Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: 6llm4UKeqzhPoCU4zwnUb93k7+9Z6s9HKmSkeRUY6zY=
Subject key identifier: 98:E3:53:6A:B6:71:89:C6:46:A1:F9:C2:BF:0C:0D:56:C8:B5:E4:95
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 0194BCE0BB09103C2A712C472753BA46A635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0AA6
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: zsLXjoaI/8+KiDThv9wCai7e2xL1R/XKA1MRJONvA4M=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bb:09:10:3c:2a:71:2c:47:27:53:ba:46:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=98e3536ab67189c646a1f9c2bf0c0d56c8b5e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:9c:58:18:ba:6f:18:85:ca:40:73:e8:75:
7e:04:b3:c6:33:f9:e3:68:e1:1f:df:d1:8a:b6:ee:
d7:6b:14:fb:25:90:0b:88:3d:0d:f7:0b:fb:65:b8:
b0:fc:c1:7f:fd:26:a1:df:2e:41:3e:37:e8:6c:20:
2c:01:ea:a2:a1:a0:ac:48:4a:41:fd:4c:cc:00:3f:
d3:67:1d:da:80:0f:23:fc:07:5c:9c:13:dd:09:55:
86:67:4e:67:61:53:00:5e:72:be:cf:63:9d:7d:c1:
85:b2:b7:f2:92:a2:4c:2a:7c:bd:95:ca:3c:09:c2:
51:2e:8b:55:ef:8a:20:6c:e1:70:59:d4:94:10:22:
38:c5:5f:b9:06:28:42:ab:30:08:67:e7:ea:bf:8a:
34:d1:35:da:4e:67:d6:ea:80:0a:94:aa:58:f2:be:
5e:67:96:f8:33:0b:cc:2a:54:ba:86:04:89:ee:de:
bc:e5:b4:ed:50:75:ce:5b:b8:12:02:4c:9b:18:2c:
69:62:be:2c:20:d7:7e:8b:1d:9d:83:7c:ae:59:f8:
72:3f:15:80:de:f5:92:bd:3d:4b:9c:44:94:2a:d3:
07:bc:ff:f4:16:ca:cc:33:d1:96:5f:e0:f2:aa:8d:
00:c6:01:e7:21:42:ce:9c:d7:b9:1f:7e:30:29:99:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E3:53:6A:B6:71:89:C6:46:A1:F9:C2:BF:0C:0D:56:C8:B5:E4:95
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:64:1e:4e:cb:9a:bb:01:32:b8:b4:19:90:83:74:2c:59:ed:
7e:d8:70:26:e8:e2:22:47:99:2d:eb:80:46:10:58:69:af:c7:
36:2d:bf:92:3a:38:51:be:b6:be:04:97:be:af:3e:74:bf:c4:
4a:f5:6c:34:9c:26:20:87:b5:6c:d1:56:c1:0d:eb:9c:dc:c9:
fc:f0:3d:3a:55:1e:08:dc:bc:c4:6c:24:b7:e2:8d:99:37:a2:
aa:d5:7c:d8:cb:e6:28:2b:10:22:8a:bb:ad:31:33:ad:77:2f:
4f:18:d9:d6:cd:f2:ba:83:af:ee:dc:b5:93:7f:e2:df:97:43:
3f:f0:3e:b5:88:46:e9:2a:d8:d9:ec:bd:29:ab:73:94:6e:84:
0b:44:1c:7a:73:c8:3d:95:71:2a:f4:34:09:35:30:49:b3:f3:
35:9a:29:6f:2f:f3:89:91:15:81:8b:91:36:5e:31:f9:2d:3c:
59:57:63:b2:24:af:fb:c8:2f:6f:4d:6b:c1:60:ac:37:ab:b1:
c4:4d:26:95:5e:1d:4f:73:e5:d9:d1:c9:bd:63:db:66:54:52:
0a:b2:09:2e:2e:87:ed:78:ae:00:ed:b9:a2:0f:43:7a:75:fc:
8f:84:7a:fa:40:ca:f2:e0:53:8a:23:bf:68:d2:cb:06:fb:75:
dc:34:f0:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LsJEDwqcSxHJ1O6RqY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
Eyg5OGUzNTM2YWI2NzE4OWM2NDZhMWY5YzJiZjBjMGQ1NmM4YjVlNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFOcWBi6bxiFykBz6HV+BLPGM/nj
aOEf39GKtu7XaxT7JZALiD0N9wv7Zbiw/MF//Sah3y5BPjfobCAsAeqioaCsSEpB
/UzMAD/TZx3agA8j/AdcnBPdCVWGZ05nYVMAXnK+z2OdfcGFsrfykqJMKny9lco8
CcJRLotV74ogbOFwWdSUECI4xV+5BihCqzAIZ+fqv4o00TXaTmfW6oAKlKpY8r5e
Z5b4MwvMKlS6hgSJ7t685bTtUHXOW7gSAkybGCxpYr4sINd+ix2dg3yuWfhyPxWA
3vWSvT1LnESUKtMHvP/0FsrMM9GWX+Dyqo0AxgHnIULOnNe5H34wKZkhbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjjU2q2cYnGRqH5wr8MDVbIteSVMB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamQeTsua
uwEyuLQZkIN0LFntfthwJujiIkeZLeuARhBYaa/HNi2/kjo4Ub62vgSXvq8+dL/E
SvVsNJwmIIe1bNFWwQ3rnNzJ/PA9OlUeCNy8xGwkt+KNmTeiqtV82MvmKCsQIoq7
rTEzrXcvTxjZ1s3yuoOv7ty1k3/i35dDP/A+tYhG6SrY2ey9KatzlG6EC0QcenPI
PZVxKvQ0CTUwSbPzNZopby/ziZEVgYuRNl4x+S08WVdjsiSv+8gvb01rwWCsN6ux
xE0mlV4dT3Pl2dHJvWPbZlRSCrIJLi6H7XiuAO25og9DenX8j4R6+kDK8uBTiiO/
aNLLBvt13DTw3w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:29 2025 by rpki-client