Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft
File: IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft (raw, json)
Hash identifier: lW8kZ5rbcYdwkTenm43kJW2rxjru0XpxLTAmmnuaoVQ=
Subject key identifier: 3D:A4:69:40:5B:0A:66:58:37:C1:3D:C6:C7:44:83:92:9C:EB:77:CC
Authority key identifier: 21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
Certificate issuer: /CN=219f8d1fba35d49835d42fcd2294008fa741da8f
Certificate serial: 018D0BEC4FE748441C732DE974CA02E29471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft
Manifest number: 0943
Signing time: Mon 15 Jan 2024 07:00:52 +0000
Manifest this update: Mon 15 Jan 2024 07:00:52 +0000
Manifest next update: Tue 16 Jan 2024 07:00:52 +0000
Files and hashes: 1: IZ-NH7o11Jg11C_NIpQAj6dB2o8.crl (hash: UuKt43CXUL6c+7GxsYKyknZk/Aj6LlyGIC/NVaDaih0=)
2: QUTYy5DDss2sqMvWr4nwKY0bOlQ.roa (hash: uC04tuGEQAyOoRhUlpjp4+H/dZYIrT4mhF7SihoWXcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:ec:4f:e7:48:44:1c:73:2d:e9:74:ca:02:e2:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219f8d1fba35d49835d42fcd2294008fa741da8f
Validity
Not Before: Jan 15 07:00:52 2024 GMT
Not After : Jan 16 07:00:52 2024 GMT
Subject: CN=3da469405b0a665837c13dc6c74483929ceb77cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:b0:43:cc:b0:ac:b7:50:bb:2f:21:e0:2e:
94:20:e9:1c:50:8b:1b:94:cf:c7:fe:63:bb:79:78:
67:ef:f7:bd:19:81:2d:a9:57:7f:e9:a2:12:bb:e3:
37:a3:87:ee:6a:93:8b:03:09:c3:b8:40:a0:b8:8a:
a4:15:e5:22:67:28:21:c0:d7:b2:54:30:d9:5e:14:
2b:9a:22:f1:d7:c0:fc:1e:70:1e:15:8e:06:db:8e:
bf:58:bd:a2:da:89:47:f1:08:83:2e:3c:15:ec:eb:
3a:b2:77:93:f0:88:8a:a7:f8:f4:88:ad:49:b0:1a:
17:12:f9:3e:f0:57:fe:06:a5:af:77:30:97:ae:e8:
ee:d6:5a:0b:1f:75:99:78:0e:23:b3:c0:9a:f4:9d:
42:8d:cf:62:32:b3:eb:e7:de:96:e1:6b:d5:05:13:
c5:bf:c7:2d:ae:48:85:d0:df:a5:fc:f4:07:96:c5:
74:af:2f:02:10:d0:c3:49:f0:f7:21:27:55:b9:dc:
0f:dd:8d:ff:48:7d:83:27:00:a8:20:0c:1a:b5:34:
01:f8:ef:d4:6f:9c:75:4c:d2:2b:30:d2:ea:0d:7f:
6e:2d:8b:24:d4:02:b6:12:7f:cf:e9:cf:0e:68:20:
43:cd:c9:f6:6d:a4:6d:15:bc:ee:91:e8:30:4c:14:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A4:69:40:5B:0A:66:58:37:C1:3D:C6:C7:44:83:92:9C:EB:77:CC
X509v3 Authority Key Identifier:
keyid:21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ab:e3:a5:e3:67:4d:02:21:53:f2:27:0f:aa:c3:1b:fe:d1:
26:a9:9e:93:17:d8:e7:3b:ec:8b:64:d7:1e:12:f2:5b:52:6a:
22:f4:d6:f5:8d:75:a6:1a:62:81:cf:e5:d7:ed:3d:88:a5:fc:
5b:20:f0:b4:d4:42:62:f0:71:e8:46:fd:7e:68:28:43:20:ee:
9f:1d:2a:93:65:d4:d6:ba:85:14:95:ed:93:61:91:67:e6:c5:
68:a6:ee:8c:3d:45:88:5d:a6:ac:61:8b:68:ea:de:e4:3a:24:
dc:5d:60:cf:74:24:5a:b1:25:6a:44:95:19:cd:73:8f:6d:53:
1f:6b:a9:ca:2c:0e:58:a7:93:b4:ae:e5:3b:a0:80:a8:47:f7:
b8:48:ad:60:f1:20:4d:05:b9:ca:a8:c5:ce:95:e1:f4:c5:dd:
01:1f:47:51:76:cc:9c:b8:af:d8:41:11:c2:bc:2c:bf:a1:fc:
25:42:64:fe:05:94:8b:f3:70:82:56:1f:08:c0:a7:31:1f:33:
4b:16:18:ae:d4:48:c1:58:4b:5a:41:0d:62:71:6a:85:a1:a7:
3d:c9:97:e9:a0:69:10:d3:ad:db:00:c5:58:8f:7d:65:79:8b:
15:3c:d7:b9:5b:6a:8f:c3:5d:1b:2c:36:00:ad:b0:db:ae:ca:
8e:7e:4c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY0L7E/nSEQccy3pdMoC4pRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOWY4ZDFmYmEzNWQ0OTgzNWQ0MmZjZDIyOTQwMDhmYTc0
MWRhOGYwHhcNMjQwMTE1MDcwMDUyWhcNMjQwMTE2MDcwMDUyWjAzMTEwLwYDVQQD
EygzZGE0Njk0MDViMGE2NjU4MzdjMTNkYzZjNzQ0ODM5MjljZWI3N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsWwQ8ywrLdQuy8h4C6UIOkcUIsb
lM/H/mO7eXhn7/e9GYEtqVd/6aISu+M3o4fuapOLAwnDuECguIqkFeUiZyghwNey
VDDZXhQrmiLx18D8HnAeFY4G246/WL2i2olH8QiDLjwV7Os6sneT8IiKp/j0iK1J
sBoXEvk+8Ff+BqWvdzCXruju1loLH3WZeA4js8Ca9J1Cjc9iMrPr596W4WvVBRPF
v8ctrkiF0N+l/PQHlsV0ry8CENDDSfD3ISdVudwP3Y3/SH2DJwCoIAwatTQB+O/U
b5x1TNIrMNLqDX9uLYsk1AK2En/P6c8OaCBDzcn2baRtFbzukegwTBSfdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2kaUBbCmZYN8E9xsdEg5Kc63fMMB8GA1UdIwQY
MBaAFCGfjR+6NdSYNdQvzSKUAI+nQdqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVotTkg3bzExSmcxMUNfTklwUUFqNmRCMm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNjdkMDItNTJiNi00M2M0LWJmMDEt
ZWNiNWZlY2Y3ZDBlLzEvSVotTkg3bzExSmcxMUNfTklwUUFqNmRCMm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wNjdkMDItNTJiNi00M2M0LWJmMDEtZWNiNWZlY2Y3ZDBl
LzEvSVotTkg3bzExSmcxMUNfTklwUUFqNmRCMm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKvjpeNn
TQIhU/InD6rDG/7RJqmekxfY5zvsi2TXHhLyW1JqIvTW9Y11phpigc/l1+09iKX8
WyDwtNRCYvBx6Eb9fmgoQyDunx0qk2XU1rqFFJXtk2GRZ+bFaKbujD1FiF2mrGGL
aOre5Dok3F1gz3QkWrElakSVGc1zj21TH2upyiwOWKeTtK7lO6CAqEf3uEitYPEg
TQW5yqjFzpXh9MXdAR9HUXbMnLiv2EERwrwsv6H8JUJk/gWUi/NwglYfCMCnMR8z
SxYYrtRIwVhLWkENYnFqhaGnPcmX6aBpENOt2wDFWI99ZXmLFTzXuVtqj8NdGyw2
AK2w267Kjn5MXA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:41 2025 by rpki-client