Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: WYDCwrYE6JQlXDA2yqJaLZ186mhSfk14nP6uAYu/9C0=
Subject key identifier: 51:E0:06:2C:22:4D:89:A1:72:0C:DC:59:45:CF:C9:AE:88:B7:8C:E3
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 0194BC0507FD7B0180C3981EA31D86E6E4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 10F1
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: 1EijJdhja4ySsMhfWLZcdrtOhU44kCFq9prlUHhRju8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:07:fd:7b:01:80:c3:98:1e:a3:1d:86:e6:e4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=51e0062c224d89a1720cdc5945cfc9ae88b78ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:ed:56:dd:9b:7d:03:02:b8:84:b3:4b:e9:
c1:0f:cd:72:7d:de:52:30:e9:6f:89:85:da:bb:e8:
98:cd:0f:d8:db:54:8a:24:c0:71:22:7f:35:83:ae:
ae:50:ad:26:d9:bd:bb:f4:35:27:17:04:53:8d:8b:
cb:f8:a9:93:ea:8b:9b:9e:d0:5c:cd:ea:1a:30:8a:
e7:7e:c3:14:c7:e2:cf:31:0b:f5:75:be:83:7b:e4:
7a:b4:2f:97:c4:0f:9a:37:dd:32:5e:72:2c:ef:09:
a8:2b:39:20:3a:90:fc:ac:53:b4:2e:1d:54:b1:09:
97:f4:6c:d3:b0:a5:3f:f4:85:36:e0:74:16:65:33:
ce:03:3a:3a:51:88:de:3a:04:ba:92:83:b1:57:9e:
22:d5:ff:cf:0e:12:75:9e:be:67:7b:19:29:b9:59:
0f:7d:ac:5e:2f:94:87:95:1a:9c:a3:3d:0b:2c:36:
24:e1:66:fb:22:3b:4b:0b:8b:f3:1d:d4:55:d3:86:
9f:e6:5a:e9:3c:c8:3c:e4:32:eb:37:f0:c1:09:22:
a7:6e:7b:23:26:8f:57:bf:08:aa:29:14:a7:55:f7:
24:76:22:c8:22:bc:b5:6e:42:97:d2:cb:e8:62:d2:
b0:01:fe:e9:ea:e7:d3:c5:92:ce:eb:e9:7a:91:4c:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:06:2C:22:4D:89:A1:72:0C:DC:59:45:CF:C9:AE:88:B7:8C:E3
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3d:7e:ba:7b:1c:61:5b:86:ce:74:a0:b9:b1:84:1f:80:c3:
30:e9:b9:0d:d4:3b:00:61:88:a7:6c:e4:31:ef:9e:df:1e:d4:
76:66:f1:76:e4:46:44:6f:68:43:49:95:7e:26:3e:47:64:ca:
b6:01:b0:53:8d:2e:23:53:d6:cd:b6:17:5f:c2:39:02:92:8f:
cc:a0:d4:26:36:ed:65:1a:76:8b:23:4a:a8:fb:b4:0a:bb:37:
ff:e6:ee:58:8a:9f:6f:e5:72:26:d9:e8:c7:74:e3:08:78:e2:
24:3f:f9:78:f0:8a:dd:77:a5:9e:66:ce:a5:cb:fa:fb:af:46:
ba:15:45:06:e1:ad:d0:6e:46:01:13:53:d4:43:69:35:2c:8b:
fd:ca:ff:30:6e:e9:ed:1b:91:ef:14:d4:a2:2e:e3:88:37:89:
63:5d:12:db:e0:e1:1b:33:8d:1a:9d:a9:fe:ca:36:6d:7b:37:
56:db:34:35:59:52:4b:3d:ae:99:ae:f0:ea:9f:c9:b7:92:1e:
6b:37:4f:e4:b4:aa:ce:fa:10:d8:4a:52:86:50:01:40:96:bc:
0b:c1:7a:f5:dc:73:a5:2f:0e:95:d6:3c:16:3b:3b:10:5e:e3:
4f:fd:a0:60:65:92:54:32:9d:58:3d:b5:fc:7a:9c:12:f2:1f:
4a:01:c2:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQf9ewGAw5geox2G5uTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy
NjhlZDcwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
Eyg1MWUwMDYyYzIyNGQ4OWExNzIwY2RjNTk0NWNmYzlhZTg4Yjc4Y2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGPtVt2bfQMCuISzS+nBD81yfd5S
MOlviYXau+iYzQ/Y21SKJMBxIn81g66uUK0m2b279DUnFwRTjYvL+KmT6oubntBc
zeoaMIrnfsMUx+LPMQv1db6De+R6tC+XxA+aN90yXnIs7wmoKzkgOpD8rFO0Lh1U
sQmX9GzTsKU/9IU24HQWZTPOAzo6UYjeOgS6koOxV54i1f/PDhJ1nr5nexkpuVkP
faxeL5SHlRqcoz0LLDYk4Wb7IjtLC4vzHdRV04af5lrpPMg85DLrN/DBCSKnbnsj
Jo9XvwiqKRSnVfckdiLIIry1bkKX0svoYtKwAf7p6ufTxZLO6+l6kUwqmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHgBiwiTYmhcgzcWUXPya6It4zjMB8GA1UdIwQY
MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct
ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk
LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADj1+unsc
YVuGznSgubGEH4DDMOm5DdQ7AGGIp2zkMe+e3x7UdmbxduRGRG9oQ0mVfiY+R2TK
tgGwU40uI1PWzbYXX8I5ApKPzKDUJjbtZRp2iyNKqPu0Crs3/+buWIqfb+VyJtno
x3TjCHjiJD/5ePCK3XelnmbOpcv6+69GuhVFBuGt0G5GARNT1ENpNSyL/cr/MG7p
7RuR7xTUoi7jiDeJY10S2+DhGzONGp2p/so2bXs3Vts0NVlSSz2uma7w6p/Jt5Ie
azdP5LSqzvoQ2EpShlABQJa8C8F69dxzpS8OldY8Fjs7EF7jT/2gYGWSVDKdWD21
/HqcEvIfSgHCzg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:45 2025 by rpki-client