/Qs1PBoKWgy+k0GIGt/1tXJx7h514PZnzm/7ldfXwrpMNotGD879EF0rpN
GgfQxgkcpC/WM/zaxcbdMeEo3786uYyMMaJqL4Lgje3tLJzQWB0u+vFvZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpvR9HWMrvMIkvNKWMWAHejwWDXMB8GA1UdIwQY
MBaAFIq2Bs6nm1q+gWg6YzebOSibLKuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMt
ODg4YzA3ZjIxNTNmLzEvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMtODg4YzA3ZjIxNTNm
LzEvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeT5J8pM
7UH/gHowhM4icJU0l6gQEocg0GMSt0bf4mydMZY8Rvv3q3V/OiazkQTxFqVNF06/
1EsP8qsGwUdgj2py175cdTQXpR9k4xp7lrxZVBgx+cb9IGYIpefMBEjL2MPH4vBL
G8jXDlTKoDp4Cm9jEqTY24O1xuq4PSqNxuh4MFDBjtF+gD2fyD52HCzkq/GmroS4
ztxye/prHMfKZ/13x8jDNyDOIiS/s15OTJJ9nVy9EgaSZ1+dJkMl1D5moXMcnoVW
+zgdsGB4ZOVPvpdboozYgZKWnq0rcotKmjUXbKgngEYLA4g9HfTgNVLChSV9yPWt
dSCbilN1dGRMJA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:25 2025 by rpki-client