Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: suyDGiMnTHcRfY6r5b8etiXEDIAtJRRuR6p/bf4JVac=
Subject key identifier: 9D:1D:61:94:C1:3B:6A:F9:72:56:D0:79:C2:6E:BC:F1:E2:82:83:24
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 0194BC3BD7F54DDB0B209DDFE573C48F8983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 040B
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: C8NK0pRMzAVLTx1FeYYWDUMaUckOehOT3LRB5Ds5VJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d7:f5:4d:db:0b:20:9d:df:e5:73:c4:8f:89:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=9d1d6194c13b6af97256d079c26ebcf1e2828324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:40:71:b6:7c:bd:69:d7:a3:ee:9b:dd:c6:
6a:d7:09:cf:9e:67:98:39:58:d1:be:8c:44:6e:fe:
49:6c:8b:19:5b:45:68:f7:db:c2:7b:62:3c:73:e2:
90:1f:b6:a6:10:cf:c9:0b:1b:fc:be:11:4f:e9:7a:
bf:26:ac:46:1e:32:0d:41:0f:e6:56:1f:a4:52:ad:
ac:a1:28:45:0e:d1:f4:a6:cd:86:86:db:94:cf:ab:
65:34:6a:0f:8a:c4:05:97:6d:96:e0:24:ea:99:09:
00:cb:27:c4:b7:65:d8:0f:03:9a:71:27:1a:8e:6e:
97:18:47:96:aa:64:c3:39:f0:5f:12:79:9c:f5:b9:
00:ad:f6:56:91:d1:32:5e:e4:e9:1b:dc:3c:aa:85:
7d:21:3f:b9:02:30:ff:fe:5d:f1:74:82:53:7c:0a:
65:e9:c7:9b:41:51:95:0e:ab:95:e2:40:dc:47:e1:
e3:dd:b5:47:51:10:36:a6:b3:e8:14:ab:3f:5e:79:
3a:be:eb:af:38:53:8a:d9:2f:fc:57:e4:94:ea:a3:
8c:83:6b:a4:b7:ac:3f:45:27:8a:5a:0c:15:e2:df:
8c:0d:e9:17:ca:db:cc:5d:e2:9b:10:c2:db:0e:43:
ba:4f:24:3d:14:b9:6b:58:23:11:1f:7c:25:39:98:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1D:61:94:C1:3B:6A:F9:72:56:D0:79:C2:6E:BC:F1:E2:82:83:24
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:00:68:4a:b9:30:4b:44:ab:28:04:3a:85:66:82:f4:5e:
80:26:ad:f9:9f:3a:75:87:95:db:28:2e:a1:47:20:d7:04:b5:
f7:79:d2:15:68:7a:f2:5d:38:3d:c4:0e:19:fe:47:0a:98:84:
0a:48:65:5b:0c:96:e4:79:82:a2:92:fd:6f:94:21:a4:de:18:
3f:c2:51:99:34:40:cc:33:50:ec:8a:b0:11:d2:fc:00:94:d3:
41:ff:85:1f:25:1a:ed:26:f3:ab:47:d6:73:6e:3d:ce:ea:05:
97:9c:bd:7f:78:09:4f:ad:71:37:98:8d:74:93:b0:6b:21:8c:
f4:4a:b7:b4:68:71:b5:46:5b:93:f7:ab:45:df:49:cd:0d:79:
e2:44:d6:25:23:4b:ad:93:d4:e5:78:9a:a8:35:17:da:d6:5d:
06:5e:db:31:a5:ad:9f:24:a5:83:f6:62:84:74:e0:5d:e0:92:
79:8f:27:75:c9:66:cb:01:82:3a:2b:b6:0a:34:27:35:0e:bd:
fa:e0:c5:1d:5f:3e:a5:06:aa:c4:7c:0f:6c:be:06:c9:95:de:
2a:cb:1d:13:72:8a:b1:8d:b7:09:6b:59:a7:e4:33:3e:b7:cc:
e7:ec:01:06:64:06:88:d7:cb:d8:8d:1d:93:d5:83:cd:8c:97:
9c:72:78:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9f1TdsLIJ3f5XPEj4mDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjhiNjEyNzIxZDRkNGMyZDA3Y2JmZTJlNDk1ZTk4NmEw
ZjAyNmQwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
Eyg5ZDFkNjE5NGMxM2I2YWY5NzI1NmQwNzljMjZlYmNmMWUyODI4MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfdAcbZ8vWnXo+6b3cZq1wnPnmeY
OVjRvoxEbv5JbIsZW0Vo99vCe2I8c+KQH7amEM/JCxv8vhFP6Xq/JqxGHjINQQ/m
Vh+kUq2soShFDtH0ps2GhtuUz6tlNGoPisQFl22W4CTqmQkAyyfEt2XYDwOacSca
jm6XGEeWqmTDOfBfEnmc9bkArfZWkdEyXuTpG9w8qoV9IT+5AjD//l3xdIJTfApl
6cebQVGVDquV4kDcR+Hj3bVHURA2prPoFKs/Xnk6vuuvOFOK2S/8V+SU6qOMg2uk
t6w/RSeKWgwV4t+MDekXytvMXeKbEMLbDkO6TyQ9FLlrWCMRH3wlOZi2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0dYZTBO2r5clbQecJuvPHigoMkMB8GA1UdIwQY
MBaAFIu4thJyHU1MLQfL/i5JXphqDwJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmIt
YmI0OTNjNDZkZjNlLzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmItYmI0OTNjNDZkZjNl
LzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVUAaEq5
MEtEqygEOoVmgvRegCat+Z86dYeV2yguoUcg1wS193nSFWh68l04PcQOGf5HCpiE
CkhlWwyW5HmCopL9b5QhpN4YP8JRmTRAzDNQ7IqwEdL8AJTTQf+FHyUa7Sbzq0fW
c249zuoFl5y9f3gJT61xN5iNdJOwayGM9Eq3tGhxtUZbk/erRd9JzQ154kTWJSNL
rZPU5XiaqDUX2tZdBl7bMaWtnySlg/ZihHTgXeCSeY8ndclmywGCOiu2CjQnNQ69
+uDFHV8+pQaqxHwPbL4GyZXeKssdE3KKsY23CWtZp+QzPrfM5+wBBmQGiNfL2I0d
k9WDzYyXnHJ4UA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:28 2025 by rpki-client