Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: udk9hdLYFDnL72L5wOzUjAqz6DRq04F/awdojG9s5yk=
Subject key identifier: C5:61:F1:97:5A:B7:E5:9F:93:DA:0A:BC:69:BA:78:4F:01:36:5D:11
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 0194BBCE9DE99D986B671403598D053CDC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 033D
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: boSI+u+uoZ7eDmKbH9a0RSw0xiYtMIxDpgQylVT8YBw=)
2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9d:e9:9d:98:6b:67:14:03:59:8d:05:3c:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=c561f1975ab7e59f93da0abc69ba784f01365d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:ee:c5:46:ac:4b:bf:e6:ce:a2:a5:fa:7f:
19:54:a3:29:42:8c:d7:07:66:a0:f1:56:a1:13:84:
78:71:8f:df:a6:5e:51:59:82:cc:b9:66:fc:aa:05:
dc:12:66:c7:6b:68:7c:51:13:6a:2e:3e:d4:9f:3c:
14:a3:36:45:c2:c5:5b:7a:5d:23:3f:f7:ef:e0:82:
a2:29:15:5f:bb:66:c5:a0:44:2f:2f:a6:8d:8f:1d:
6a:ef:49:a0:ae:3c:85:be:61:ef:56:8b:14:fc:7a:
ff:cf:34:ef:c0:71:1a:36:e3:b9:83:1a:42:c4:cd:
66:68:8d:27:a2:ac:bf:f7:ae:3b:e6:c1:49:31:d2:
14:5b:b9:0b:02:17:51:f7:74:49:5e:e2:68:ad:ce:
61:51:8e:d5:96:ba:1c:63:09:83:1c:74:3c:25:40:
08:6c:de:86:4e:c1:43:ec:14:de:04:8b:83:66:91:
e8:81:a6:c3:7f:1c:48:d6:4a:cb:61:41:ed:c8:6d:
b0:e2:16:d7:83:e9:03:39:5e:ae:b6:7f:be:57:ef:
7f:3d:ae:b4:e3:68:cf:79:5e:87:4d:a1:ae:2f:dc:
de:e6:93:72:fc:5e:e7:70:ea:6c:d4:a9:2c:fc:b3:
d3:42:e7:9c:92:ec:02:74:30:a4:39:f5:d4:ab:6d:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:F1:97:5A:B7:E5:9F:93:DA:0A:BC:69:BA:78:4F:01:36:5D:11
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c7:f2:bd:ce:85:ca:67:b9:96:61:66:f9:98:ad:24:37:f1:
6d:38:8e:26:68:20:b7:e5:17:66:12:c2:70:a1:d9:54:49:fe:
75:50:ac:53:06:30:7e:08:df:52:b2:73:b9:fc:1a:0e:df:3c:
f2:f2:ce:16:ca:e8:15:bb:bb:75:6a:17:28:3c:8f:d2:df:25:
1a:55:fe:06:f3:66:47:a8:e8:b6:91:da:43:b4:7f:e1:37:a9:
c5:bc:18:ff:17:e7:d8:43:67:ba:b5:e3:52:06:96:4b:a4:de:
69:d8:73:89:23:4d:8b:41:3f:71:84:6b:5c:43:f3:e8:4f:2c:
f0:15:d3:cb:95:95:29:8b:81:b0:8c:20:da:76:86:0a:a3:3f:
62:ea:13:fd:b7:21:b3:dc:7b:45:68:8f:79:18:83:46:1e:ad:
c7:40:da:1b:be:b8:3f:fb:70:db:fc:92:88:75:91:84:8f:17:
d1:05:3e:fe:a9:f9:95:ad:c5:36:b6:31:6b:97:9f:9d:10:bf:
a3:ba:45:8e:a3:9a:eb:ba:de:5e:08:b0:c5:cd:5b:10:85:0d:
a3:6a:1c:0e:d6:fb:e4:c7:d8:3b:a1:ec:89:9d:94:58:d1:8d:
dd:0f:61:eb:76:62:a8:53:57:94:d8:98:43:79:db:a0:f2:0e:
b7:9a:8a:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zp3pnZhrZxQDWY0FPNx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy
MGM5NDUwHhcNMjUwMTMxMTAwMTA3WhcNMjUwMjAxMTAwMTA3WjAzMTEwLwYDVQQD
EyhjNTYxZjE5NzVhYjdlNTlmOTNkYTBhYmM2OWJhNzg0ZjAxMzY1ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHbuxUasS7/mzqKl+n8ZVKMpQozX
B2ag8VahE4R4cY/fpl5RWYLMuWb8qgXcEmbHa2h8URNqLj7UnzwUozZFwsVbel0j
P/fv4IKiKRVfu2bFoEQvL6aNjx1q70mgrjyFvmHvVosU/Hr/zzTvwHEaNuO5gxpC
xM1maI0noqy/96475sFJMdIUW7kLAhdR93RJXuJorc5hUY7VlrocYwmDHHQ8JUAI
bN6GTsFD7BTeBIuDZpHogabDfxxI1krLYUHtyG2w4hbXg+kDOV6utn++V+9/Pa60
42jPeV6HTaGuL9ze5pNy/F7ncOps1Kks/LPTQueckuwCdDCkOfXUq21SLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVh8Zdat+Wfk9oKvGm6eE8BNl0RMB8GA1UdIwQY
MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct
MjI2YjhkNGE1ZjYwLzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw
LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcfyvc6F
yme5lmFm+ZitJDfxbTiOJmggt+UXZhLCcKHZVEn+dVCsUwYwfgjfUrJzufwaDt88
8vLOFsroFbu7dWoXKDyP0t8lGlX+BvNmR6jotpHaQ7R/4TepxbwY/xfn2ENnurXj
UgaWS6TeadhziSNNi0E/cYRrXEPz6E8s8BXTy5WVKYuBsIwg2naGCqM/YuoT/bch
s9x7RWiPeRiDRh6tx0DaG764P/tw2/ySiHWRhI8X0QU+/qn5la3FNrYxa5efnRC/
o7pFjqOa67reXgiwxc1bEIUNo2ocDtb75MfYO6HsiZ2UWNGN3Q9h63ZiqFNXlNiY
Q3nboPIOt5qKAg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:53 2025 by rpki-client