Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: KyUnIBdWhCew8W6R9PAhanfGjE00IanmS2zj/92jQu0=
Subject key identifier: CD:C9:41:45:3B:58:F2:24:A6:77:88:3F:8B:76:98:95:B2:30:BE:B7
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 0195E19003A1AADE8FB9FCA72973301EA22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 0604
Signing time: Sat 29 Mar 2025 11:01:06 +0000
Manifest this update: Sat 29 Mar 2025 11:01:06 +0000
Manifest next update: Sun 30 Mar 2025 11:01:06 +0000
Files and hashes: 1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=)
2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: kcqXpjMQZSxiomVxNPQDC6v+Lw2oCNyUWsqL6xEVOsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:03:a1:aa:de:8f:b9:fc:a7:29:73:30:1e:a2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Mar 29 11:01:06 2025 GMT
Not After : Mar 30 11:01:06 2025 GMT
Subject: CN=cdc941453b58f224a677883f8b769895b230beb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:ce:db:49:b6:08:d6:64:7c:dc:4c:00:80:
81:7e:f6:ed:c1:2a:cc:cf:c7:b0:8e:83:94:c0:ea:
c0:70:04:45:df:d6:a2:c6:db:e0:dd:75:f7:3b:48:
2d:eb:ad:5d:62:66:3b:d3:3b:1f:76:05:35:8f:d6:
87:27:ea:0e:87:65:d5:1c:f1:95:b9:a7:88:d2:45:
66:8b:04:f6:10:3c:c0:a1:60:88:27:89:1b:e3:81:
ab:d7:ea:6b:fb:7c:a3:b1:ab:e2:43:50:54:dc:75:
21:e4:96:eb:f3:0f:d1:7a:87:d4:80:bc:aa:7c:86:
bf:eb:bf:54:7a:f3:e4:00:78:5c:cf:95:62:16:93:
3b:bb:2b:bb:f1:38:f8:c9:5f:61:e5:a8:c6:42:a9:
3c:34:7d:7d:18:de:1e:da:cd:7f:e9:5f:a8:52:2f:
8e:db:eb:df:88:ba:ad:4d:3c:86:4e:6a:2c:52:8e:
15:af:73:14:98:49:b2:3b:42:3b:f6:a3:10:ac:6a:
49:54:e1:11:ad:9e:ce:77:39:24:d1:1e:76:57:4d:
20:6d:49:25:34:00:af:ca:1a:8d:47:70:68:03:62:
57:60:88:d2:dc:4f:36:bb:07:10:51:d5:fc:e8:f8:
73:34:ff:dc:7f:4c:50:83:7e:9a:b8:cc:b2:68:73:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C9:41:45:3B:58:F2:24:A6:77:88:3F:8B:76:98:95:B2:30:BE:B7
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5a:9c:db:86:f4:01:f6:a8:3d:8a:d3:9b:91:c1:f7:02:2f:
67:78:2f:45:28:0f:3f:f9:8f:9f:7b:d9:39:0c:12:f7:82:4f:
c5:38:24:14:99:24:a9:8e:1c:c4:fb:20:97:7f:cd:a7:e0:53:
74:6a:9e:68:9a:36:7c:0a:ba:f0:82:3e:2b:9f:11:c0:62:31:
94:5d:dc:d1:3c:07:aa:53:f4:27:79:f2:51:2d:62:31:93:14:
10:09:83:86:2b:92:6d:dd:a8:4b:38:88:e1:1a:bf:ab:af:11:
cc:23:0e:e3:ef:5e:49:db:5a:4f:19:87:4d:5e:79:5b:ca:28:
f3:e3:2d:ca:d3:06:55:9e:83:eb:4d:52:8a:1a:b5:77:57:ab:
a3:b2:64:89:f1:fa:86:cd:08:8b:b6:13:9b:06:31:04:df:0a:
9e:78:6a:fc:48:2a:17:7a:04:af:6b:23:9e:58:46:15:c6:9c:
24:bb:9f:97:49:52:c7:27:2c:a9:20:1d:4a:e3:24:44:0b:43:
75:63:6d:c8:65:27:81:e7:38:e6:2c:34:7d:58:40:39:63:22:
a3:12:3c:ee:56:4f:84:1d:ce:da:1a:05:2b:51:c6:dd:35:64:
af:3e:fd:fb:5c:b7:cc:64:13:97:f8:62:74:f2:8d:17:8a:08:
ff:69:59:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkAOhqt6PufynKXMwHqIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1
YzlmMmIwHhcNMjUwMzI5MTEwMTA2WhcNMjUwMzMwMTEwMTA2WjAzMTEwLwYDVQQD
EyhjZGM5NDE0NTNiNThmMjI0YTY3Nzg4M2Y4Yjc2OTg5NWIyMzBiZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/nO20m2CNZkfNxMAICBfvbtwSrM
z8ewjoOUwOrAcARF39aixtvg3XX3O0gt661dYmY70zsfdgU1j9aHJ+oOh2XVHPGV
uaeI0kVmiwT2EDzAoWCIJ4kb44Gr1+pr+3yjsaviQ1BU3HUh5Jbr8w/ReofUgLyq
fIa/679UevPkAHhcz5ViFpM7uyu78Tj4yV9h5ajGQqk8NH19GN4e2s1/6V+oUi+O
2+vfiLqtTTyGTmosUo4Vr3MUmEmyO0I79qMQrGpJVOERrZ7Odzkk0R52V00gbUkl
NACvyhqNR3BoA2JXYIjS3E82uwcQUdX86PhzNP/cf0xQg36auMyyaHNBFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3JQUU7WPIkpneIP4t2mJWyML63MB8GA1UdIwQY
MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt
ZDYzM2FhNzBkZDY2LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2
LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1qc24b0
AfaoPYrTm5HB9wIvZ3gvRSgPP/mPn3vZOQwS94JPxTgkFJkkqY4cxPsgl3/Np+BT
dGqeaJo2fAq68II+K58RwGIxlF3c0TwHqlP0J3nyUS1iMZMUEAmDhiuSbd2oSziI
4Rq/q68RzCMO4+9eSdtaTxmHTV55W8oo8+MtytMGVZ6D601Sihq1d1ero7JkifH6
hs0Ii7YTmwYxBN8Knnhq/EgqF3oEr2sjnlhGFcacJLufl0lSxycsqSAdSuMkRAtD
dWNtyGUngec45iw0fVhAOWMioxI87lZPhB3O2hoFK1HG3TVkrz79+1y3zGQTl/hi
dPKNF4oI/2lZnA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:01 2025 by rpki-client