Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
File: IuKOVQMUE4-dg6KLLWZum4dEtRA.mft (raw, json)
Hash identifier: fJyhx9QoGz2rmhnZsFMj/1JkGS08HL77gh+PWMML0sA=
Subject key identifier: D1:DA:B6:6A:78:79:AF:A2:4A:A7:D2:28:5C:62:4C:2A:48:C0:7D:A7
Authority key identifier: 22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
Certificate issuer: /CN=22e28e550314138f9d83a28b2d666e9b8744b510
Certificate serial: 0194BD4E84D30ED3ED0AF2EA81E65E566C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: IuKOVQMUE4-dg6KLLWZum4dEtRA.crl (hash: rCQw4OqlMyDcGVy7tYP0AqONhnokxYaHU+FXILzY5a8=)
2: cFbXH5gO6qs06Nq1Ek6wrTAvxB0.roa (hash: c0tlMuDM/vPMybXrB0sIatVwyL/aO7RZmUvD1wZIObw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:d3:0e:d3:ed:0a:f2:ea:81:e6:5e:56:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e28e550314138f9d83a28b2d666e9b8744b510
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=d1dab66a7879afa24aa7d2285c624c2a48c07da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:5a:f2:ac:be:e4:af:67:58:07:b4:05:c5:
9f:43:86:12:82:5b:2c:61:c7:55:b9:af:48:bd:2a:
15:7b:3b:45:bf:1f:eb:0c:11:46:1e:02:22:be:37:
a5:e2:12:be:e2:51:b5:63:ec:44:46:7b:fb:f1:e6:
3c:6b:14:e3:aa:ee:35:4c:7a:34:44:24:70:a4:75:
8c:05:72:49:e9:85:06:f5:b0:1b:41:a2:04:85:d0:
7e:98:d4:4b:5f:1c:cb:26:7d:d4:7b:27:b0:db:97:
60:00:01:fc:c5:a4:56:af:4d:ee:f0:c4:db:c1:64:
9f:e6:5d:ab:51:61:c2:d2:f1:b1:78:89:28:f1:1c:
0e:fb:3c:5e:70:6d:34:df:8a:dc:b9:1d:89:c5:13:
bc:9d:cc:58:89:e5:b5:d5:c6:88:e3:9d:0c:86:3b:
7f:35:d4:78:1c:73:97:59:80:c9:80:72:38:4a:a9:
d4:f9:ca:f3:2d:b5:76:3d:b4:2b:ed:da:4e:94:f1:
7d:a9:e9:1e:65:ff:a1:4f:e0:cd:de:7b:71:1e:83:
d2:04:38:7d:41:db:6d:5e:cd:93:6f:fd:3c:1e:59:
a8:8d:80:02:c4:2b:d2:aa:65:0e:ad:44:36:6e:c1:
6b:c9:48:0b:43:53:2e:db:13:d7:a9:1f:d0:fa:e2:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:B6:6A:78:79:AF:A2:4A:A7:D2:28:5C:62:4C:2A:48:C0:7D:A7
X509v3 Authority Key Identifier:
keyid:22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f7:4b:42:85:b4:d0:36:9a:e3:3d:8a:4e:a5:26:57:7a:e1:
e7:73:17:29:7c:17:ea:17:c2:2e:cd:0d:c5:86:38:07:c5:8a:
13:0d:7b:3d:19:46:7c:84:c7:4a:4f:e4:ac:87:38:75:b3:46:
0a:94:10:49:54:ab:f2:06:a4:5d:20:58:66:c3:76:9f:73:68:
a8:81:e8:6a:d8:e8:1d:f6:05:0f:6d:23:4e:62:0e:77:09:e6:
06:67:7b:cf:78:a8:5e:ad:bc:2f:9b:48:b1:b4:c1:00:25:a7:
cf:75:03:9b:ea:df:11:f7:eb:cd:fd:ff:f2:84:84:ec:be:a8:
cc:3d:99:0b:db:42:09:0d:a2:47:0c:cd:ab:26:ce:87:8a:6c:
95:f5:ef:cc:b5:56:d2:7f:9b:0f:90:b9:b3:91:d2:ba:cb:bd:
8b:19:6f:55:04:15:16:a7:62:85:1b:64:fa:6e:0a:21:f6:f9:
c6:16:b0:45:7e:bc:60:7f:c4:25:64:aa:6b:4e:1d:ee:6e:58:
5b:5e:cd:ec:89:87:64:31:8c:04:e9:40:01:91:32:b6:ae:ff:
1a:68:9f:df:fc:46:74:5c:fc:d1:25:e6:fd:8f:af:be:4d:46:
69:c9:47:ad:b1:6b:ce:53:49:0b:12:07:70:f4:cc:f5:25:b1:
d6:37:50:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToTTDtPtCvLqgeZeVmwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZTI4ZTU1MDMxNDEzOGY5ZDgzYTI4YjJkNjY2ZTliODc0
NGI1MTAwHhcNMjUwMTMxMTcwMDI3WhcNMjUwMjAxMTcwMDI3WjAzMTEwLwYDVQQD
EyhkMWRhYjY2YTc4NzlhZmEyNGFhN2QyMjg1YzYyNGMyYTQ4YzA3ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fla8qy+5K9nWAe0BcWfQ4YSglss
YcdVua9IvSoVeztFvx/rDBFGHgIivjel4hK+4lG1Y+xERnv78eY8axTjqu41THo0
RCRwpHWMBXJJ6YUG9bAbQaIEhdB+mNRLXxzLJn3Ueyew25dgAAH8xaRWr03u8MTb
wWSf5l2rUWHC0vGxeIko8RwO+zxecG0034rcuR2JxRO8ncxYieW11caI450Mhjt/
NdR4HHOXWYDJgHI4SqnU+crzLbV2PbQr7dpOlPF9qekeZf+hT+DN3ntxHoPSBDh9
QdttXs2Tb/08HlmojYACxCvSqmUOrUQ2bsFryUgLQ1Mu2xPXqR/Q+uJIXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHatmp4ea+iSqfSKFxiTCpIwH2nMB8GA1UdIwQY
MBaAFCLijlUDFBOPnYOiiy1mbpuHRLUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVLT1ZRTVVFNC1kZzZLTExXWnVtNGRFdFJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zMzZhNmYtMmI4OS00YjMyLTg5ZjYt
NGQyMDljMzI4OGFiLzEvSXVLT1ZRTVVFNC1kZzZLTExXWnVtNGRFdFJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zMzZhNmYtMmI4OS00YjMyLTg5ZjYtNGQyMDljMzI4OGFi
LzEvSXVLT1ZRTVVFNC1kZzZLTExXWnVtNGRFdFJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfdLQoW0
0Daa4z2KTqUmV3rh53MXKXwX6hfCLs0NxYY4B8WKEw17PRlGfITHSk/krIc4dbNG
CpQQSVSr8gakXSBYZsN2n3NoqIHoatjoHfYFD20jTmIOdwnmBmd7z3ioXq28L5tI
sbTBACWnz3UDm+rfEffrzf3/8oSE7L6ozD2ZC9tCCQ2iRwzNqybOh4pslfXvzLVW
0n+bD5C5s5HSusu9ixlvVQQVFqdihRtk+m4KIfb5xhawRX68YH/EJWSqa04d7m5Y
W17N7ImHZDGMBOlAAZEytq7/Gmif3/xGdFz80SXm/Y+vvk1GaclHrbFrzlNJCxIH
cPTM9SWx1jdQwQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:11 2025 by rpki-client