Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: medDyvezGNK9trsaUq0mRvpIh6JODWEvK0tA/KTPfQ4=
Subject key identifier: 29:A4:6D:33:74:F5:85:EB:09:1F:7C:BF:87:99:A0:61:D3:4A:73:12
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 0194BD17B2A6BCB17E5ECC92F2CD55B3C1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 1249
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: bVOULBVtxzqO+VfvXEa6EJhSJtL8//PGNqwYU5lDqY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b2:a6:bc:b1:7e:5e:cc:92:f2:cd:55:b3:c1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=29a46d3374f585eb091f7cbf8799a061d34a7312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:38:74:b8:83:15:87:56:65:36:3e:18:9d:
c0:cf:c7:ca:39:9e:68:ef:e6:bd:0b:e8:db:4f:be:
85:40:94:39:94:a5:e9:5f:cf:31:e3:ee:3d:7a:02:
02:ec:68:66:b2:7f:3d:e8:7d:dd:1a:62:e7:86:82:
35:25:1b:fa:e1:e5:a4:b5:9d:33:ab:3e:8b:38:93:
a2:41:19:e6:11:4b:d6:c6:e8:6d:fe:ee:3b:14:c9:
86:e5:c1:cf:98:06:39:5d:b4:90:d9:cf:32:86:a8:
fa:bd:fc:5f:35:bf:74:dc:a4:ad:c8:50:32:ea:5a:
b1:d4:d3:da:fa:47:9f:f7:1f:f0:e7:fd:c5:e6:2f:
db:5b:07:0f:80:93:f3:15:8d:4d:f7:70:29:f1:53:
05:3c:45:b3:06:5c:f2:69:b1:dc:bd:b3:6e:de:1a:
d6:8c:4b:f5:44:4e:d5:99:39:a4:b9:98:6d:d7:bc:
fa:8f:3c:22:18:76:37:96:36:e4:ae:72:44:5e:5c:
a5:5a:b1:3a:e7:00:25:2d:ae:70:c1:fc:26:81:4a:
e3:63:2d:0e:c4:c9:5f:6d:0e:fa:23:a0:2d:62:7a:
2b:a1:ad:df:84:cb:59:ee:9a:6f:5f:ef:4f:94:82:
bc:a4:84:8c:4e:bb:a3:b5:5a:e4:ea:b8:62:2c:a1:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A4:6D:33:74:F5:85:EB:09:1F:7C:BF:87:99:A0:61:D3:4A:73:12
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1d:7a:ba:12:38:8d:c9:67:aa:de:a9:97:ab:56:d5:48:71:
40:bf:ac:4f:ea:0c:ef:7c:94:65:95:93:41:c7:17:e5:0d:ca:
f2:c2:14:77:35:21:82:a7:2a:73:12:31:51:d1:ff:61:c0:a4:
cb:c7:b0:9f:35:cc:19:41:17:c7:e2:0d:6f:f6:a4:0f:e1:6b:
ce:8e:00:9d:4f:ce:b8:4f:43:0f:b5:c2:cf:97:24:b7:87:dc:
ed:11:83:28:a9:f5:49:02:67:c4:aa:5d:1f:bf:f7:40:17:5f:
1a:26:3b:58:58:49:c9:20:1d:ea:87:97:64:b1:00:8c:f4:73:
82:15:ec:91:6b:6b:4f:56:b0:72:53:0f:df:e6:55:72:3e:e4:
c1:67:db:41:d3:03:a5:ca:29:c6:7a:37:db:5f:a5:ad:6b:d9:
3d:a2:d0:ab:e8:e2:4a:02:4e:9e:3d:93:f5:3b:cc:98:47:41:
4c:d0:2a:39:3d:93:03:39:10:f6:32:bc:33:ca:6e:0d:64:5e:
f2:07:ee:d2:f3:ca:83:53:9b:ad:24:48:74:b0:41:01:6c:98:
f0:51:54:d4:1f:7e:dc:51:a4:62:4e:7e:9f:ab:96:ef:4a:1f:
ef:c8:53:cb:ce:6c:dc:68:ef:f0:66:a8:1d:14:ca:76:e6:b4:
e8:2a:02:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7KmvLF+XsyS8s1Vs8HfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZWJhZjU1NGM5MTQ2OGMxMDUyNGJhZjc0MmVhNGIxYTVk
MGI0OWMwHhcNMjUwMTMxMTYwMDM0WhcNMjUwMjAxMTYwMDM0WjAzMTEwLwYDVQQD
EygyOWE0NmQzMzc0ZjU4NWViMDkxZjdjYmY4Nzk5YTA2MWQzNGE3MzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcg4dLiDFYdWZTY+GJ3Az8fKOZ5o
7+a9C+jbT76FQJQ5lKXpX88x4+49egIC7Ghmsn896H3dGmLnhoI1JRv64eWktZ0z
qz6LOJOiQRnmEUvWxuht/u47FMmG5cHPmAY5XbSQ2c8yhqj6vfxfNb903KStyFAy
6lqx1NPa+kef9x/w5/3F5i/bWwcPgJPzFY1N93Ap8VMFPEWzBlzyabHcvbNu3hrW
jEv1RE7VmTmkuZht17z6jzwiGHY3ljbkrnJEXlylWrE65wAlLa5wwfwmgUrjYy0O
xMlfbQ76I6AtYnoroa3fhMtZ7ppvX+9PlIK8pISMTrujtVrk6rhiLKER/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmkbTN09YXrCR98v4eZoGHTSnMSMB8GA1UdIwQY
MBaAFCDrr1VMkUaMEFJLr3QupLGl0LScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZjFjMzUtNWE2OC00Nzg2LTkxODEt
NTlmMTlmYTEwYTFjLzEvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zZjFjMzUtNWE2OC00Nzg2LTkxODEtNTlmMTlmYTEwYTFj
LzEvSU91dlZVeVJSb3dRVWt1dmRDNmtzYVhRdEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACR16uhI4
jclnqt6pl6tW1UhxQL+sT+oM73yUZZWTQccX5Q3K8sIUdzUhgqcqcxIxUdH/YcCk
y8ewnzXMGUEXx+INb/akD+Frzo4AnU/OuE9DD7XCz5ckt4fc7RGDKKn1SQJnxKpd
H7/3QBdfGiY7WFhJySAd6oeXZLEAjPRzghXskWtrT1awclMP3+ZVcj7kwWfbQdMD
pcopxno321+lrWvZPaLQq+jiSgJOnj2T9TvMmEdBTNAqOT2TAzkQ9jK8M8puDWRe
8gfu0vPKg1ObrSRIdLBBAWyY8FFU1B9+3FGkYk5+n6uW70of78hTy85s3Gjv8Gao
HRTKdua06CoCdw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:35 2025 by rpki-client