Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d4bbd7-70af-449d-911b-7a87efc694c3/1/iem7qNYv9TwwohjE180YBgeK5lU.mft
File: iem7qNYv9TwwohjE180YBgeK5lU.mft (raw, json)
Hash identifier: tIh2LJgXK0/cAJv/xRCBeOPEIeMjZmQviXPpuGj6fuw=
Subject key identifier: 6F:94:B3:19:95:DB:0E:DA:5A:28:97:63:0D:21:AA:09:52:82:06:59
Authority key identifier: 89:E9:BB:A8:D6:2F:F5:3C:30:A2:18:C4:D7:CD:18:06:07:8A:E6:55
Certificate issuer: /CN=89e9bba8d62ff53c30a218c4d7cd1806078ae655
Certificate serial: 018C6B6B125C8F13E90645595CAEF42534BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iem7qNYv9TwwohjE180YBgeK5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d4bbd7-70af-449d-911b-7a87efc694c3/1/iem7qNYv9TwwohjE180YBgeK5lU.mft
Manifest number: 0554
Signing time: Fri 15 Dec 2023 03:00:28 +0000
Manifest this update: Fri 15 Dec 2023 03:00:28 +0000
Manifest next update: Sat 16 Dec 2023 03:00:28 +0000
Files and hashes: 1: iem7qNYv9TwwohjE180YBgeK5lU.crl (hash: YP/nxo8g58RwFjOBhLvxQ+VmoSh4bZsjh5Q7Dt85M+I=)
2: trLtFmew_fW9eU95wbPdSoQtUxI.roa (hash: LG+OK4LFmP6/gvWMMLbSt2wNB5fp5QRYAdHFD+anNFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6b:6b:12:5c:8f:13:e9:06:45:59:5c:ae:f4:25:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e9bba8d62ff53c30a218c4d7cd1806078ae655
Validity
Not Before: Dec 15 03:00:28 2023 GMT
Not After : Dec 16 03:00:28 2023 GMT
Subject: CN=6f94b31995db0eda5a2897630d21aa0952820659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:00:87:a6:c4:ac:86:b4:12:26:60:e1:6b:
f3:ca:10:ce:7f:60:51:e0:2b:84:51:09:1a:26:3d:
a8:34:89:19:e3:5d:7c:0c:72:3e:f9:05:67:ce:b6:
5c:71:3b:38:f2:c8:48:61:a3:8a:5f:53:ef:fa:ca:
0e:f8:84:bd:25:c4:67:18:37:0a:06:df:2a:b6:1e:
b1:07:d8:92:eb:5c:74:ca:79:99:ad:26:32:27:91:
58:77:4f:fd:ff:79:5e:11:93:1a:33:1a:89:a3:7b:
c6:bf:e8:d7:6c:05:e8:d8:1a:59:c2:f7:1f:04:96:
98:b0:58:1e:38:25:d2:4d:89:6c:6f:99:9c:62:03:
dd:26:38:24:2c:dc:56:0f:1e:84:06:9f:1c:80:df:
94:06:55:e2:39:fd:dd:55:8d:f4:7d:1d:11:52:b0:
e9:ac:08:70:ee:a6:28:ea:0c:e8:d4:df:1c:a4:e8:
a6:37:b7:0d:6c:bd:56:49:7b:0f:18:78:cb:e4:0a:
87:79:52:07:24:96:30:e3:63:33:d2:31:25:d6:05:
1a:e8:5e:c3:34:18:f0:47:51:45:18:8c:be:1c:a9:
82:c8:b6:71:28:e6:cd:c3:cd:2d:96:22:42:1b:8b:
84:6f:7a:ac:60:13:bf:33:38:24:55:7e:30:bd:13:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:94:B3:19:95:DB:0E:DA:5A:28:97:63:0D:21:AA:09:52:82:06:59
X509v3 Authority Key Identifier:
keyid:89:E9:BB:A8:D6:2F:F5:3C:30:A2:18:C4:D7:CD:18:06:07:8A:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iem7qNYv9TwwohjE180YBgeK5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d4bbd7-70af-449d-911b-7a87efc694c3/1/iem7qNYv9TwwohjE180YBgeK5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d4bbd7-70af-449d-911b-7a87efc694c3/1/iem7qNYv9TwwohjE180YBgeK5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8f:18:de:ef:9b:52:a3:94:3c:38:8f:6d:a2:31:16:a3:89:
5d:56:6e:32:20:57:41:43:eb:be:3c:94:2d:26:4e:2e:77:c2:
e5:e8:8a:06:42:d3:84:61:99:35:67:a3:45:71:c0:0b:26:e0:
8c:8b:a7:99:f0:24:d9:5a:55:f2:ec:2e:a8:f0:5d:6d:c5:db:
50:7c:74:78:46:89:26:e6:c1:f4:7a:93:75:39:ab:6a:bb:47:
1e:2e:a1:bb:9b:54:9d:28:e2:aa:c9:81:df:ea:6f:ef:32:6c:
f5:8d:19:09:88:24:e9:23:a9:8d:cd:67:49:fc:98:21:a8:88:
ed:e7:35:fa:f1:49:27:1d:38:52:37:14:1f:da:81:55:00:84:
1f:4b:4f:c8:ef:48:e9:ff:5f:69:f6:86:b2:b6:b5:99:a3:51:
7d:47:a8:2b:df:42:91:fc:a7:32:99:ba:9d:25:c6:86:88:b6:
11:2d:71:8d:33:1c:90:4d:4a:2a:06:de:96:3e:c9:1e:77:61:
d9:56:66:bc:8a:e4:6e:1d:a0:24:a6:31:d1:98:8d:14:9e:a6:
4b:6d:83:47:d0:ec:f5:22:41:86:46:a6:33:74:d3:a7:50:28:
6c:89:fd:77:38:33:e0:11:1d:24:d6:43:e7:33:e1:91:94:dd:
52:30:c6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxraxJcjxPpBkVZXK70JTS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTliYmE4ZDYyZmY1M2MzMGEyMThjNGQ3Y2QxODA2MDc4
YWU2NTUwHhcNMjMxMjE1MDMwMDI4WhcNMjMxMjE2MDMwMDI4WjAzMTEwLwYDVQQD
Eyg2Zjk0YjMxOTk1ZGIwZWRhNWEyODk3NjMwZDIxYWEwOTUyODIwNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+sAh6bErIa0EiZg4WvzyhDOf2BR
4CuEUQkaJj2oNIkZ4118DHI++QVnzrZccTs48shIYaOKX1Pv+soO+IS9JcRnGDcK
Bt8qth6xB9iS61x0ynmZrSYyJ5FYd0/9/3leEZMaMxqJo3vGv+jXbAXo2BpZwvcf
BJaYsFgeOCXSTYlsb5mcYgPdJjgkLNxWDx6EBp8cgN+UBlXiOf3dVY30fR0RUrDp
rAhw7qYo6gzo1N8cpOimN7cNbL1WSXsPGHjL5AqHeVIHJJYw42Mz0jEl1gUa6F7D
NBjwR1FFGIy+HKmCyLZxKObNw80tliJCG4uEb3qsYBO/MzgkVX4wvRNceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+UsxmV2w7aWiiXYw0hqglSggZZMB8GA1UdIwQY
MBaAFInpu6jWL/U8MKIYxNfNGAYHiuZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVtN3FOWXY5VHd3b2hqRTE4MFlCZ2VLNWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNGJiZDctNzBhZi00NDlkLTkxMWIt
N2E4N2VmYzY5NGMzLzEvaWVtN3FOWXY5VHd3b2hqRTE4MFlCZ2VLNWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kNGJiZDctNzBhZi00NDlkLTkxMWItN2E4N2VmYzY5NGMz
LzEvaWVtN3FOWXY5VHd3b2hqRTE4MFlCZ2VLNWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN48Y3u+b
UqOUPDiPbaIxFqOJXVZuMiBXQUPrvjyULSZOLnfC5eiKBkLThGGZNWejRXHACybg
jIunmfAk2VpV8uwuqPBdbcXbUHx0eEaJJubB9HqTdTmrartHHi6hu5tUnSjiqsmB
3+pv7zJs9Y0ZCYgk6SOpjc1nSfyYIaiI7ec1+vFJJx04UjcUH9qBVQCEH0tPyO9I
6f9fafaGsra1maNRfUeoK99CkfynMpm6nSXGhoi2ES1xjTMckE1KKgbelj7JHndh
2VZmvIrkbh2gJKYx0ZiNFJ6mS22DR9Ds9SJBhkamM3TTp1AobIn9dzgz4BEdJNZD
5zPhkZTdUjDGHA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:08:14 2025 by rpki-client