Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: wimo8ApaQZwxcrQtL8IW9gh0Lxb6uqlhAqzF3wc//GM=
Subject key identifier: 4D:2E:9D:47:62:FA:CB:C7:D9:B3:9F:FA:0D:2D:10:12:3C:CF:C3:12
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 0194BC731AA61DCCD293242AB8E788DB4EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 0535
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: 7M8D3IxMWjzAgVSAuyFX2gLMxAs.roa (hash: MD3KP2LMgWTsm6lhsmms5WwgB8xDS3rVO74n7Xs0hs0=)
2: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: WsafolXF84tqiEabfaeHyGOH+5kVKnQgdnWiW0nOYf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1a:a6:1d:cc:d2:93:24:2a:b8:e7:88:db:4e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=4d2e9d4762facbc7d9b39ffa0d2d10123ccfc312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:8b:5f:18:96:91:1c:ab:08:f0:cc:58:8b:
29:90:90:b1:f0:c9:5c:33:77:02:d4:c5:41:09:c0:
d4:52:55:07:93:78:db:d6:b6:0e:25:27:43:80:d3:
02:00:6d:c9:3f:25:9d:65:83:cd:83:25:62:5d:01:
66:45:7d:c4:c9:0e:5c:37:87:27:c7:0c:93:a6:c4:
62:75:c9:ff:9e:2d:36:ca:84:35:60:23:a7:8f:a4:
89:0c:05:d6:89:4e:41:17:ef:92:6b:55:39:1f:6d:
05:1d:a2:4f:09:e4:b4:fc:48:37:06:a1:05:81:fa:
89:54:68:98:ea:19:49:4d:bf:f3:4b:8c:ac:2a:a8:
d3:e6:f5:22:b4:82:d3:30:dd:9d:62:a0:63:84:5c:
87:43:6b:e0:a0:c4:78:84:24:4d:b4:24:97:1b:44:
03:8f:c2:c1:32:7d:0b:b8:cb:f6:53:cf:b3:f7:9b:
52:0f:5a:1f:1a:c7:17:f4:42:6c:be:3d:67:5a:91:
c2:92:69:ee:a0:09:c5:c4:97:b4:07:80:c8:94:e8:
61:7a:e4:7b:9a:6b:13:47:d8:13:60:b5:02:cd:a8:
55:01:c7:58:94:6c:64:39:20:fd:f7:a1:dd:44:e3:
28:03:b5:ff:e4:8d:8c:69:d6:3d:d6:eb:d3:07:20:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:9D:47:62:FA:CB:C7:D9:B3:9F:FA:0D:2D:10:12:3C:CF:C3:12
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:dd:a0:c3:85:5e:f3:ca:1a:3a:c8:22:18:86:47:43:05:a8:
ce:42:66:d0:1b:10:0c:48:bf:b9:cc:7d:be:f6:a4:58:5f:59:
ad:e0:5f:bc:6e:5f:2f:1b:ee:0d:d3:79:04:d1:3e:90:57:d6:
26:41:2a:7a:e3:0a:18:22:84:1c:36:4a:9f:b9:1d:e0:7f:f2:
ea:94:8e:27:23:1f:a5:0a:b9:19:e6:5a:13:17:31:eb:13:53:
56:88:09:f6:9b:77:2d:8c:e1:77:70:91:1d:43:42:34:dd:ef:
78:77:22:e3:a9:83:ec:0b:53:85:ad:b7:4b:70:1f:38:d8:30:
fa:32:04:c6:57:5c:30:de:cb:af:2c:84:ed:99:a6:d7:5a:9c:
a5:b9:02:c2:d6:33:37:58:98:92:a7:8c:47:0c:8e:b3:24:99:
56:fc:86:d5:29:c5:ca:6d:6c:30:67:e3:cc:bf:d4:30:72:2d:
41:8b:94:ff:75:85:b0:6e:e1:5e:09:f9:a7:2a:05:28:08:5e:
7a:9b:98:b7:91:fc:e1:73:d1:eb:e9:05:31:44:4a:da:83:d6:
6c:6c:0f:d6:90:da:dc:c1:1c:f2:b7:8d:96:79:60:15:f4:39:
72:48:9a:bb:a0:83:bd:e7:b1:f5:dc:d4:c7:ab:20:1b:f0:f0:
7c:d2:59:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxqmHczSkyQquOeI207dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDNkY2E3NjMxOTkwMzE1MmYyNDZlMDVjMDY5ZmQxYTFk
YjVjNTkwHhcNMjUwMTMxMTMwMDQ3WhcNMjUwMjAxMTMwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZDJlOWQ0NzYyZmFjYmM3ZDliMzlmZmEwZDJkMTAxMjNjY2ZjMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofmLXxiWkRyrCPDMWIspkJCx8Mlc
M3cC1MVBCcDUUlUHk3jb1rYOJSdDgNMCAG3JPyWdZYPNgyViXQFmRX3EyQ5cN4cn
xwyTpsRidcn/ni02yoQ1YCOnj6SJDAXWiU5BF++Sa1U5H20FHaJPCeS0/Eg3BqEF
gfqJVGiY6hlJTb/zS4ysKqjT5vUitILTMN2dYqBjhFyHQ2vgoMR4hCRNtCSXG0QD
j8LBMn0LuMv2U8+z95tSD1ofGscX9EJsvj1nWpHCkmnuoAnFxJe0B4DIlOhheuR7
mmsTR9gTYLUCzahVAcdYlGxkOSD996HdROMoA7X/5I2MadY91uvTByA+eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0unUdi+svH2bOf+g0tEBI8z8MSMB8GA1UdIwQY
MBaAFIsD3KdjGZAxUvJG4FwGn9Gh21xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQt
MDI5ZTYzZjA4ODlhLzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQtMDI5ZTYzZjA4ODlh
LzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl92gw4Ve
88oaOsgiGIZHQwWozkJm0BsQDEi/ucx9vvakWF9ZreBfvG5fLxvuDdN5BNE+kFfW
JkEqeuMKGCKEHDZKn7kd4H/y6pSOJyMfpQq5GeZaExcx6xNTVogJ9pt3LYzhd3CR
HUNCNN3veHci46mD7AtTha23S3AfONgw+jIExldcMN7LryyE7Zmm11qcpbkCwtYz
N1iYkqeMRwyOsySZVvyG1SnFym1sMGfjzL/UMHItQYuU/3WFsG7hXgn5pyoFKAhe
epuYt5H84XPR6+kFMURK2oPWbGwP1pDa3MEc8reNlnlgFfQ5ckiau6CDveex9dzU
x6sgG/DwfNJZng==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:45 2025 by rpki-client