Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File: EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier: nYAl1USW72qjuS+1ggb6CnzlmPUcXkDTL/l35dXrDeg=
Subject key identifier: B8:32:DD:DE:A7:3B:6A:49:F3:A3:09:C6:20:76:68:E9:F0:CF:D7:BB
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial: 0194BC04E3271C8874E83E340584EF351022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: tujn4O0jY3+gDRC0+anXfXlSi4Mv0AIUWeFKW2WtIYM=)
2: MROw4gFzcWIJiW-57fk1zpXQhBk.roa (hash: hWAGq+JyynXafr3/kTLPO6K2XTKtATKTBF5Bwv0mE6A=)
3: ePDnHbOXTUlVTt6WhrgofDAybdQ.roa (hash: dBzcW1+wZxIMYW+MPmPSO2MTLadbHEVw8y5qmE2KY9E=)
4: s1uawTeOUkgDW6mBKyzm3NI6hxc.roa (hash: lpqkVOyU/cokka/2U3UZmXPkRI7YfeF62rGfPTiCmjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e3:27:1c:88:74:e8:3e:34:05:84:ef:35:10:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=b832dddea73b6a49f3a309c6207668e9f0cfd7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:9f:f4:be:d5:da:25:89:12:28:da:45:d5:
0a:74:3c:80:16:dd:bf:21:3b:28:db:b3:18:bb:3a:
5a:e4:5a:74:bd:80:6c:34:8f:6d:d8:8b:f5:76:b0:
ad:a8:c3:47:88:97:f3:a2:ec:84:65:b5:e2:83:e4:
57:2b:ed:1b:1a:6b:bd:a8:8d:5f:fe:38:0a:d4:96:
5e:23:3e:43:1f:37:f6:3e:e6:79:ca:32:fb:76:0b:
3d:4d:f7:d7:95:3f:51:ce:a5:32:21:3f:9d:01:7b:
b0:d2:ac:3f:6f:35:cd:0c:ff:ee:65:7a:30:90:76:
de:5c:c3:06:cf:59:ac:e8:5d:d0:fe:52:9e:ba:59:
72:45:11:c8:80:a0:3f:06:cd:36:a0:60:1e:de:9f:
da:13:b4:19:87:a3:bc:c8:6d:7e:f3:a9:19:15:c4:
b4:93:44:79:d4:0a:f5:b3:dc:ff:df:17:50:b6:67:
73:9c:5e:4b:19:83:84:98:1e:24:0e:3b:c2:50:37:
9b:48:c2:af:ea:51:c7:4d:48:df:61:e8:66:59:4a:
44:cf:a5:7e:28:0f:53:25:e5:d8:09:18:d9:e8:b2:
fd:4b:3d:3c:23:03:69:e0:60:b1:5c:61:91:92:22:
67:4e:a8:74:78:93:23:f2:da:ea:cd:0e:82:30:02:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:32:DD:DE:A7:3B:6A:49:F3:A3:09:C6:20:76:68:E9:F0:CF:D7:BB
X509v3 Authority Key Identifier:
keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:eb:78:39:70:ee:14:08:14:24:41:2f:83:40:27:5d:69:b8:
ed:4e:2b:bb:cd:fd:ee:a8:36:01:9b:44:c8:6d:dd:04:56:8f:
0c:ab:c5:ad:c9:b3:90:46:88:b9:e7:b0:05:e1:3e:c9:92:05:
e9:f2:38:30:c3:de:98:e6:ab:82:a6:a8:52:26:10:e6:4a:6e:
86:9b:2d:84:61:e4:d4:b1:23:69:98:aa:8b:2b:24:3e:7f:46:
0f:a5:a5:35:6b:90:f0:92:d0:d0:9d:79:95:c8:97:05:58:d6:
e0:1d:4a:36:1e:a7:5d:0a:3b:22:64:3f:f7:a5:88:c1:12:e7:
cd:f8:b3:df:dc:c5:6d:dd:7c:d5:82:8e:eb:2a:65:73:0d:7a:
4a:2a:b6:7e:f5:83:ff:62:5f:ad:c2:b8:35:88:44:87:0c:06:
b7:75:fa:47:a9:f2:04:24:83:61:46:ff:82:73:e7:20:03:95:
8f:af:c1:be:ab:9f:ce:3e:95:0c:09:f5:c2:4d:73:69:8c:79:
b8:fc:c4:36:7c:0b:3b:0b:e8:86:85:6f:08:3c:d3:80:d7:9f:
22:c6:d5:73:fe:65:93:0b:c2:5e:74:77:ce:f2:ce:0d:b3:fe:
0c:39:29:bc:60:58:11:2a:bc:6c:7a:1a:5e:9c:06:89:fd:68:
09:86:83:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOMnHIh06D40BYTvNRAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzgwN2MyNTE4OTE1MTM4ZjU1NTEyMzYwNWMwMTMzZGZk
YmI0ZmEwHhcNMjUwMTMxMTEwMDI0WhcNMjUwMjAxMTEwMDI0WjAzMTEwLwYDVQQD
EyhiODMyZGRkZWE3M2I2YTQ5ZjNhMzA5YzYyMDc2NjhlOWYwY2ZkN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplCf9L7V2iWJEijaRdUKdDyAFt2/
ITso27MYuzpa5Fp0vYBsNI9t2Iv1drCtqMNHiJfzouyEZbXig+RXK+0bGmu9qI1f
/jgK1JZeIz5DHzf2PuZ5yjL7dgs9TffXlT9RzqUyIT+dAXuw0qw/bzXNDP/uZXow
kHbeXMMGz1ms6F3Q/lKeullyRRHIgKA/Bs02oGAe3p/aE7QZh6O8yG1+86kZFcS0
k0R51Ar1s9z/3xdQtmdznF5LGYOEmB4kDjvCUDebSMKv6lHHTUjfYehmWUpEz6V+
KA9TJeXYCRjZ6LL9Sz08IwNp4GCxXGGRkiJnTqh0eJMj8trqzQ6CMAKZYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgy3d6nO2pJ86MJxiB2aOnwz9e7MB8GA1UdIwQY
MBaAFBB4B8JRiRUTj1VRI2BcATPf27T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTIt
ZjlhYzE1ZTY2Mzg2LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTItZjlhYzE1ZTY2Mzg2
LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQut4OXDu
FAgUJEEvg0AnXWm47U4ru8397qg2AZtEyG3dBFaPDKvFrcmzkEaIueewBeE+yZIF
6fI4MMPemOargqaoUiYQ5kpuhpsthGHk1LEjaZiqiyskPn9GD6WlNWuQ8JLQ0J15
lciXBVjW4B1KNh6nXQo7ImQ/96WIwRLnzfiz39zFbd181YKO6yplcw16Siq2fvWD
/2JfrcK4NYhEhwwGt3X6R6nyBCSDYUb/gnPnIAOVj6/Bvqufzj6VDAn1wk1zaYx5
uPzENnwLOwvohoVvCDzTgNefIsbVc/5lkwvCXnR3zvLODbP+DDkpvGBYESq8bHoa
XpwGif1oCYaDAw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:05 2025 by rpki-client