Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File: e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier: HKPqZMNgHcMUpUJ4YV1uoOeJvpGW+3ecQKzjOWg3XDo=
Subject key identifier: 39:1D:18:BF:79:6E:3A:84:D2:5F:87:BB:41:C1:B8:B1:73:79:64:0A
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer: /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial: 0194BBCE076B4FC33B2B5A51D893CE34673C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number: 1299
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: r23/n3XDEefzEDuDkCBegaXIhMO3GbnvvBW3KgoiCI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:07:6b:4f:c3:3b:2b:5a:51:d8:93:ce:34:67:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=391d18bf796e3a84d25f87bb41c1b8b17379640a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:a9:12:1d:40:38:fa:ff:d6:72:7e:74:ad:
ad:78:f3:78:8b:2f:a2:62:b6:67:b6:ff:73:e4:07:
86:18:78:64:6c:34:46:e6:db:e1:58:20:e2:57:79:
53:a8:54:d4:e5:ff:d0:d8:04:84:20:9e:cf:e5:55:
e6:89:6d:18:c5:89:93:78:2d:28:39:a9:2f:00:ff:
8a:9f:00:71:5a:ee:57:3d:4f:41:b8:e1:56:a2:f9:
98:d9:be:df:b9:a2:70:79:6d:81:56:df:6d:31:9a:
15:e3:5f:ba:f2:e2:ba:ca:37:d2:50:75:60:ab:28:
37:d9:ba:73:56:b8:c9:88:d3:79:5b:cd:86:04:3a:
1f:39:00:67:dd:a2:0c:6d:6b:4f:e0:e4:b9:b9:e8:
96:48:01:48:36:3b:0a:6c:3e:65:13:04:6e:ca:b8:
91:ad:2b:e9:5d:99:72:b3:7d:17:dd:8d:0b:ee:5c:
14:66:34:e5:7e:de:77:f1:b5:bc:3c:92:bf:49:32:
c2:3a:41:15:aa:83:f3:b7:6c:c7:96:07:e7:ce:7d:
61:91:6e:ae:de:84:cf:a0:92:de:be:10:21:71:49:
42:74:1a:29:35:a0:dd:36:59:08:db:e0:4f:5c:92:
7c:33:5c:ba:53:e9:20:47:ac:ea:2b:7a:ea:9a:d9:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:18:BF:79:6E:3A:84:D2:5F:87:BB:41:C1:B8:B1:73:79:64:0A
X509v3 Authority Key Identifier:
keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:43:ba:08:35:30:ff:2b:85:3a:0f:e0:da:92:94:80:4f:68:
b3:bb:77:73:6e:60:f5:e8:10:17:1f:56:37:43:b7:d6:6e:f1:
da:66:19:b7:1f:3c:d4:95:f2:e2:2b:26:5d:e6:fb:ba:fc:ac:
a1:62:11:b6:cf:da:ae:a6:bd:65:93:c1:69:1b:fe:2e:f5:8a:
7c:78:a1:68:20:a3:b2:80:6d:4b:e4:47:85:2a:16:98:11:70:
8d:7e:22:b3:95:2c:0c:1c:8c:e3:7a:a8:60:17:63:85:43:55:
62:e2:9c:93:17:7b:5c:2b:bf:64:1a:fc:43:37:d8:82:53:23:
f3:3c:f1:35:51:fa:2d:b9:e7:f4:ea:3a:f3:81:63:b5:52:f8:
da:22:3c:f9:ed:a0:80:fc:f3:39:24:af:46:ae:75:0a:d5:b5:
08:a1:89:45:0f:90:8c:93:a0:aa:44:dc:39:b4:05:cb:55:c8:
51:fe:e1:a6:50:76:ec:ff:28:fc:f7:c6:2e:15:23:1d:74:ec:
32:1d:38:7a:fc:b3:ad:bd:f1:05:0d:39:f5:ca:07:c3:dd:95:
da:3f:9e:15:7c:06:d5:45:0c:9a:bb:e6:45:f4:7d:96:12:b8:
1c:39:9e:da:5a:e2:35:eb:09:70:47:20:ed:94:07:7a:93:57:
af:10:70:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgdrT8M7K1pR2JPONGc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDc4ZDkxNDBhZDZlNzQyZTE2NzA2MzIwNjU4MmMxYzQ1
OTUyYmYwHhcNMjUwMTMxMTAwMDI5WhcNMjUwMjAxMTAwMDI5WjAzMTEwLwYDVQQD
EygzOTFkMThiZjc5NmUzYTg0ZDI1Zjg3YmI0MWMxYjhiMTczNzk2NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxSpEh1AOPr/1nJ+dK2tePN4iy+i
YrZntv9z5AeGGHhkbDRG5tvhWCDiV3lTqFTU5f/Q2ASEIJ7P5VXmiW0YxYmTeC0o
OakvAP+KnwBxWu5XPU9BuOFWovmY2b7fuaJweW2BVt9tMZoV41+68uK6yjfSUHVg
qyg32bpzVrjJiNN5W82GBDofOQBn3aIMbWtP4OS5ueiWSAFINjsKbD5lEwRuyriR
rSvpXZlys30X3Y0L7lwUZjTlft538bW8PJK/STLCOkEVqoPzt2zHlgfnzn1hkW6u
3oTPoJLevhAhcUlCdBopNaDdNlkI2+BPXJJ8M1y6U+kgR6zqK3rqmtmBtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkdGL95bjqE0l+Hu0HBuLFzeWQKMB8GA1UdIwQY
MBaAFHvXjZFArW50LhZwYyBlgsHEWVK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yZDM4NTAtMjlmYi00YmZhLWE4MDYt
M2NmZDhlZDUyYTk0LzEvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yZDM4NTAtMjlmYi00YmZhLWE4MDYtM2NmZDhlZDUyYTk0
LzEvZTllTmtVQ3RiblF1Rm5CaklHV0N3Y1JaVXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUO6CDUw
/yuFOg/g2pKUgE9os7t3c25g9egQFx9WN0O31m7x2mYZtx881JXy4ismXeb7uvys
oWIRts/arqa9ZZPBaRv+LvWKfHihaCCjsoBtS+RHhSoWmBFwjX4is5UsDByM43qo
YBdjhUNVYuKckxd7XCu/ZBr8QzfYglMj8zzxNVH6Lbnn9Oo684FjtVL42iI8+e2g
gPzzOSSvRq51CtW1CKGJRQ+QjJOgqkTcObQFy1XIUf7hplB27P8o/PfGLhUjHXTs
Mh04evyzrb3xBQ059coHw92V2j+eFXwG1UUMmrvmRfR9lhK4HDme2lriNesJcEcg
7ZQHepNXrxBwdg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:47 2025 by rpki-client