Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier: Rh3KdIjgxNDT3RZQRMWjJbpmuyLTmxsUhoIWyLbPeUw=
Subject key identifier: D5:90:39:83:48:AD:CB:69:33:1C:5C:F1:6E:FF:A3:00:BF:A1:FB:14
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 0194BD4E37C50D9D85A356AB0B9CE36A3C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number: 13B2
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: AiaBXU6s/KwdnVg1EI9Df4gWnD6dw3TReN0dWwpF784=)
2: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=)
3: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:37:c5:0d:9d:85:a3:56:ab:0b:9c:e3:6a:3c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=d590398348adcb69331c5cf16effa300bfa1fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:0a:c9:84:2e:59:43:d7:1c:2a:ac:09:c8:
86:ef:c9:96:2b:bd:8c:fc:20:03:11:f4:f4:de:16:
7f:e7:be:01:4d:34:29:78:32:83:f6:cf:8e:7c:2c:
6e:dc:24:c0:59:4d:05:48:a8:aa:fd:2e:8a:83:2b:
30:57:d3:9c:6b:5c:71:2c:ad:1f:a2:a0:4e:84:23:
19:a7:5d:37:18:22:0a:26:28:dd:ac:b7:ed:3f:f0:
ed:74:2d:01:ca:8a:09:f8:96:e9:52:50:b4:72:ed:
05:da:9b:f4:b4:22:78:46:d6:c5:4b:cc:0d:3f:26:
f9:f4:74:89:d1:c4:59:1e:4d:ae:a0:3c:13:88:1c:
1e:ce:7c:e2:59:36:7e:49:24:d8:95:f8:93:31:4b:
c3:c8:3f:bd:df:13:e8:94:08:0f:f0:31:08:48:15:
36:be:84:ee:65:65:14:cd:94:a0:24:bd:10:ff:95:
15:f8:b1:bc:43:6a:47:cc:f3:c6:44:9d:a4:a1:35:
32:ec:72:47:65:eb:f9:54:b1:7a:72:73:66:5e:de:
ff:a1:0f:61:d2:e6:75:9c:7e:93:80:3c:68:22:c6:
07:67:1f:1b:2b:8e:4f:eb:b0:9c:97:ee:3f:f8:93:
0a:f1:62:1d:7d:a4:b8:ca:4c:cf:85:b7:c4:f2:0d:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:39:83:48:AD:CB:69:33:1C:5C:F1:6E:FF:A3:00:BF:A1:FB:14
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:37:45:fe:3a:4e:d3:61:16:cf:b4:48:5f:9e:07:31:75:ba:
c0:04:c4:87:88:f8:1d:6a:70:5b:46:d4:4f:3d:c8:ee:21:d6:
d4:33:43:4d:61:12:84:fa:3e:ef:ff:e7:69:1b:07:84:f6:d0:
34:59:65:c3:d8:a7:b7:4c:00:28:e3:dd:cc:5a:c7:49:f9:a6:
cf:aa:9b:53:1f:56:c1:ab:4e:56:f2:f8:1c:c1:a8:bb:8c:ee:
38:d3:a9:88:2c:44:b3:a6:20:36:a1:cc:d3:72:33:cc:53:40:
b9:df:00:b1:f8:ec:70:04:de:df:19:7a:e6:17:4d:1e:6d:e4:
02:4d:d7:27:cf:95:39:6a:33:f0:0b:a2:2c:77:3a:f2:e4:16:
7c:45:98:01:92:01:c0:d1:a0:1a:f8:ec:9b:49:1b:03:e9:72:
77:ec:05:d2:80:3c:62:29:ad:80:39:4c:e9:d6:38:62:63:77:
c2:95:8e:f8:f4:d6:70:81:09:96:bc:71:32:dd:47:7e:7d:14:
12:31:7b:69:16:83:a9:2f:1b:6b:d6:a5:2f:ae:f0:cc:9a:5a:
b0:f8:1c:bf:cb:37:df:60:51:63:37:16:71:f9:cc:fb:aa:08:
30:af:18:c6:06:67:44:75:a0:df:95:69:f7:31:da:e3:10:b5:
bc:d5:1b:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TjfFDZ2Fo1arC5zjajwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTBkZjUxZjBlNWJjODFkYjRiMDVmNDQ5Zjc0MzA4ZDdm
Y2ZhMmUwHhcNMjUwMTMxMTcwMDA3WhcNMjUwMjAxMTcwMDA3WjAzMTEwLwYDVQQD
EyhkNTkwMzk4MzQ4YWRjYjY5MzMxYzVjZjE2ZWZmYTMwMGJmYTFmYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOQKyYQuWUPXHCqsCciG78mWK72M
/CADEfT03hZ/574BTTQpeDKD9s+OfCxu3CTAWU0FSKiq/S6KgyswV9Oca1xxLK0f
oqBOhCMZp103GCIKJijdrLftP/DtdC0ByooJ+JbpUlC0cu0F2pv0tCJ4RtbFS8wN
Pyb59HSJ0cRZHk2uoDwTiBweznziWTZ+SSTYlfiTMUvDyD+93xPolAgP8DEISBU2
voTuZWUUzZSgJL0Q/5UV+LG8Q2pHzPPGRJ2koTUy7HJHZev5VLF6cnNmXt7/oQ9h
0uZ1nH6TgDxoIsYHZx8bK45P67Ccl+4/+JMK8WIdfaS4ykzPhbfE8g3eqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWQOYNIrctpMxxc8W7/owC/ofsUMB8GA1UdIwQY
MBaAFCBQ31Hw5byB20sF9En3QwjX/PouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAt
NmU2NDgxZTU3NjVjLzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAtNmU2NDgxZTU3NjVj
LzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzdF/jpO
02EWz7RIX54HMXW6wATEh4j4HWpwW0bUTz3I7iHW1DNDTWEShPo+7//naRsHhPbQ
NFllw9int0wAKOPdzFrHSfmmz6qbUx9WwatOVvL4HMGou4zuONOpiCxEs6YgNqHM
03IzzFNAud8AsfjscATe3xl65hdNHm3kAk3XJ8+VOWoz8AuiLHc68uQWfEWYAZIB
wNGgGvjsm0kbA+lyd+wF0oA8YimtgDlM6dY4YmN3wpWO+PTWcIEJlrxxMt1Hfn0U
EjF7aRaDqS8ba9alL67wzJpasPgcv8s332BRYzcWcfnM+6oIMK8YxgZnRHWg35Vp
9zHa4xC1vNUbHA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:24 2025 by rpki-client