Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: yaEbasqKDt0rODgOeCjvk3Oaw6hVKIjo0yxnSAevoOg=
Subject key identifier: 53:9D:7D:46:20:9F:D5:07:6F:A1:46:DD:89:81:C2:8F:DC:66:39:24
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 0195DFD912DF8D87C1ECC0DBC0893BDCC134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 14CE
Signing time: Sat 29 Mar 2025 03:01:39 +0000
Manifest this update: Sat 29 Mar 2025 03:01:39 +0000
Manifest next update: Sun 30 Mar 2025 03:01:39 +0000
Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: tawdM87Udu0RuqlE9QJ1bva2JNGH+N1AqAxZHbbDh34=)
3: PxoTHEdjjpKU7nFnIp_dVD-FKVs.roa (hash: qS6lJqb4wx7qjtbMuBVvEV9SkrI1ddneyAf2i6qSLdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:12:df:8d:87:c1:ec:c0:db:c0:89:3b:dc:c1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Mar 29 03:01:39 2025 GMT
Not After : Mar 30 03:01:39 2025 GMT
Subject: CN=539d7d46209fd5076fa146dd8981c28fdc663924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:07:7e:56:c9:bf:c8:41:61:13:a9:e9:73:
94:0a:03:15:cb:f1:f5:f7:8f:ee:86:22:a6:de:55:
2c:d3:2c:07:24:ac:3f:ca:6b:9f:07:d6:39:2b:fa:
a6:d9:5a:ea:a7:3b:0f:05:f5:ed:3d:4d:e7:0b:72:
13:f4:12:1b:31:d2:95:3f:37:2b:be:a7:07:2a:ad:
c5:36:d3:64:57:0d:79:d0:c3:b7:6b:59:58:d7:67:
c8:72:0d:89:f6:73:d1:f8:bf:86:86:5a:01:50:98:
90:6b:1e:96:c6:c8:5d:df:8b:fe:83:1d:1a:ea:a3:
67:a4:85:32:05:7f:49:57:75:70:aa:35:20:fa:3f:
52:95:8e:9d:ec:74:ac:80:2a:57:87:91:4e:17:34:
a7:64:33:69:ba:ea:8d:5d:07:3f:c1:2f:36:19:8d:
22:ec:f6:d3:0c:b5:6c:4a:25:fe:77:2e:92:37:03:
89:26:66:72:bc:94:2c:13:c5:4f:f8:7e:43:87:f7:
da:c5:41:6a:5f:5b:cd:ed:8a:c0:9d:9b:1e:ca:50:
98:bd:0d:97:83:aa:ed:eb:04:09:c5:5b:a9:c1:ce:
53:af:62:cb:bf:3d:97:fa:92:50:1c:d7:4d:0f:f2:
72:01:eb:08:a3:8e:23:c2:65:39:5d:a9:fc:f8:fa:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:7D:46:20:9F:D5:07:6F:A1:46:DD:89:81:C2:8F:DC:66:39:24
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d3:48:76:a2:c8:ec:43:bb:2b:5c:13:86:1b:87:88:4a:d4:
5c:33:90:b9:67:5e:1f:15:6d:b8:f8:f0:7a:1f:de:21:ef:25:
5e:ff:2b:b3:d6:26:3b:38:94:32:8c:a5:d3:c2:78:74:fa:66:
04:99:bc:4e:8a:f1:fc:20:91:55:e7:63:9e:34:e8:4a:b4:0e:
7c:9b:5e:29:a9:4b:44:de:96:f6:7f:bc:fb:55:09:24:b0:f2:
00:98:57:d9:08:7b:31:b6:f4:1a:fb:29:65:87:51:5d:c5:35:
02:59:ed:51:a5:71:72:47:5d:28:49:0e:43:16:cc:8f:b6:83:
5c:3f:fe:c6:a0:c4:8b:cb:65:16:05:7e:26:e6:e3:54:00:48:
49:fe:1f:cd:a4:06:6b:b3:5e:d2:e7:fd:70:3f:08:0b:bd:87:
ee:37:31:45:3c:85:30:b7:d5:a4:12:a5:2d:fb:ca:65:ef:b4:
a2:0d:ca:20:93:6d:7f:3b:9f:ab:0c:2b:77:d9:85:b7:7c:d0:
93:fa:ec:e6:c9:7e:77:1c:ba:e2:51:ee:46:a7:0e:05:71:c3:
85:9e:32:cc:1c:df:23:e2:82:83:29:2e:ea:44:d7:47:19:af:
59:aa:49:70:37:13:53:8c:59:33:32:73:3b:27:94:95:b3:9d:
3e:4b:f1:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2RLfjYfB7MDbwIk73ME0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMzk0YTEyNWZhM2FjZTBjNDdhNmZlMzRmNDA4NmI0ZDNi
YTU1ODgwHhcNMjUwMzI5MDMwMTM5WhcNMjUwMzMwMDMwMTM5WjAzMTEwLwYDVQQD
Eyg1MzlkN2Q0NjIwOWZkNTA3NmZhMTQ2ZGQ4OTgxYzI4ZmRjNjYzOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdcHflbJv8hBYROp6XOUCgMVy/H1
94/uhiKm3lUs0ywHJKw/ymufB9Y5K/qm2VrqpzsPBfXtPU3nC3IT9BIbMdKVPzcr
vqcHKq3FNtNkVw150MO3a1lY12fIcg2J9nPR+L+GhloBUJiQax6Wxshd34v+gx0a
6qNnpIUyBX9JV3VwqjUg+j9SlY6d7HSsgCpXh5FOFzSnZDNpuuqNXQc/wS82GY0i
7PbTDLVsSiX+dy6SNwOJJmZyvJQsE8VP+H5Dh/faxUFqX1vN7YrAnZseylCYvQ2X
g6rt6wQJxVupwc5Tr2LLvz2X+pJQHNdND/JyAesIo44jwmU5Xan8+PrZMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOdfUYgn9UHb6FG3YmBwo/cZjkkMB8GA1UdIwQY
MBaAFCM5ShJfo6zgxHpv409AhrTTulWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2Et
ZDQzMjA3ZDYyZGZlLzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2EtZDQzMjA3ZDYyZGZl
LzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9NIdqLI
7EO7K1wThhuHiErUXDOQuWdeHxVtuPjweh/eIe8lXv8rs9YmOziUMoyl08J4dPpm
BJm8Torx/CCRVedjnjToSrQOfJteKalLRN6W9n+8+1UJJLDyAJhX2Qh7Mbb0Gvsp
ZYdRXcU1AlntUaVxckddKEkOQxbMj7aDXD/+xqDEi8tlFgV+JubjVABISf4fzaQG
a7Ne0uf9cD8IC72H7jcxRTyFMLfVpBKlLfvKZe+0og3KIJNtfzufqwwrd9mFt3zQ
k/rs5sl+dxy64lHuRqcOBXHDhZ4yzBzfI+KCgyku6kTXRxmvWapJcDcTU4xZMzJz
OyeUlbOdPkvxAg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:08 2025 by rpki-client