Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: BlRqJkY9ZKym+rv1L3nntUmeL5isw5GIzsfCa+iVD8U=
Subject key identifier: B0:4E:ED:97:B1:B6:F1:90:39:9A:F4:51:C8:2E:E9:45:D2:CC:A7:D7
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 0194BC3C5691B4EA05E5A4092238C2E27FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: IFpZrxJhl8wQt7Uq0qRwzYFnZJk.roa (hash: eoMtlnp1ZLGeorMDixEuqh0nobwLwy70mhjbtsKxD5o=)
2: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: dh7zWCKemUfkdXg93zt6ObP3cYU8yCrNHpeBsA3mE8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:91:b4:ea:05:e5:a4:09:22:38:c2:e2:7f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=b04eed97b1b6f190399af451c82ee945d2cca7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:3a:7a:f5:19:ab:33:9a:ff:89:96:56:32:
e4:9f:8c:e2:1f:d6:0d:f3:09:c9:b6:9b:4e:58:d0:
ed:41:35:6a:1f:44:89:47:70:4a:bd:29:a4:99:99:
6f:9d:0e:18:ea:f6:be:9e:cc:81:c4:27:d7:a0:86:
c0:37:0c:14:2d:92:69:fb:5c:bd:03:53:2b:bb:bb:
dd:71:42:08:5f:5f:dc:13:10:ea:cd:53:cc:e4:34:
6b:e0:58:20:43:29:68:19:7d:37:f8:05:eb:5d:07:
b1:4e:ea:2e:78:c0:e3:bf:02:86:cc:d5:76:53:71:
dc:fd:ef:3e:9a:16:f3:53:c1:88:78:4f:4e:5b:ad:
b2:3b:42:b0:b7:e2:e0:50:43:c1:92:b4:91:f2:1b:
3a:5e:5f:9a:53:08:f5:40:ec:dd:4b:7b:1d:90:23:
e9:af:71:44:e3:1b:ac:e7:dd:2f:37:0d:85:dd:1d:
c0:ad:18:fa:23:36:50:be:d8:17:58:78:c5:e8:ba:
d3:07:75:6d:c8:24:6a:67:60:47:11:5e:8f:81:a6:
2a:14:d4:2a:34:0b:ff:c7:b4:41:ee:cc:1e:8e:1f:
0d:ec:fa:a4:99:6f:4f:5b:29:1c:fd:6a:70:78:67:
b6:c4:1e:27:42:6b:63:09:90:05:56:9b:a3:f0:9c:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:ED:97:B1:B6:F1:90:39:9A:F4:51:C8:2E:E9:45:D2:CC:A7:D7
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:58:87:02:be:03:de:82:d1:29:c8:c1:f7:b6:c9:3e:4e:14:
d5:62:e2:81:25:6b:ba:fe:38:3a:b5:8f:ee:48:ab:b6:42:aa:
b8:f8:c3:a6:97:da:57:ef:d2:74:d0:6f:15:f3:e4:4b:3d:42:
c2:f4:52:0d:72:50:25:47:88:cd:2f:d0:93:c8:61:23:33:a6:
50:9a:4e:cc:8d:88:4e:bb:7e:6d:60:26:3c:8f:91:ec:a2:2e:
08:3c:97:c1:34:9c:b3:80:67:46:2f:3d:61:73:86:97:09:de:
8d:34:f3:8f:3b:e4:38:4c:dd:f6:41:be:6b:29:a7:6d:30:33:
c7:f4:31:ed:d8:5d:14:4f:2e:46:42:08:e3:38:7c:ff:40:21:
e5:1b:2f:38:27:68:40:c9:36:82:2b:9d:19:a1:25:da:d5:f6:
a2:fb:09:fd:f7:1a:55:f9:00:ff:2b:df:a3:97:7d:89:46:4f:
42:bd:0c:11:29:5a:0b:ef:53:31:cd:a3:c8:d3:66:53:3b:02:
c0:87:85:5a:8d:0d:77:0b:f0:53:96:2d:9a:78:48:5c:e4:80:
13:87:b2:2f:60:ac:0f:53:fe:fa:f0:6f:ea:ac:92:80:31:91:
f8:5f:6e:55:59:74:2d:8d:bd:a5:81:c9:1e:b1:51:88:52:b7:
75:e4:be:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFaRtOoF5aQJIjjC4n+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOTNlMzgzYjJjYzUyZDVlY2EzMGZlYjEyNjk3NTkzYzlj
Nzg4YTAwHhcNMjUwMTMxMTIwMDU4WhcNMjUwMjAxMTIwMDU4WjAzMTEwLwYDVQQD
EyhiMDRlZWQ5N2IxYjZmMTkwMzk5YWY0NTFjODJlZTk0NWQyY2NhN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXA6evUZqzOa/4mWVjLkn4ziH9YN
8wnJtptOWNDtQTVqH0SJR3BKvSmkmZlvnQ4Y6va+nsyBxCfXoIbANwwULZJp+1y9
A1Mru7vdcUIIX1/cExDqzVPM5DRr4FggQyloGX03+AXrXQexTuoueMDjvwKGzNV2
U3Hc/e8+mhbzU8GIeE9OW62yO0Kwt+LgUEPBkrSR8hs6Xl+aUwj1QOzdS3sdkCPp
r3FE4xus590vNw2F3R3ArRj6IzZQvtgXWHjF6LrTB3VtyCRqZ2BHEV6PgaYqFNQq
NAv/x7RB7swejh8N7PqkmW9PWykc/WpweGe2xB4nQmtjCZAFVpuj8JykKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBO7ZextvGQOZr0Ucgu6UXSzKfXMB8GA1UdIwQY
MBaAFCCT44OyzFLV7KMP6xJpdZPJx4igMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2Mt
MDQ1MzRlYmNlMzVlLzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2MtMDQ1MzRlYmNlMzVl
LzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1iHAr4D
3oLRKcjB97bJPk4U1WLigSVruv44OrWP7kirtkKquPjDppfaV+/SdNBvFfPkSz1C
wvRSDXJQJUeIzS/Qk8hhIzOmUJpOzI2ITrt+bWAmPI+R7KIuCDyXwTScs4BnRi89
YXOGlwnejTTzjzvkOEzd9kG+aymnbTAzx/Qx7dhdFE8uRkII4zh8/0Ah5RsvOCdo
QMk2giudGaEl2tX2ovsJ/fcaVfkA/yvfo5d9iUZPQr0MESlaC+9TMc2jyNNmUzsC
wIeFWo0NdwvwU5YtmnhIXOSAE4eyL2CsD1P++vBv6qySgDGR+F9uVVl0LY29pYHJ
HrFRiFK3deS+Ng==
-----END CERTIFICATE-----
Generated at Sat May 3 22:12:10 2025 by rpki-client