Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: tz20/xT0V5QaJNoGmvj0qg1PNtdojSntkU4BdnKmUVU=
Subject key identifier: 8D:7B:B3:7F:66:1D:5B:62:F6:6A:DB:0A:40:A8:49:51:E3:62:00:81
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 0194BD85A998BE81E7DE618490D83DD62565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 0274
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: O9my8oOHCUSF8CpyQ/20X24H619iouUzeu4o1yLJjMw=)
2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a9:98:be:81:e7:de:61:84:90:d8:3d:d6:25:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=8d7bb37f661d5b62f66adb0a40a84951e3620081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:ab:70:1a:36:fd:be:bd:1f:a0:5a:ee:0e:
89:9b:62:d3:8e:77:f1:b5:39:bb:da:ff:e9:8b:78:
cd:70:d4:98:53:ea:fd:86:d9:e9:ec:b2:15:65:60:
ee:a3:c8:5d:c6:38:f3:38:59:82:67:6e:1c:f8:25:
16:83:7e:b8:f0:b3:f4:c7:92:49:f6:e4:08:cd:a0:
73:ec:68:9f:d5:c3:55:6c:77:8a:60:72:3f:b6:9a:
5d:44:66:64:1d:d3:ca:42:c7:29:c0:89:3f:78:01:
f0:d1:96:25:02:1f:b3:76:ef:a7:fc:47:2e:eb:3c:
88:96:a8:00:12:45:b8:d0:80:8c:0d:63:13:13:bd:
19:bd:f8:11:d4:77:d2:63:53:6d:c1:46:ce:2f:d0:
d3:ac:ba:d0:67:6c:6a:b9:43:d1:c2:7a:34:1a:a5:
49:03:ec:7a:1e:f9:01:7f:ea:08:ed:82:49:33:33:
08:ba:ca:ae:86:13:6d:c7:08:a7:91:8b:49:94:a6:
0e:60:16:58:6c:0d:7b:e5:c1:3a:65:46:cf:b6:73:
60:ce:82:54:7c:10:cf:a7:ef:f0:90:cc:58:e8:b1:
84:0b:24:ea:37:a5:92:5b:27:b7:59:30:b8:27:6c:
86:52:0a:61:0e:7e:da:5c:5d:5d:f9:a9:be:c6:80:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:B3:7F:66:1D:5B:62:F6:6A:DB:0A:40:A8:49:51:E3:62:00:81
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b0:1d:d6:53:1b:91:08:7f:ec:f9:d3:72:f8:ab:bc:7a:e0:
16:86:ea:a6:96:41:5d:1d:b1:48:6f:07:4e:c1:80:3d:55:66:
e4:f1:3d:3c:d7:79:9f:4e:cb:b1:35:e1:0f:04:79:89:47:c4:
94:ae:28:a1:06:69:15:6f:eb:63:0f:cc:b5:2b:a8:fc:20:02:
9a:fd:37:39:b9:4a:23:6a:2e:08:f4:e3:9f:bb:59:5e:78:56:
ea:94:de:07:de:a1:1a:69:5d:0c:bd:c1:11:f2:be:73:8a:0d:
bb:35:b9:6d:9d:30:22:c7:d8:ac:88:46:10:4f:7c:ce:b2:c1:
09:40:14:fb:48:b7:9e:47:69:2e:3a:3d:70:ad:87:ee:e1:6f:
5f:c7:41:de:c6:82:2b:b5:f4:d9:dc:03:3a:6d:d5:d2:0a:d5:
cb:2d:16:e6:aa:85:9b:79:c4:77:af:2b:b5:3a:db:3c:5a:e1:
79:14:56:16:d2:72:77:f0:87:f4:6c:f5:08:8c:84:b3:91:fc:
f3:a7:72:a9:93:55:86:38:e0:7e:db:8c:2e:b5:8c:1e:78:8c:
5e:04:74:62:e6:3c:08:8c:33:aa:cc:86:73:15:9e:13:33:3b:
ac:e9:c1:c1:70:27:68:97:8a:97:41:41:cd:cc:4d:b0:62:e6:
8b:21:85:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hamYvoHn3mGEkNg91iVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGRkNmMwNjE4YmJmZWZmMWE4NGM5NGZkNjQxODllMTg0
NWIxODgwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
Eyg4ZDdiYjM3ZjY2MWQ1YjYyZjY2YWRiMGE0MGE4NDk1MWUzNjIwMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UOrcBo2/b69H6Ba7g6Jm2LTjnfx
tTm72v/pi3jNcNSYU+r9htnp7LIVZWDuo8hdxjjzOFmCZ24c+CUWg3648LP0x5JJ
9uQIzaBz7Gif1cNVbHeKYHI/tppdRGZkHdPKQscpwIk/eAHw0ZYlAh+zdu+n/Ecu
6zyIlqgAEkW40ICMDWMTE70ZvfgR1HfSY1NtwUbOL9DTrLrQZ2xquUPRwno0GqVJ
A+x6HvkBf+oI7YJJMzMIusquhhNtxwinkYtJlKYOYBZYbA175cE6ZUbPtnNgzoJU
fBDPp+/wkMxY6LGECyTqN6WSWye3WTC4J2yGUgphDn7aXF1d+am+xoBlqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI17s39mHVti9mrbCkCoSVHjYgCBMB8GA1UdIwQY
MBaAFCGN1sBhi7/v8ahMlP1kGJ4YRbGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEt
OWJiNmJiMjgxZWE3LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEtOWJiNmJiMjgxZWE3
LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7Ad1lMb
kQh/7PnTcvirvHrgFobqppZBXR2xSG8HTsGAPVVm5PE9PNd5n07LsTXhDwR5iUfE
lK4ooQZpFW/rYw/MtSuo/CACmv03OblKI2ouCPTjn7tZXnhW6pTeB96hGmldDL3B
EfK+c4oNuzW5bZ0wIsfYrIhGEE98zrLBCUAU+0i3nkdpLjo9cK2H7uFvX8dB3saC
K7X02dwDOm3V0grVyy0W5qqFm3nEd68rtTrbPFrheRRWFtJyd/CH9Gz1CIyEs5H8
86dyqZNVhjjgftuMLrWMHniMXgR0YuY8CIwzqsyGcxWeEzM7rOnBwXAnaJeKl0FB
zcxNsGLmiyGFtA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:24 2025 by rpki-client