Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File: IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier: g6E5rrbSLvod+DsIdwVIbsjCTbhFMORcCUXKzejsNZg=
Subject key identifier: CE:78:F9:2E:D6:4B:51:67:B5:EF:E2:FA:59:88:61:7A:3E:59:C2:E3
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 0195E0462F618348C6CD84516C14516D78B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number: 14CD
Signing time: Sat 29 Mar 2025 05:00:50 +0000
Manifest this update: Sat 29 Mar 2025 05:00:50 +0000
Manifest next update: Sun 30 Mar 2025 05:00:50 +0000
Files and hashes: 1: GJD8bfj7CDyDTZI2kUpgDK-LxFE.roa (hash: PT10MFBUB5fp5Yrzzf9K0jem6hIintZDoPzR+wZ8gys=)
2: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: /iVoe9OT7h1ZKZ7IhLGy5XaVN9Fat3iaiIW2Dcd2YCs=)
3: V7WmFU14m96odb0vJ_cBmWZw2cs.roa (hash: g1WGH66JpNY1RGeN31ErEvWouzTCVBle7InxeJwxaqk=)
4: eONOPQ5n9JaZY7K4E7eT4n3N7wU.roa (hash: ZCm89d0bFZWMMw8HJ3JqNzZcAFRBcFRa0dAA/NZScrg=)
5: uNRCg8RCGt-29v-27BZf_7lsI44.roa (hash: m/0/iSBb82vllm7VEgSPbCCwHT8ih3iEdCYjt2pJKGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:2f:61:83:48:c6:cd:84:51:6c:14:51:6d:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Mar 29 05:00:50 2025 GMT
Not After : Mar 30 05:00:50 2025 GMT
Subject: CN=ce78f92ed64b5167b5efe2fa5988617a3e59c2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:7c:38:1e:6f:1c:3a:30:f6:4b:85:0d:f3:
be:04:cf:2c:86:87:da:40:8e:a8:ec:ae:06:51:28:
b2:80:cb:2c:9e:72:b4:e7:d3:98:7e:62:75:35:9b:
2a:71:cc:72:d0:66:ae:74:ea:96:91:be:88:e4:e7:
38:a9:62:98:60:5a:c1:46:64:16:2c:9d:08:67:5c:
1d:fc:ca:7a:7b:87:9e:21:c6:1c:be:b2:01:5f:67:
2d:49:42:69:66:53:f4:9b:24:08:55:9b:24:e5:51:
18:77:18:65:21:3c:7f:c6:48:d6:e1:15:19:7e:b2:
65:cf:57:27:84:78:9e:2f:1e:6b:de:b0:82:e0:6f:
15:13:dc:fb:fa:65:8e:c5:cc:45:6a:31:f4:78:0c:
59:92:97:fc:72:61:64:47:e9:04:19:57:43:8d:b4:
b5:10:75:5b:d8:b2:3b:57:05:2a:29:be:00:71:35:
86:f2:08:aa:b3:92:e7:c4:b5:84:08:31:25:76:f7:
8d:dc:5c:ad:b5:29:8f:2d:f6:bf:97:cc:05:ce:9d:
85:bd:13:ce:e9:71:87:97:68:8f:24:96:87:75:9b:
98:a4:85:17:83:0f:c7:a2:52:3d:41:85:96:76:9e:
3d:8f:10:06:d4:31:e2:74:01:b5:01:87:4b:77:7f:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:F9:2E:D6:4B:51:67:B5:EF:E2:FA:59:88:61:7A:3E:59:C2:E3
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ab:9a:47:82:85:a4:2d:a7:fb:8f:0c:68:71:84:e0:59:b6:
cf:93:a0:29:2f:5c:7c:4f:ec:12:7d:87:be:b8:8f:de:0e:2c:
13:a8:f7:b1:8e:70:d2:25:c6:37:e1:d2:0d:e6:9a:fe:87:e6:
00:3f:09:0f:a5:1d:e7:db:88:82:dc:3d:0f:64:20:6b:ee:cb:
4a:14:e1:a1:27:66:89:04:a7:ef:c4:a0:0b:cc:86:96:3a:b2:
93:32:3e:7b:f4:0f:ea:6e:97:fa:a1:f3:ae:fb:28:d3:4b:74:
36:a2:a4:76:8f:55:f5:1e:09:0f:1e:90:6d:aa:23:01:17:09:
af:8c:d9:f3:0f:67:db:40:30:1d:09:b4:88:51:38:9d:1b:e4:
1f:44:92:8b:96:93:2f:79:f1:7c:47:1f:55:9a:a2:7a:88:6d:
e7:db:5d:79:87:ee:77:a6:cc:fe:41:af:28:e4:74:9a:fa:c9:
54:d0:c1:1a:15:67:65:32:cf:08:f7:a9:c7:1c:4b:8f:6f:29:
61:66:07:08:0e:4e:8e:5c:2b:40:a1:25:63:b3:ee:d3:44:85:
a5:8a:14:f0:dc:e5:41:c4:04:e7:42:88:fe:5e:01:02:b1:f4:
d3:10:82:6f:59:2d:df:ff:51:0f:ed:26:a1:46:97:22:ce:06:
4e:7a:e7:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRi9hg0jGzYRRbBRRbXi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzdjZGE3NWY0ZTE1ZTQ4NmRlZTVhNjUwMWNiZTIwMThi
YzBlMGYwHhcNMjUwMzI5MDUwMDUwWhcNMjUwMzMwMDUwMDUwWjAzMTEwLwYDVQQD
EyhjZTc4ZjkyZWQ2NGI1MTY3YjVlZmUyZmE1OTg4NjE3YTNlNTljMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+18OB5vHDow9kuFDfO+BM8shofa
QI6o7K4GUSiygMssnnK059OYfmJ1NZsqccxy0GaudOqWkb6I5Oc4qWKYYFrBRmQW
LJ0IZ1wd/Mp6e4eeIcYcvrIBX2ctSUJpZlP0myQIVZsk5VEYdxhlITx/xkjW4RUZ
frJlz1cnhHieLx5r3rCC4G8VE9z7+mWOxcxFajH0eAxZkpf8cmFkR+kEGVdDjbS1
EHVb2LI7VwUqKb4AcTWG8giqs5LnxLWECDEldveN3FyttSmPLfa/l8wFzp2FvRPO
6XGHl2iPJJaHdZuYpIUXgw/HolI9QYWWdp49jxAG1DHidAG1AYdLd3/I7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM54+S7WS1Fnte/i+lmIYXo+WcLjMB8GA1UdIwQY
MBaAFCLHzadfThXkht7lplAcviAYvA4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5Nzgt
NzUxYjE3ZDFjNDM3LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5NzgtNzUxYjE3ZDFjNDM3
LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANquaR4KF
pC2n+48MaHGE4Fm2z5OgKS9cfE/sEn2HvriP3g4sE6j3sY5w0iXGN+HSDeaa/ofm
AD8JD6Ud59uIgtw9D2Qga+7LShThoSdmiQSn78SgC8yGljqykzI+e/QP6m6X+qHz
rvso00t0NqKkdo9V9R4JDx6QbaojARcJr4zZ8w9n20AwHQm0iFE4nRvkH0SSi5aT
L3nxfEcfVZqieoht59tdeYfud6bM/kGvKOR0mvrJVNDBGhVnZTLPCPepxxxLj28p
YWYHCA5OjlwrQKElY7Pu00SFpYoU8NzlQcQE50KI/l4BArH00xCCb1kt3/9RD+0m
oUaXIs4GTnrnCQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:28:34 2025 by rpki-client