Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: vZnxKCbHvD/PskX/kXplrehBCCUeQhJPOyRYmIZOQGo=
Subject key identifier: 37:09:38:6B:41:07:C6:69:47:5E:66:CE:E5:4F:E3:0B:6E:97:D0:3F
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 0194BC3C66664ACA4EA3B1F76D98FDECB429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 12B1
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 2prUFfcWnh9lgfuneUgUhRLhvHo.roa (hash: +J6ztDLMf312P+nFSc286+Tl+BdFnufwiNmO1oygSqw=)
2: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: LInWtP0fMrOPGd7QTaJwMgdCxkJeZ1cprBLa391QuoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:66:66:4a:ca:4e:a3:b1:f7:6d:98:fd:ec:b4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=3709386b4107c669475e66cee54fe30b6e97d03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:2d:79:e0:9f:77:01:56:8e:c6:c5:9e:06:
c9:4b:62:a6:3b:dc:fe:e2:a2:6d:31:1d:de:7e:d4:
a0:7c:83:a5:e7:47:9a:af:dd:66:5f:ab:92:e2:1b:
51:dd:1e:a7:5c:2a:e8:5f:56:23:fb:98:d2:b5:1e:
49:94:bb:41:16:6d:92:b8:97:c3:c8:b9:8c:ac:91:
f7:b9:b4:d3:9d:22:10:57:15:51:f3:3e:39:c1:76:
0b:de:9a:bf:6d:da:9c:54:b6:04:af:fe:87:6e:ac:
4f:8d:b8:9a:88:e8:83:d2:7c:41:04:af:e1:3a:00:
68:1a:f5:64:9a:f3:b8:74:b3:a6:91:9d:89:89:0e:
c7:61:43:44:d6:80:76:20:48:30:35:fb:00:af:69:
f9:fc:5a:65:c6:91:a5:de:54:a3:a2:b9:31:02:70:
6c:d9:67:e0:09:6d:84:11:41:9f:36:02:0e:13:8c:
08:26:22:de:19:76:80:1f:76:03:26:bd:a8:fd:37:
44:84:b1:3c:01:be:fe:dd:c9:be:9c:40:4f:22:67:
ed:33:64:f9:e2:0a:07:b1:07:b8:7e:9c:3c:e6:29:
8e:39:1b:86:3c:13:e6:e8:cd:e9:49:b7:91:07:13:
a6:f9:64:ee:06:53:76:1b:91:72:9d:56:5d:a1:d4:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:09:38:6B:41:07:C6:69:47:5E:66:CE:E5:4F:E3:0B:6E:97:D0:3F
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cc:cb:1f:16:47:15:2d:99:4a:91:1c:c1:90:bd:40:b7:dd:
92:c2:be:4c:19:92:3a:03:31:95:c8:1e:2b:ef:d8:7e:f7:41:
92:50:17:30:09:ca:ae:8f:61:48:3d:7b:b2:93:e5:0d:1b:da:
4d:bf:90:40:f8:3e:f7:c3:57:b0:8e:3d:8e:b8:2a:c9:76:61:
95:17:7f:0d:2d:bb:36:eb:56:52:86:82:64:4f:21:d8:d3:a5:
51:1c:50:64:61:d0:4d:00:79:88:6e:93:44:13:a1:58:57:6e:
38:b8:ce:7c:fa:c5:2f:d8:50:8c:97:e4:3a:41:ad:97:1e:4a:
09:15:46:81:cc:63:03:c4:70:8c:c2:a3:82:2b:32:cf:3d:16:
83:c0:50:40:ca:ef:e5:06:39:60:9f:6b:67:16:f3:6e:75:26:
4b:ab:90:53:7a:0e:ca:e2:35:08:25:e3:5c:4e:4b:44:16:1b:
8b:55:20:c1:b8:d0:4c:d7:f6:99:90:9c:84:29:dd:53:69:bf:
16:01:60:28:8b:ef:27:cf:79:42:0d:3a:cc:81:fa:29:4f:f6:
d9:0d:47:e0:b7:35:c2:b5:09:e2:d7:c6:29:91:52:ac:b1:c8:
da:9e:e6:99:65:79:9c:9d:63:16:0b:d5:4b:79:70:48:8a:2c:
02:c0:c3:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGZmSspOo7H3bZj97LQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDQ4MGIwNzk1NjE3ZTJlMjZlNmUxODI2NDM3N2U3YTk2
Yzc4ZjMwHhcNMjUwMTMxMTIwMTAyWhcNMjUwMjAxMTIwMTAyWjAzMTEwLwYDVQQD
EygzNzA5Mzg2YjQxMDdjNjY5NDc1ZTY2Y2VlNTRmZTMwYjZlOTdkMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbcteeCfdwFWjsbFngbJS2KmO9z+
4qJtMR3eftSgfIOl50ear91mX6uS4htR3R6nXCroX1Yj+5jStR5JlLtBFm2SuJfD
yLmMrJH3ubTTnSIQVxVR8z45wXYL3pq/bdqcVLYEr/6HbqxPjbiaiOiD0nxBBK/h
OgBoGvVkmvO4dLOmkZ2JiQ7HYUNE1oB2IEgwNfsAr2n5/FplxpGl3lSjorkxAnBs
2WfgCW2EEUGfNgIOE4wIJiLeGXaAH3YDJr2o/TdEhLE8Ab7+3cm+nEBPImftM2T5
4goHsQe4fpw85imOORuGPBPm6M3pSbeRBxOm+WTuBlN2G5FynVZdodThSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcJOGtBB8ZpR15mzuVP4wtul9A/MB8GA1UdIwQY
MBaAFCPUgLB5Vhfi4m5uGCZDd+epbHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQt
YWY5OGU0OWYxMWFlLzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQtYWY5OGU0OWYxMWFl
LzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMzLHxZH
FS2ZSpEcwZC9QLfdksK+TBmSOgMxlcgeK+/YfvdBklAXMAnKro9hSD17spPlDRva
Tb+QQPg+98NXsI49jrgqyXZhlRd/DS27NutWUoaCZE8h2NOlURxQZGHQTQB5iG6T
RBOhWFduOLjOfPrFL9hQjJfkOkGtlx5KCRVGgcxjA8RwjMKjgisyzz0Wg8BQQMrv
5QY5YJ9rZxbzbnUmS6uQU3oOyuI1CCXjXE5LRBYbi1UgwbjQTNf2mZCchCndU2m/
FgFgKIvvJ895Qg06zIH6KU/22Q1H4Lc1wrUJ4tfGKZFSrLHI2p7mmWV5nJ1jFgvV
S3lwSIosAsDDRA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:39 2025 by rpki-client