Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier: u1R7jGr0W76+mXryziqYqSf0NLqLVQcEG70l828r8rk=
Subject key identifier: 23:3A:97:C1:36:C3:FC:CC:0C:EF:6F:98:20:31:BA:F5:0E:D0:CE:21
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 0195DFD8E62E8BC7F5EE9FE8DF2102014339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number: 03F5
Signing time: Sat 29 Mar 2025 03:01:28 +0000
Manifest this update: Sat 29 Mar 2025 03:01:28 +0000
Manifest next update: Sun 30 Mar 2025 03:01:28 +0000
Files and hashes: 1: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: uxT1IdPq7xWdiqX6Y1jTaUWqJdAxx77X5p7c9t4LWaw=)
2: r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa (hash: wjEomxk07ox6hhu7Ke9tXLk+PxIAdxXrhUQiAqx1wcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:e6:2e:8b:c7:f5:ee:9f:e8:df:21:02:01:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Mar 29 03:01:28 2025 GMT
Not After : Mar 30 03:01:28 2025 GMT
Subject: CN=233a97c136c3fccc0cef6f982031baf50ed0ce21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:2f:6d:6e:9b:8a:e9:e9:55:1b:b1:85:35:
ed:e5:1e:e4:28:7f:76:79:ab:5b:35:50:4a:c0:20:
1b:dd:a1:44:a4:cc:a0:2f:d4:b1:a3:f4:47:65:1b:
fb:45:ff:d1:1a:8d:4a:3d:ef:1d:c5:38:c0:bf:35:
e1:02:1e:ac:dc:1e:10:28:ad:78:b6:25:1b:b9:c7:
7c:a9:3a:29:50:e9:59:ef:17:62:43:e7:01:a3:b3:
95:6d:88:e0:3e:57:84:e3:c7:ef:d0:5e:53:5e:82:
24:25:9a:8f:f5:20:58:4b:69:80:6e:12:c9:a0:dd:
e2:2b:6c:b1:1b:af:2c:af:4a:0d:d8:47:fe:d0:bb:
18:a8:09:6f:09:ff:08:77:24:39:69:90:dc:64:25:
25:24:6a:da:d1:ff:48:75:1a:09:69:1f:9c:0f:8b:
36:29:5f:0d:37:fc:40:71:b4:0f:bd:51:80:87:aa:
31:8f:ea:5f:40:04:a3:91:5d:5d:2e:c7:8c:4e:98:
8b:f1:a1:91:f5:76:0c:ee:7e:62:74:24:a7:c7:a1:
5a:fa:07:48:09:34:b8:84:23:8e:7c:a5:9d:46:f6:
8e:4d:bd:ae:25:00:3c:91:d2:19:17:e7:19:98:80:
fe:5d:c6:9f:e6:35:f1:53:32:32:c3:94:27:36:bd:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3A:97:C1:36:C3:FC:CC:0C:EF:6F:98:20:31:BA:F5:0E:D0:CE:21
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c4:75:c5:9e:b6:9d:c5:27:7a:b9:b7:11:57:82:a5:61:83:
c7:3e:da:68:cc:dd:d4:6f:9e:c1:cc:85:7d:b1:f9:f0:fa:1f:
db:be:61:3f:63:ca:32:c0:9d:6a:1f:ab:c7:73:bc:fe:e4:60:
45:96:e8:73:64:58:fc:db:c7:45:58:24:78:da:37:82:55:42:
68:46:30:d4:f5:4e:15:1d:38:a5:22:ef:bd:19:49:c4:7f:f6:
da:07:63:dc:b0:c0:20:c8:ad:57:d4:7f:93:a1:86:18:73:9a:
1a:db:29:18:5c:b3:e0:87:ff:80:15:03:f9:85:24:41:32:aa:
55:65:89:5b:69:69:2b:9d:d7:62:87:d0:59:9a:66:a6:b3:df:
19:09:25:9b:10:01:65:02:5c:a3:e6:8d:06:17:9e:d4:5d:f7:
51:ab:ef:98:39:88:f3:6d:c6:d5:28:13:79:d5:2f:26:41:d4:
7f:8b:ae:5b:24:0b:66:0d:ab:9c:87:5b:d6:a2:c9:4e:86:a6:
68:8c:d2:70:69:88:85:f2:fc:41:cb:45:19:fa:10:a5:6e:44:
94:23:24:8c:de:5f:75:e7:df:a6:11:82:31:61:2e:ce:38:79:
5d:8c:79:d6:f6:f8:d9:d3:a4:7c:b7:ed:80:2f:c5:99:3c:36:
d9:2d:6e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2OYui8f17p/o3yECAUM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjJjYjA0OTMyMDYwNTY5Yzk3MjA2ODdkZWQ4OTFjMzRl
YmI2ZDUwHhcNMjUwMzI5MDMwMTI4WhcNMjUwMzMwMDMwMTI4WjAzMTEwLwYDVQQD
EygyMzNhOTdjMTM2YzNmY2NjMGNlZjZmOTgyMDMxYmFmNTBlZDBjZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkgvbW6biunpVRuxhTXt5R7kKH92
eatbNVBKwCAb3aFEpMygL9Sxo/RHZRv7Rf/RGo1KPe8dxTjAvzXhAh6s3B4QKK14
tiUbucd8qTopUOlZ7xdiQ+cBo7OVbYjgPleE48fv0F5TXoIkJZqP9SBYS2mAbhLJ
oN3iK2yxG68sr0oN2Ef+0LsYqAlvCf8IdyQ5aZDcZCUlJGra0f9IdRoJaR+cD4s2
KV8NN/xAcbQPvVGAh6oxj+pfQASjkV1dLseMTpiL8aGR9XYM7n5idCSnx6Fa+gdI
CTS4hCOOfKWdRvaOTb2uJQA8kdIZF+cZmID+Xcaf5jXxUzIyw5QnNr10aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM6l8E2w/zMDO9vmCAxuvUO0M4hMB8GA1UdIwQY
MBaAFIiyywSTIGBWnJcgaH3tiRw067bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMt
NGFkOGRhNDdjOWE2LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMtNGFkOGRhNDdjOWE2
LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8R1xZ62
ncUnerm3EVeCpWGDxz7aaMzd1G+ewcyFfbH58Pof275hP2PKMsCdah+rx3O8/uRg
RZboc2RY/NvHRVgkeNo3glVCaEYw1PVOFR04pSLvvRlJxH/22gdj3LDAIMitV9R/
k6GGGHOaGtspGFyz4If/gBUD+YUkQTKqVWWJW2lpK53XYofQWZpmprPfGQklmxAB
ZQJco+aNBhee1F33UavvmDmI823G1SgTedUvJkHUf4uuWyQLZg2rnIdb1qLJToam
aIzScGmIhfL8QctFGfoQpW5ElCMkjN5fdeffphGCMWEuzjh5XYx51vb42dOkfLft
gC/FmTw22S1u0w==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:38 2025 by rpki-client