Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: 454HdMBtArHI7OI74ECBwdm3R+PLtVBUDIwX8G0KPGw=
Subject key identifier: 37:BA:20:A3:1A:D4:EE:29:3D:78:24:6B:9A:9B:A4:32:2E:FA:C1:9B
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 0194BBCE2707CC0596C495F2595C2C7008FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: VQBLa4tnbGn+LYHPWPRtVuZFVoWVlKn9XskgkP46HqM=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:27:07:cc:05:96:c4:95:f2:59:5c:2c:70:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=37ba20a31ad4ee293d78246b9a9ba4322efac19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:d9:51:af:c4:a9:68:f1:ce:78:53:6b:4a:
11:9c:7a:6e:48:69:c0:1a:32:e3:91:22:5d:19:eb:
76:e9:d1:b0:6e:40:56:4e:49:18:bb:3e:ea:e7:fc:
b3:8b:e3:b6:db:d5:74:82:cd:d5:4d:fb:09:b8:b7:
bf:6f:79:8f:05:b0:31:ac:e2:59:49:ed:d7:e1:2f:
5f:dd:41:09:cf:d0:63:e1:a0:c7:12:54:94:9d:2f:
16:0e:c0:af:5c:d3:82:aa:36:1b:d9:c5:35:03:10:
81:8c:f4:a0:3a:6b:08:da:9e:18:a2:3d:ca:4a:86:
9e:35:11:52:de:35:03:9c:6b:3a:56:8a:4d:67:08:
7a:e9:74:e4:e9:81:80:2e:0d:7d:68:41:f8:33:eb:
66:33:7f:ff:f2:8f:ab:51:42:b5:57:2c:de:13:fa:
2b:d1:21:ed:f3:da:6f:32:a0:b6:b7:4c:da:6e:11:
3b:cb:6c:ab:46:75:20:1c:1d:c4:bd:91:78:25:b6:
5c:a2:19:05:34:5c:de:f4:29:ef:0d:fd:39:77:18:
1f:03:ee:ed:80:a0:cc:8d:9b:09:3b:59:87:d6:8d:
c2:4f:9e:89:85:5a:71:12:bb:3d:c3:c6:23:7f:9e:
74:d4:57:6d:9f:19:fa:7f:2e:30:16:92:fe:28:c3:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BA:20:A3:1A:D4:EE:29:3D:78:24:6B:9A:9B:A4:32:2E:FA:C1:9B
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:3f:67:de:23:3b:67:76:b8:4f:56:33:22:99:4f:2a:ac:
ef:96:ff:ff:21:eb:7e:37:d5:6e:75:aa:46:58:06:57:65:34:
d2:4d:c2:0f:19:ff:dc:57:dd:99:da:ed:39:66:01:e3:c5:fa:
93:12:6b:19:26:c5:0d:63:68:1f:7e:90:c4:0a:5c:e0:18:72:
ae:64:dd:16:38:26:b4:b5:db:5f:84:5b:5a:63:ab:ad:9a:de:
87:03:80:78:e8:91:31:43:00:29:0d:1b:77:bd:32:07:ea:a4:
9d:ae:bb:bd:5f:c1:10:ac:20:88:33:4b:77:38:5c:9e:3f:bd:
cd:c9:af:ec:d0:f5:84:9d:eb:e7:61:48:e4:79:87:cc:c5:3c:
f0:77:5f:b3:57:b3:86:ea:7c:05:37:bb:15:c4:65:c5:b0:9f:
5b:5d:a2:a6:a3:f5:fc:db:de:5c:13:c0:50:03:fa:ac:89:99:
11:e8:62:bc:a2:15:16:b1:ca:ae:2a:35:42:85:03:91:d7:88:
7f:54:34:9e:db:29:b6:2d:02:9a:8d:22:4c:7b:12:7e:2b:81:
16:57:07:5b:71:fa:0e:ff:ad:45:90:75:4c:e5:5b:5e:41:0d:
8c:8f:f6:59:c3:56:09:aa:7a:58:de:e1:e6:34:6e:97:ac:3d:
b9:74:50:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zicHzAWWxJXyWVwscAj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy
ZGUyMGIwHhcNMjUwMTMxMTAwMDM3WhcNMjUwMjAxMTAwMDM3WjAzMTEwLwYDVQQD
EygzN2JhMjBhMzFhZDRlZTI5M2Q3ODI0NmI5YTliYTQzMjJlZmFjMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnrZUa/EqWjxznhTa0oRnHpuSGnA
GjLjkSJdGet26dGwbkBWTkkYuz7q5/yzi+O229V0gs3VTfsJuLe/b3mPBbAxrOJZ
Se3X4S9f3UEJz9Bj4aDHElSUnS8WDsCvXNOCqjYb2cU1AxCBjPSgOmsI2p4Yoj3K
SoaeNRFS3jUDnGs6VopNZwh66XTk6YGALg19aEH4M+tmM3//8o+rUUK1VyzeE/or
0SHt89pvMqC2t0zabhE7y2yrRnUgHB3EvZF4JbZcohkFNFze9CnvDf05dxgfA+7t
gKDMjZsJO1mH1o3CT56JhVpxErs9w8Yjf5501Fdtnxn6fy4wFpL+KMMLfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe6IKMa1O4pPXgka5qbpDIu+sGbMB8GA1UdIwQY
MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt
M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0
LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbA/Z94j
O2d2uE9WMyKZTyqs75b//yHrfjfVbnWqRlgGV2U00k3CDxn/3FfdmdrtOWYB48X6
kxJrGSbFDWNoH36QxApc4BhyrmTdFjgmtLXbX4RbWmOrrZrehwOAeOiRMUMAKQ0b
d70yB+qkna67vV/BEKwgiDNLdzhcnj+9zcmv7ND1hJ3r52FI5HmHzMU88Hdfs1ez
hup8BTe7FcRlxbCfW12ipqP1/NveXBPAUAP6rImZEehivKIVFrHKrio1QoUDkdeI
f1Q0ntspti0Cmo0iTHsSfiuBFlcHW3H6Dv+tRZB1TOVbXkENjI/2WcNWCap6WN7h
5jRul6w9uXRQlQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:16 2025 by rpki-client