Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: hlutt7HneFXmVtgq9pxMgKuBOt010KUFYfEaM5/kDFk=
Subject key identifier: 9A:3F:45:8E:9B:C2:F7:48:2D:B7:C5:D3:80:8E:02:DE:74:A9:C8:1A
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 0194BD85B544A015A9FDC122D1769DECB05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: cHLzZFvF4wrwQH3SEGGorNQs/FHZzDOr/KQLra5c81c=)
2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:44:a0:15:a9:fd:c1:22:d1:76:9d:ec:b0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=9a3f458e9bc2f7482db7c5d3808e02de74a9c81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:fb:7e:d0:08:cb:89:f1:91:7b:b9:0a:61:
94:1c:7b:8b:51:62:fd:ce:b0:f7:43:7f:4c:02:fd:
85:19:b3:65:f4:34:d5:5c:d6:21:0c:27:bb:a8:ea:
18:fe:54:8c:36:5d:76:af:91:f5:ab:02:f9:74:6b:
31:f3:36:57:4e:19:38:e1:b8:af:75:e7:30:30:98:
b0:62:17:1a:9c:19:be:ff:b5:b8:8c:77:92:2c:d4:
05:20:7e:36:a2:7f:e6:17:7f:ad:88:bd:ef:16:12:
45:52:64:63:f1:29:9c:3b:99:94:2f:ad:c7:2c:cc:
92:3f:ac:72:72:8a:7c:ef:5c:bf:aa:51:e0:14:c1:
37:ee:a7:f4:84:cb:a7:25:b2:c5:78:06:e6:85:33:
27:d9:35:55:27:3a:3f:cb:3f:ee:9a:8b:83:87:88:
f7:e8:70:2f:d1:94:e3:be:cb:b8:84:0a:db:71:6b:
62:d6:64:f3:82:82:27:5c:5b:ae:01:e7:35:3e:c7:
ec:2c:03:ac:cf:cd:e1:66:ae:7a:55:4f:45:70:8f:
b7:d4:1f:f8:32:c8:22:16:55:c2:67:a7:94:38:8c:
f7:d3:07:8b:49:d1:61:52:41:b0:34:18:e2:c8:e8:
7a:62:6e:4e:50:58:7a:0f:d7:f5:6e:04:e9:12:57:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:45:8E:9B:C2:F7:48:2D:B7:C5:D3:80:8E:02:DE:74:A9:C8:1A
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:86:aa:da:d5:67:cd:d1:66:e9:0c:10:b1:fa:94:34:66:
84:58:1b:c0:c9:a2:7b:61:df:d0:ce:ad:98:30:ab:c3:e8:00:
0a:4e:98:a7:bf:09:77:b4:a7:a6:93:48:ab:20:23:58:db:69:
1c:66:9f:af:8c:b7:e7:df:26:29:e4:07:c7:e8:7e:36:c5:28:
f7:3d:bd:78:e5:2a:9e:47:f9:d0:58:95:54:20:57:98:b6:2a:
cd:ef:95:fb:8f:4c:26:49:c3:b7:29:94:ea:19:65:3a:e7:ad:
d2:e2:69:5a:3f:49:30:37:00:0e:ec:46:46:6c:be:83:c0:f8:
91:bb:b5:ea:88:3f:17:82:ec:14:bd:26:93:70:61:8b:35:4c:
f1:1b:48:3d:0f:96:0a:35:82:24:d4:0e:78:34:99:61:ae:70:
d0:ab:51:cb:fe:83:3e:a4:72:5b:41:91:1b:1e:d1:07:70:00:
77:70:81:e2:18:3a:b8:80:ec:18:a1:87:cf:d6:ad:77:8f:31:
a3:4b:ee:28:63:d0:92:17:03:4b:a8:f7:3c:25:c9:82:1a:0d:
8e:d5:ee:0e:29:0d:39:58:c6:cf:c2:0e:8b:f0:8b:b2:7d:dc:
d8:c6:f5:f1:1e:a3:22:e0:6b:7f:c1:22:64:b4:db:20:0b:cd:
0f:8d:59:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbVEoBWp/cEi0Xad7LBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYWM0ODY4MDczOThhYzFjZWVjMDkyMWQwNGQ0MDlhNGY3
ZjQ3OWIwHhcNMjUwMTMxMTgwMDQ0WhcNMjUwMjAxMTgwMDQ0WjAzMTEwLwYDVQQD
Eyg5YTNmNDU4ZTliYzJmNzQ4MmRiN2M1ZDM4MDhlMDJkZTc0YTljODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0D7ftAIy4nxkXu5CmGUHHuLUWL9
zrD3Q39MAv2FGbNl9DTVXNYhDCe7qOoY/lSMNl12r5H1qwL5dGsx8zZXThk44biv
decwMJiwYhcanBm+/7W4jHeSLNQFIH42on/mF3+tiL3vFhJFUmRj8SmcO5mUL63H
LMySP6xycop871y/qlHgFME37qf0hMunJbLFeAbmhTMn2TVVJzo/yz/umouDh4j3
6HAv0ZTjvsu4hArbcWti1mTzgoInXFuuAec1PsfsLAOsz83hZq56VU9FcI+31B/4
MsgiFlXCZ6eUOIz30weLSdFhUkGwNBjiyOh6Ym5OUFh6D9f1bgTpEldLTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo/RY6bwvdILbfF04COAt50qcgaMB8GA1UdIwQY
MBaAFCOsSGgHOYrBzuwJIdBNQJpPf0ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2Qt
NjE2MDViMjZmODJkLzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2QtNjE2MDViMjZmODJk
LzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCKGqtrV
Z83RZukMELH6lDRmhFgbwMmie2Hf0M6tmDCrw+gACk6Yp78Jd7SnppNIqyAjWNtp
HGafr4y3598mKeQHx+h+NsUo9z29eOUqnkf50FiVVCBXmLYqze+V+49MJknDtymU
6hllOuet0uJpWj9JMDcADuxGRmy+g8D4kbu16og/F4LsFL0mk3BhizVM8RtIPQ+W
CjWCJNQOeDSZYa5w0KtRy/6DPqRyW0GRGx7RB3AAd3CB4hg6uIDsGKGHz9atd48x
o0vuKGPQkhcDS6j3PCXJghoNjtXuDikNOVjGz8IOi/CLsn3c2Mb18R6jIuBrf8Ei
ZLTbIAvND41ZkA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:20 2025 by rpki-client