Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File: ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier: 9c3iCy3o+SXe1iPIcLPrjvodctf0JYX+FsVahIhJN5Y=
Subject key identifier: C0:A9:A8:3B:0D:8E:71:AC:B0:40:81:A4:43:BA:5A:04:4D:AE:EB:95
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 0194BBCEA22BA47384C83F51459E5123B2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (hash: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=)
2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: nZwJ/k/DeRz7bO5nEvD4SdGExyXrvD2hrI/K6pRszNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a2:2b:a4:73:84:c8:3f:51:45:9e:51:23:b2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=c0a9a83b0d8e71acb04081a443ba5a044daeeb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:9f:d1:45:b6:51:4d:dd:cb:16:d8:f8:ea:
ac:d0:1f:dd:a7:63:88:12:d8:9e:e5:78:da:8c:d1:
e8:05:ba:9a:8d:78:ee:82:5e:5c:e8:23:2e:49:29:
4e:aa:12:ca:f0:e6:5c:7d:63:b1:6f:12:39:13:3c:
6b:50:1a:45:9a:03:f0:0e:65:31:f2:8f:ef:74:c5:
b8:ed:81:8c:d4:4b:5d:52:c2:3e:57:8c:8f:61:e8:
64:88:98:ff:5c:c4:d6:7f:b3:41:cf:f1:89:82:74:
07:a9:be:0d:69:c9:9b:d4:bf:68:eb:fc:93:4b:76:
92:5e:ec:6a:b7:62:c5:e6:39:62:1f:eb:d9:40:25:
62:43:26:4b:c5:5e:6a:12:60:53:a3:f2:ba:4c:ef:
f8:0d:eb:1e:2d:67:f6:d4:78:9e:44:7d:11:81:76:
b5:b3:68:bf:d5:09:dc:65:5c:cf:f1:d1:4c:69:10:
07:8b:79:cd:f6:b7:4d:ed:9e:97:f2:0e:39:47:73:
c7:40:34:d2:47:7c:78:1d:17:03:c5:81:63:2f:64:
58:bf:aa:b1:2d:f1:87:25:4a:e7:72:0b:06:e3:08:
ba:1b:33:6e:e2:48:a7:27:59:0f:ab:dd:3d:4c:86:
3a:e8:b8:e9:54:2f:91:d5:32:76:c6:d7:56:6a:80:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A9:A8:3B:0D:8E:71:AC:B0:40:81:A4:43:BA:5A:04:4D:AE:EB:95
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:75:ea:9a:f5:ab:fc:a4:68:44:6f:ee:60:cb:9b:54:0e:
25:bd:e5:9b:02:7c:26:07:c5:01:01:dc:60:2d:a4:dc:d1:b4:
64:6f:86:98:50:65:5e:52:7d:14:31:88:ab:ae:02:2e:a2:8d:
e7:ad:2d:f2:b5:7f:9d:8f:29:b6:a5:59:dc:b8:f0:3d:b0:6d:
8f:fd:b8:89:c6:64:f3:79:4c:7a:95:d9:ef:f1:22:bb:42:86:
9f:13:71:6c:f3:09:bf:4c:5c:4e:d0:cf:1f:20:35:32:e1:b4:
f5:9f:b8:18:73:af:42:18:2e:bd:f7:bc:bf:7f:3d:1d:97:d6:
11:09:a1:44:61:61:59:90:d8:ce:42:4b:80:ac:a5:76:b4:f1:
99:22:90:5e:cb:e2:ab:21:38:63:1d:4d:5c:16:d2:35:cb:0f:
41:36:e1:f2:89:5d:cd:29:1c:5c:cb:31:78:d1:9b:26:ab:36:
c4:e2:bf:fa:b7:fe:6f:01:f3:d4:de:01:cd:c5:63:03:94:7b:
47:10:a4:54:6b:e3:3d:1c:14:dd:7a:1c:90:06:fa:58:05:d1:
d2:3e:67:7c:93:ce:0c:66:8d:04:dc:86:ac:7c:52:2b:a0:2f:
3f:56:0d:c3:b5:dc:d6:00:9e:3e:22:6c:b8:1d:0d:0c:a2:47:
ec:c4:a1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqIrpHOEyD9RRZ5RI7LXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YmM0OThlZGM0MTg5NTg0ODc0YjdjYjQ1MDI1ZWY1NDI0
ODFiNmEwHhcNMjUwMTMxMTAwMTA4WhcNMjUwMjAxMTAwMTA4WjAzMTEwLwYDVQQD
EyhjMGE5YTgzYjBkOGU3MWFjYjA0MDgxYTQ0M2JhNWEwNDRkYWVlYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpmf0UW2UU3dyxbY+Oqs0B/dp2OI
Etie5XjajNHoBbqajXjugl5c6CMuSSlOqhLK8OZcfWOxbxI5EzxrUBpFmgPwDmUx
8o/vdMW47YGM1EtdUsI+V4yPYehkiJj/XMTWf7NBz/GJgnQHqb4Nacmb1L9o6/yT
S3aSXuxqt2LF5jliH+vZQCViQyZLxV5qEmBTo/K6TO/4DeseLWf21HieRH0RgXa1
s2i/1QncZVzP8dFMaRAHi3nN9rdN7Z6X8g45R3PHQDTSR3x4HRcDxYFjL2RYv6qx
LfGHJUrncgsG4wi6GzNu4kinJ1kPq909TIY66LjpVC+R1TJ2xtdWaoAF8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCpqDsNjnGssECBpEO6WgRNruuVMB8GA1UdIwQY
MBaAFHm8SY7cQYlYSHS3y0UCXvVCSBtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDIt
ZTNiNDA2Yzc5ODBlLzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDItZTNiNDA2Yzc5ODBl
LzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5B16pr1
q/ykaERv7mDLm1QOJb3lmwJ8JgfFAQHcYC2k3NG0ZG+GmFBlXlJ9FDGIq64CLqKN
560t8rV/nY8ptqVZ3LjwPbBtj/24icZk83lMepXZ7/Eiu0KGnxNxbPMJv0xcTtDP
HyA1MuG09Z+4GHOvQhguvfe8v389HZfWEQmhRGFhWZDYzkJLgKyldrTxmSKQXsvi
qyE4Yx1NXBbSNcsPQTbh8oldzSkcXMsxeNGbJqs2xOK/+rf+bwHz1N4BzcVjA5R7
RxCkVGvjPRwU3XockAb6WAXR0j5nfJPODGaNBNyGrHxSK6AvP1YNw7Xc1gCePiJs
uB0NDKJH7MShdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:07 2025 by rpki-client