Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: SEASSwrGo+bpjt1YPKgN8i9TeOW83BmsSjbNNaPcXYM=
Subject key identifier: CD:5A:C2:17:7F:82:1A:8D:24:44:B5:F2:30:0E:08:42:C4:9E:3D:09
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 0194BCE08C163AF6D7685FD4162247439237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: g5xcnrcUhS7ziNEEsz/aVEpoPc5rZyv/kwf0YQpS41E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8c:16:3a:f6:d7:68:5f:d4:16:22:47:43:92:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=cd5ac2177f821a8d2444b5f2300e0842c49e3d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:06:65:23:58:87:07:ba:28:93:01:8f:9b:
ae:ba:9f:a6:5f:d8:dd:35:97:53:57:9f:f9:bd:6d:
6b:be:dc:92:82:fe:64:78:12:1b:42:ad:b1:e6:a0:
2b:d6:8c:46:b7:96:75:5a:6f:00:b5:a1:b2:85:fb:
d3:57:fe:59:7e:1d:de:69:02:d8:d4:c2:93:cf:89:
3a:ea:88:da:95:76:0c:1e:49:c0:e4:56:7f:1f:16:
23:93:0a:ab:77:e7:04:0a:75:b7:c0:32:46:92:26:
76:9c:a5:b9:fd:d9:2b:9a:7a:22:63:d4:99:1e:e0:
75:ca:de:1a:30:f6:29:c3:bb:9d:3a:05:f6:45:27:
c9:d6:1a:c0:d0:bf:d9:0f:de:8b:08:14:f8:31:66:
29:4d:0f:2e:b7:66:b2:42:8d:30:a2:d7:e9:f8:4e:
82:0a:ad:38:b7:6a:3c:28:3f:81:59:9f:17:f4:be:
3d:9c:b0:b8:ff:9b:a9:40:fe:3d:6a:5f:29:c1:ae:
b4:e9:1f:ee:04:99:e6:11:cf:ab:a7:d5:16:4a:22:
b2:25:55:1d:70:1f:ff:fa:74:73:55:41:da:a6:2b:
05:19:f0:88:71:0d:67:27:c2:56:5f:d5:8b:ea:5c:
41:9b:86:31:99:18:65:b1:e5:06:e6:bc:89:6e:e9:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:C2:17:7F:82:1A:8D:24:44:B5:F2:30:0E:08:42:C4:9E:3D:09
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:10:6d:c1:30:39:7b:f8:de:f9:54:0b:09:77:e9:8e:7a:67:
39:59:f6:53:08:bf:76:e0:13:89:67:6e:ad:2e:78:6a:17:ee:
da:97:b2:9a:3b:34:4f:c5:cb:f7:fa:6c:3c:c0:89:ce:a0:42:
83:56:6e:9b:d9:66:36:d8:85:65:78:33:28:79:75:18:f3:6c:
c5:6f:b4:3f:2d:33:00:b6:1e:81:2d:17:2c:c2:60:7e:a9:71:
44:4c:70:11:00:04:a4:b4:2e:27:a9:40:16:80:ca:e2:96:ef:
69:07:55:42:55:90:0c:eb:c6:61:04:94:e7:f4:1b:06:17:43:
f4:7c:fc:8e:31:c0:96:f1:ec:1f:55:59:ce:c2:a3:46:62:e3:
02:84:92:cd:dc:70:bd:10:cc:b7:6d:21:b9:0f:42:01:09:35:
2f:16:2b:a1:f9:5b:1c:49:01:4a:09:6f:85:a5:a1:d0:31:fb:
f4:6d:d2:c8:71:4f:bf:d4:82:7a:73:aa:df:d3:52:b1:77:c6:
17:8f:93:6e:fb:d0:66:a4:b2:58:e7:d1:23:3d:83:e8:d1:21:
fc:50:5f:58:59:c1:fa:01:f5:7d:29:75:4c:57:3d:61:79:fe:
44:a3:24:27:66:ef:ab:9b:c1:e6:37:c7:7d:3d:92:56:73:fa:
8c:0b:90:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IwWOvbXaF/UFiJHQ5I3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTUyYTg2ZTMxYjY5ZTVkNTMyMGVkZTgxZDM0YmIxMjhh
NDVjZWUwHhcNMjUwMTMxMTUwMDIwWhcNMjUwMjAxMTUwMDIwWjAzMTEwLwYDVQQD
EyhjZDVhYzIxNzdmODIxYThkMjQ0NGI1ZjIzMDBlMDg0MmM0OWUzZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy4GZSNYhwe6KJMBj5uuup+mX9jd
NZdTV5/5vW1rvtySgv5keBIbQq2x5qAr1oxGt5Z1Wm8AtaGyhfvTV/5Zfh3eaQLY
1MKTz4k66ojalXYMHknA5FZ/HxYjkwqrd+cECnW3wDJGkiZ2nKW5/dkrmnoiY9SZ
HuB1yt4aMPYpw7udOgX2RSfJ1hrA0L/ZD96LCBT4MWYpTQ8ut2ayQo0wotfp+E6C
Cq04t2o8KD+BWZ8X9L49nLC4/5upQP49al8pwa606R/uBJnmEc+rp9UWSiKyJVUd
cB//+nRzVUHapisFGfCIcQ1nJ8JWX9WL6lxBm4YxmRhlseUG5ryJbuns1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1awhd/ghqNJES18jAOCELEnj0JMB8GA1UdIwQY
MBaAFIpVKobjG2nl1TIO3oHTS7EopFzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQt
NzhhMTI2YmYwYWRjLzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQtNzhhMTI2YmYwYWRj
LzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBBtwTA5
e/je+VQLCXfpjnpnOVn2Uwi/duATiWdurS54ahfu2peymjs0T8XL9/psPMCJzqBC
g1Zum9lmNtiFZXgzKHl1GPNsxW+0Py0zALYegS0XLMJgfqlxRExwEQAEpLQuJ6lA
FoDK4pbvaQdVQlWQDOvGYQSU5/QbBhdD9Hz8jjHAlvHsH1VZzsKjRmLjAoSSzdxw
vRDMt20huQ9CAQk1LxYroflbHEkBSglvhaWh0DH79G3SyHFPv9SCenOq39NSsXfG
F4+TbvvQZqSyWOfRIz2D6NEh/FBfWFnB+gH1fSl1TFc9YXn+RKMkJ2bvq5vB5jfH
fT2SVnP6jAuQKA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:36 2025 by rpki-client