Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.mft
File: iyiVvqrabS-VfH7UMP-Ea3682xs.mft (raw, json)
Hash identifier: NK97WGT6QkTcG2jv6DRw8NGbDnoeh/5GCq9+Q62TR/c=
Subject key identifier: D0:4C:D6:E2:40:A6:3E:CB:51:04:4B:4C:35:6F:52:12:8C:F9:45:47
Authority key identifier: 8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
Certificate issuer: /CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Certificate serial: 0188555F25B9C3B41C52644950ABB5E47D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.mft
Manifest number: 0A9C
Signing time: Fri 26 May 2023 00:04:38 +0000
Manifest this update: Fri 26 May 2023 00:04:38 +0000
Manifest next update: Sat 27 May 2023 00:04:38 +0000
Files and hashes: 1: 23dSzTsAcQKsSPYTWD2bFFJgjbI.roa (hash: Yb1Q/BOpVvmS2Uv8SQpIpXqZDxRf/griLbFDbv6XtMY=)
2: clebOlYme53FP6KNzHCtuu1lZs0.roa (hash: oDlbf6+QAnLKqLzijrlr/cIcJMlkfwJ18lC8gJGC7dU=)
3: iyiVvqrabS-VfH7UMP-Ea3682xs.crl (hash: gJh82iX3KtZ2P4UBja26mHfOX6BveI/YlRyhb0Gn8Bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:55:5f:25:b9:c3:b4:1c:52:64:49:50:ab:b5:e4:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Validity
Not Before: May 26 00:04:38 2023 GMT
Not After : May 27 00:04:38 2023 GMT
Subject: CN=d04cd6e240a63ecb51044b4c356f52128cf94547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:db:41:ab:72:a6:c2:a5:e0:be:ea:fc:c8:
47:74:4d:10:c1:c9:ac:7a:9e:b2:33:1e:70:94:f4:
a9:02:1e:ab:1a:a3:9f:51:cf:d6:48:1b:7b:b4:2d:
0b:4b:c4:28:ac:90:57:ce:c5:a2:04:b3:2c:5d:74:
d7:c3:0d:f7:04:1c:d5:9b:cb:a9:31:c7:70:0b:45:
37:6c:0c:fe:91:54:41:df:da:d3:c9:52:03:13:d8:
97:fc:29:58:be:52:8d:dd:c6:a3:45:e5:79:d6:cb:
02:72:3f:4a:49:57:40:df:d6:ef:4c:ad:0d:e4:72:
0c:3f:46:34:86:80:59:6b:38:f0:a6:ed:94:79:7e:
74:cc:5a:51:67:b9:71:91:6e:b4:1f:38:3c:f0:20:
96:ae:16:31:f4:36:9d:bd:40:ff:f6:76:e9:d8:7d:
ee:34:fb:8e:e9:d0:26:69:a0:85:2b:f4:7c:07:e6:
bd:2a:c6:3b:ee:06:b2:8f:62:ae:e5:f2:3e:59:93:
8b:5a:c1:19:3e:fc:0c:cb:0f:fd:2c:4b:e8:da:88:
d9:21:be:2e:4e:c6:11:80:ad:09:e0:0a:2d:ff:ac:
ce:fb:a2:b5:8e:ce:46:c3:e6:e2:cb:5a:68:15:2d:
a3:f7:48:dc:38:1b:8d:e1:86:30:81:00:cb:4f:45:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4C:D6:E2:40:A6:3E:CB:51:04:4B:4C:35:6F:52:12:8C:F9:45:47
X509v3 Authority Key Identifier:
keyid:8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:46:38:59:5d:ac:ab:95:ab:48:e7:53:32:13:c2:5e:23:13:
4f:ed:3f:48:eb:3d:5d:09:02:2e:7b:60:32:ee:aa:51:17:d4:
1e:ed:10:ac:aa:c4:56:aa:4e:f9:67:ad:c5:3f:4a:03:e4:3a:
3a:78:92:21:b2:d2:76:55:01:d0:af:42:fb:a5:7f:7b:cf:e0:
2d:94:bf:3a:09:fa:52:d7:5f:e9:2f:2f:bb:2b:06:ab:0e:b0:
78:ac:c6:85:db:49:c3:4d:f8:01:29:e6:cd:24:99:59:2f:d6:
26:58:64:7f:e7:71:f0:0b:43:93:e6:3d:d8:a5:fd:cd:9d:42:
fb:78:80:aa:c9:0d:81:1b:63:31:3b:a2:00:0b:8e:d7:64:e8:
b8:db:7e:fb:08:14:35:32:18:79:a1:a1:3e:74:f2:38:53:b4:
19:b9:e7:64:2d:19:00:8f:b1:05:c9:0b:b1:ca:c0:d6:f1:f5:
f4:11:64:18:b6:51:10:7c:c6:a5:5c:6d:fd:e4:4a:30:21:be:
04:3d:f9:05:53:9a:4f:cc:bd:d1:d5:dc:88:b4:e9:0e:87:18:
30:95:b2:41:4b:1e:9a:7b:69:1a:23:e5:f5:21:74:a1:98:b7:
28:5b:63:50:aa:8c:fc:d8:a6:58:ec:2d:f7:b1:60:8e:41:e8:
aa:d9:05:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYhVXyW5w7QcUmRJUKu15H10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMjg5NWJlYWFkYTZkMmY5NTdjN2VkNDMwZmY4NDZiN2Vi
Y2RiMWIwHhcNMjMwNTI2MDAwNDM4WhcNMjMwNTI3MDAwNDM4WjAzMTEwLwYDVQQD
EyhkMDRjZDZlMjQwYTYzZWNiNTEwNDRiNGMzNTZmNTIxMjhjZjk0NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0nbQatypsKl4L7q/MhHdE0Qwcms
ep6yMx5wlPSpAh6rGqOfUc/WSBt7tC0LS8QorJBXzsWiBLMsXXTXww33BBzVm8up
McdwC0U3bAz+kVRB39rTyVIDE9iX/ClYvlKN3cajReV51ssCcj9KSVdA39bvTK0N
5HIMP0Y0hoBZazjwpu2UeX50zFpRZ7lxkW60Hzg88CCWrhYx9DadvUD/9nbp2H3u
NPuO6dAmaaCFK/R8B+a9KsY77gayj2Ku5fI+WZOLWsEZPvwMyw/9LEvo2ojZIb4u
TsYRgK0J4Aot/6zO+6K1js5Gw+biy1poFS2j90jcOBuN4YYwgQDLT0XfkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBM1uJApj7LUQRLTDVvUhKM+UVHMB8GA1UdIwQY
MBaAFIsolb6q2m0vlXx+1DD/hGt+vNsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXlpVnZxcmFiUy1WZkg3VU1QLUVhMzY4MnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kZTgyZGEtYjA4Ni00MmVhLThjNDMt
NWU0OTk0NjhjYzJmLzEvaXlpVnZxcmFiUy1WZkg3VU1QLUVhMzY4MnhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kZTgyZGEtYjA4Ni00MmVhLThjNDMtNWU0OTk0NjhjYzJm
LzEvaXlpVnZxcmFiUy1WZkg3VU1QLUVhMzY4MnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0Y4WV2s
q5WrSOdTMhPCXiMTT+0/SOs9XQkCLntgMu6qURfUHu0QrKrEVqpO+WetxT9KA+Q6
OniSIbLSdlUB0K9C+6V/e8/gLZS/Ogn6Utdf6S8vuysGqw6weKzGhdtJw034ASnm
zSSZWS/WJlhkf+dx8AtDk+Y92KX9zZ1C+3iAqskNgRtjMTuiAAuO12TouNt++wgU
NTIYeaGhPnTyOFO0GbnnZC0ZAI+xBckLscrA1vH19BFkGLZREHzGpVxt/eRKMCG+
BD35BVOaT8y90dXciLTpDocYMJWyQUsemntpGiPl9SF0oZi3KFtjUKqM/NimWOwt
97FgjkHoqtkFoA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:43:54 2025 by rpki-client