Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: fwX9MC6T2vyQvqxrkfnv3R3E+HRgo//U1H5T9A487Rs=
Subject key identifier: 0E:97:DA:F2:DD:70:DA:AE:33:C4:FE:33:AC:E4:4D:FA:4A:32:99:99
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 0195E1904FEE762B470F09828F81AE22970D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 11:01:25 +0000
Manifest this update: Sat 29 Mar 2025 11:01:25 +0000
Manifest next update: Sun 30 Mar 2025 11:01:25 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: uQdXGvpXNOE+U3q8CR4LQlFlmZcFVaaXfSFzpLNePf4=)
2: Rvoozr9-AEirIvl3H78yEjywI3M.roa (hash: C8PH+7JgTNI/2g3gAC+RhVDcD73858pmRmw+QrCbn9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:4f:ee:76:2b:47:0f:09:82:8f:81:ae:22:97:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Mar 29 11:01:25 2025 GMT
Not After : Mar 30 11:01:25 2025 GMT
Subject: CN=0e97daf2dd70daae33c4fe33ace44dfa4a329999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:21:31:b3:6c:3c:dd:b6:87:a3:c4:35:74:
5f:e4:6c:05:8f:4d:76:2a:79:39:9d:75:e5:ef:76:
21:90:52:bb:5f:11:0d:84:cf:a2:ab:f9:ac:fd:06:
b0:d6:c9:a3:47:a9:4f:b8:e6:1c:41:ff:0b:93:60:
a5:96:42:d0:3c:d6:15:3b:55:48:b9:44:f5:28:2f:
99:74:cb:18:dd:04:0e:71:5c:76:d8:c6:6c:d4:a0:
31:29:ea:72:6c:94:10:a7:b6:79:42:05:bd:87:da:
42:72:4f:b3:38:30:d3:04:05:28:4c:e7:eb:39:41:
8f:1e:61:61:f2:89:7a:7f:cf:2a:0a:b6:7f:81:fc:
ad:fc:9f:1b:79:ec:7b:1c:b9:5d:ab:be:c9:73:63:
7f:ee:10:7e:92:37:a8:1c:07:99:fd:d2:c9:5c:56:
b0:b5:1a:72:0a:2a:9e:79:fa:ec:8e:98:40:77:19:
dd:b5:6f:bc:ac:04:06:51:5f:24:a8:da:90:56:a0:
9a:f5:07:12:0b:6a:57:ed:e9:06:9e:cf:bd:2e:66:
16:48:f6:8e:78:f5:35:a6:ae:b6:1e:e3:f1:69:3e:
f9:83:9e:72:48:36:c4:3f:d7:c8:9c:e4:a8:de:f4:
50:f2:00:ac:f3:7f:58:1f:1d:6a:c7:80:2e:ed:d6:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:DA:F2:DD:70:DA:AE:33:C4:FE:33:AC:E4:4D:FA:4A:32:99:99
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:49:33:06:1c:72:1f:ec:cd:0d:b2:af:68:61:39:6c:ce:4f:
63:97:b4:f4:d7:c3:c3:b2:a6:e0:24:dd:9b:4b:8c:5a:d5:15:
cc:fc:00:d7:a5:da:fb:7c:c0:7f:84:e4:3d:9c:67:9e:d2:22:
67:33:59:03:16:da:61:5c:07:0f:26:f0:9b:d9:85:95:6e:55:
04:6c:49:4b:ed:59:3a:28:51:2c:18:a9:10:1a:b5:56:12:b5:
51:ec:93:be:aa:13:81:ab:1e:45:f8:9d:7f:ad:d7:50:89:16:
60:d5:8f:3e:82:56:54:92:f2:b9:67:94:d7:04:e1:74:28:46:
af:e7:97:0b:8a:51:ed:ff:72:d9:96:64:c1:16:6e:7d:49:54:
c4:ac:81:4f:b7:6d:b3:e2:2e:c5:56:a5:48:ae:d9:4d:74:22:
eb:65:51:01:6e:51:5b:3f:a0:0e:38:5c:4b:9d:3c:01:5b:d2:
d9:36:4c:f3:31:c8:33:6e:8c:ad:4d:51:6c:7f:03:8c:b9:06:
33:06:bd:33:54:2c:52:88:ae:71:de:a6:bc:1e:15:d9:03:53:
13:52:f1:3c:55:4e:31:a7:01:dd:f5:e2:4b:b6:34:b0:03:eb:
b6:10:3c:6f:d5:57:ba:f2:9b:7e:98:05:1f:0e:40:31:47:c7:
ac:64:94:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkE/uditHDwmCj4GuIpcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTIxOTZlZjExOTIyMTE1NWUxNjgzZjg5NjdkMjU0NjI1
ZGFlNzEwHhcNMjUwMzI5MTEwMTI1WhcNMjUwMzMwMTEwMTI1WjAzMTEwLwYDVQQD
EygwZTk3ZGFmMmRkNzBkYWFlMzNjNGZlMzNhY2U0NGRmYTRhMzI5OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbAhMbNsPN22h6PENXRf5GwFj012
Knk5nXXl73YhkFK7XxENhM+iq/ms/Qaw1smjR6lPuOYcQf8Lk2CllkLQPNYVO1VI
uUT1KC+ZdMsY3QQOcVx22MZs1KAxKepybJQQp7Z5QgW9h9pCck+zODDTBAUoTOfr
OUGPHmFh8ol6f88qCrZ/gfyt/J8beex7HLldq77Jc2N/7hB+kjeoHAeZ/dLJXFaw
tRpyCiqeefrsjphAdxndtW+8rAQGUV8kqNqQVqCa9QcSC2pX7ekGns+9LmYWSPaO
ePU1pq62HuPxaT75g55ySDbEP9fInOSo3vRQ8gCs839YHx1qx4Au7dbsCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6X2vLdcNquM8T+M6zkTfpKMpmZMB8GA1UdIwQY
MBaAFNWiGW7xGSIRVeFoP4ln0lRiXa5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMDYzMzctNjUxNy00MDBiLThjYjUt
N2FmYTBiY2Q3OTc2LzEvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMDYzMzctNjUxNy00MDBiLThjYjUtN2FmYTBiY2Q3OTc2
LzEvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUkzBhxy
H+zNDbKvaGE5bM5PY5e09NfDw7Km4CTdm0uMWtUVzPwA16Xa+3zAf4TkPZxnntIi
ZzNZAxbaYVwHDybwm9mFlW5VBGxJS+1ZOihRLBipEBq1VhK1UeyTvqoTgaseRfid
f63XUIkWYNWPPoJWVJLyuWeU1wThdChGr+eXC4pR7f9y2ZZkwRZufUlUxKyBT7dt
s+IuxValSK7ZTXQi62VRAW5RWz+gDjhcS508AVvS2TZM8zHIM26MrU1RbH8DjLkG
Mwa9M1QsUoiucd6mvB4V2QNTE1LxPFVOMacB3fXiS7Y0sAPrthA8b9VXuvKbfpgF
Hw5AMUfHrGSU8g==
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:09:47 2025 by rpki-client