Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: e2Hldn0zkTMN4Wou6kJUig0IfNYOINYT7zQeMnf8etM=
Subject key identifier: DC:84:53:21:95:05:ED:FB:7D:16:1B:2A:53:7B:2A:07:CB:36:4F:2A
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 0194BD4E8BB1B2337C60F2C52C9D3AD577F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 12EC
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: +aMKA8YNN4y4oq5ZF1QoxVxmXxXkcDu8FUR6VgEfV6s=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8b:b1:b2:33:7c:60:f2:c5:2c:9d:3a:d5:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=dc8453219505edfb7d161b2a537b2a07cb364f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:c0:b9:6f:8f:09:00:4f:d2:91:5a:cd:fe:
4d:98:40:54:98:c4:21:32:c8:b8:e2:17:92:ea:75:
40:d6:bc:2e:88:4c:79:d0:e7:d8:09:76:fd:b3:29:
91:94:3f:4a:7f:10:45:d2:5d:65:71:30:f6:07:aa:
97:d9:84:34:0e:01:6b:70:2a:5e:f8:f7:b4:2a:87:
02:7c:f9:c3:27:29:b0:a7:bc:1e:2b:87:6d:47:cc:
be:f1:64:fa:29:e4:56:c5:27:12:3b:01:2f:ab:ab:
3d:6e:6b:7c:79:cf:30:c2:71:15:ae:7c:c3:67:a4:
e5:1c:d2:0f:5b:21:19:1f:51:9d:5c:5a:c1:10:a9:
f9:24:ec:3e:7b:a9:d1:62:4c:4d:82:a0:23:4b:f7:
80:15:40:c9:ca:5f:d2:24:3a:e7:c6:92:29:ae:a0:
56:38:c7:65:28:0c:e5:bf:28:31:ee:fd:69:da:c1:
11:0f:4a:ed:03:51:db:c4:f3:5a:b1:c9:3b:fd:46:
c0:33:57:fe:c1:b5:44:a7:49:92:8d:9a:ea:01:7f:
af:09:cc:2c:58:91:01:68:fe:89:b2:c6:60:0c:f7:
82:d2:1d:4d:d9:7c:cf:8b:44:49:93:e3:88:85:4c:
32:ff:e6:54:93:a2:21:b4:1b:b9:f6:49:ea:04:e0:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:84:53:21:95:05:ED:FB:7D:16:1B:2A:53:7B:2A:07:CB:36:4F:2A
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ac:a1:85:a1:f8:61:1d:e0:6f:89:c7:68:6b:f2:25:2f:df:
1e:ea:43:ef:04:e3:79:6a:c9:18:ac:9d:35:3c:44:d4:38:59:
50:0a:73:13:6a:56:c1:bc:c5:73:25:b9:1f:a7:07:58:a3:cb:
db:b7:e1:4d:06:a7:90:85:5b:92:8a:66:49:7e:39:ad:e5:9f:
78:3a:36:80:9f:15:05:f2:99:0e:4b:c4:be:1b:bc:5c:d1:bb:
f4:b4:95:dd:e9:02:40:e7:f9:6c:41:5f:f5:ce:da:30:44:7e:
92:f3:b3:6a:46:53:66:b0:fe:b4:1f:d8:19:bd:70:15:1e:16:
0b:76:81:bb:32:89:5a:1f:f3:45:d9:85:00:ca:d0:9b:b2:a9:
57:47:2e:59:39:78:28:f4:47:6a:42:2e:f6:0f:13:72:51:95:
6e:3b:2f:62:8f:fb:12:c4:4a:62:81:30:ac:86:c3:58:72:2a:
49:8d:bc:a4:1e:f8:b5:c3:46:d6:9c:f4:2f:8e:42:a5:50:37:
84:36:0c:23:f0:c0:96:57:06:06:aa:bc:09:f4:9e:4b:54:7a:
3d:5a:fd:fb:61:e9:ec:65:c2:29:e6:b9:77:6b:26:3f:1b:28:
c3:96:f8:93:22:95:f5:5d:9f:bf:c0:75:8a:5c:3b:ea:41:9f:
dc:33:9e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TouxsjN8YPLFLJ061XfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjUwMTMxMTcwMDI4WhcNMjUwMjAxMTcwMDI4WjAzMTEwLwYDVQQD
EyhkYzg0NTMyMTk1MDVlZGZiN2QxNjFiMmE1MzdiMmEwN2NiMzY0ZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FnAuW+PCQBP0pFazf5NmEBUmMQh
Msi44heS6nVA1rwuiEx50OfYCXb9symRlD9KfxBF0l1lcTD2B6qX2YQ0DgFrcCpe
+Pe0KocCfPnDJymwp7weK4dtR8y+8WT6KeRWxScSOwEvq6s9bmt8ec8wwnEVrnzD
Z6TlHNIPWyEZH1GdXFrBEKn5JOw+e6nRYkxNgqAjS/eAFUDJyl/SJDrnxpIprqBW
OMdlKAzlvygx7v1p2sERD0rtA1HbxPNasck7/UbAM1f+wbVEp0mSjZrqAX+vCcws
WJEBaP6JssZgDPeC0h1N2XzPi0RJk+OIhUwy/+ZUk6IhtBu59knqBOCyEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyEUyGVBe37fRYbKlN7KgfLNk8qMB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKyhhaH4
YR3gb4nHaGvyJS/fHupD7wTjeWrJGKydNTxE1DhZUApzE2pWwbzFcyW5H6cHWKPL
27fhTQankIVbkopmSX45reWfeDo2gJ8VBfKZDkvEvhu8XNG79LSV3ekCQOf5bEFf
9c7aMER+kvOzakZTZrD+tB/YGb1wFR4WC3aBuzKJWh/zRdmFAMrQm7KpV0cuWTl4
KPRHakIu9g8TclGVbjsvYo/7EsRKYoEwrIbDWHIqSY28pB74tcNG1pz0L45CpVA3
hDYMI/DAllcGBqq8CfSeS1R6PVr9+2Hp7GXCKea5d2smPxsow5b4kyKV9V2fv8B1
ilw76kGf3DOerQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:05 2025 by rpki-client