Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: +NmAeFKK0aRnUOpZQYzLDxIVGN6xY+xZ8qSuWc4+ISI=
Subject key identifier: EB:07:1F:4B:D6:B1:88:AE:85:C9:9D:CB:D6:31:84:FD:4C:B3:F9:79
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 0194BC3BE08B6E5CF8B8414380CE1BDE5C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0883
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (hash: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=)
2: GFp4I3LPH9Bw9YNNwWHq6X0Ax-w.roa (hash: h4/2+JBtszFNERDw2wk+3LUP56k2mKHWWkwlM0aD/BM=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: NVarg60VX9TGWUyLTISEzjHZ5fxMKpdkrWpfySuIIr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e0:8b:6e:5c:f8:b8:41:43:80:ce:1b:de:5c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=eb071f4bd6b188ae85c99dcbd63184fd4cb3f979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:3e:e4:f0:52:3c:39:4e:ae:34:80:a2:bb:
a3:50:c5:b7:7b:9d:01:99:b0:0b:8f:bc:13:71:53:
f8:a2:e2:30:df:49:57:97:71:18:4a:dd:60:b0:8f:
7d:6f:ef:00:f7:b3:df:1c:de:48:aa:e9:8f:47:b6:
b1:cb:d3:39:e2:33:9f:e4:1d:98:cf:69:e3:43:c6:
bd:4d:06:38:0b:e7:01:49:43:81:ba:ad:a2:38:08:
5d:34:ed:75:9d:2e:a1:bf:00:5c:a0:6f:54:cd:ea:
ee:41:1c:4d:21:82:df:f6:7b:70:c2:c5:8e:3e:af:
5a:d8:2a:c9:67:f2:0b:2d:3a:f8:3c:75:ee:3f:bf:
e4:59:7b:25:85:73:16:37:2b:cc:31:6d:93:f0:ca:
a7:ac:73:35:39:4e:da:8d:5f:c6:8f:84:43:8c:84:
91:83:1b:a8:79:ab:0d:5f:02:e3:8f:51:99:17:02:
4f:68:77:24:cc:93:3d:d9:c9:24:9c:c5:c1:ee:de:
41:2c:8b:57:2c:fb:35:a2:c3:e5:34:eb:55:09:22:
aa:ea:78:29:dd:c8:02:26:26:c9:bd:7f:8e:4e:94:
c0:c1:3c:62:56:74:3f:b3:e8:63:64:7a:5c:21:0f:
e4:e6:f9:35:3e:e8:9d:18:de:9a:9a:65:a7:4d:e8:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:1F:4B:D6:B1:88:AE:85:C9:9D:CB:D6:31:84:FD:4C:B3:F9:79
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c2:af:d6:d5:59:bb:f5:69:9e:3e:a9:15:79:d7:33:30:d3:
aa:6e:19:bf:37:fe:59:22:c3:5b:13:67:8e:c6:ae:4b:f0:79:
ec:c3:7f:c9:0f:15:43:60:6e:2f:32:a8:0d:1a:7e:68:7d:9d:
95:2d:bb:74:37:6f:33:c9:48:58:c3:93:16:3c:b1:a4:5d:14:
a7:a2:7b:d7:03:14:b0:33:b9:7f:5e:3e:57:37:a7:5c:e6:96:
2c:9a:0f:cf:25:35:f9:b0:7f:81:1d:ce:10:48:c4:43:e4:2f:
ab:19:4f:97:09:94:7d:ec:ee:cd:42:45:1b:2d:1e:ff:06:be:
f6:ac:bf:e1:cb:2c:52:5b:b7:d3:20:1f:32:d7:0f:eb:ac:89:
85:25:9b:ec:0b:2a:e5:79:3c:74:51:bd:ae:1f:78:d3:27:ea:
90:52:29:85:b1:18:ef:62:37:2a:c0:3e:3b:1f:3d:08:c5:4a:
10:38:72:15:da:cd:f6:7c:2c:21:92:37:3e:16:13:35:73:2f:
56:05:e7:1f:89:e6:0b:6e:8f:52:4e:09:24:04:58:0f:db:ec:
d3:88:95:03:91:29:53:05:c2:19:db:4b:4a:cf:99:ae:48:0f:
5d:c3:1e:a2:36:50:d1:8c:66:9b:a8:1c:78:77:70:94:fb:97:
9a:7e:7c:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+CLblz4uEFDgM4b3lyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YWMzMTYzNWQwOTFiZTYxNTU3NDMzMTFmZTFkYjdjN2Fm
MzQ3N2IwHhcNMjUwMTMxMTIwMDI4WhcNMjUwMjAxMTIwMDI4WjAzMTEwLwYDVQQD
EyhlYjA3MWY0YmQ2YjE4OGFlODVjOTlkY2JkNjMxODRmZDRjYjNmOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTM+5PBSPDlOrjSAorujUMW3e50B
mbALj7wTcVP4ouIw30lXl3EYSt1gsI99b+8A97PfHN5IqumPR7axy9M54jOf5B2Y
z2njQ8a9TQY4C+cBSUOBuq2iOAhdNO11nS6hvwBcoG9UzeruQRxNIYLf9ntwwsWO
Pq9a2CrJZ/ILLTr4PHXuP7/kWXslhXMWNyvMMW2T8MqnrHM1OU7ajV/Gj4RDjISR
gxuoeasNXwLjj1GZFwJPaHckzJM92ckknMXB7t5BLItXLPs1osPlNOtVCSKq6ngp
3cgCJibJvX+OTpTAwTxiVnQ/s+hjZHpcIQ/k5vk1PuidGN6ammWnTehMoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsHH0vWsYiuhcmdy9YxhP1Ms/l5MB8GA1UdIwQY
MBaAFHisMWNdCRvmFVdDMR/h23x680d7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQt
ZjZlOGJiZGJkMzNiLzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQtZjZlOGJiZGJkMzNi
LzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsKv1tVZ
u/Vpnj6pFXnXMzDTqm4Zvzf+WSLDWxNnjsauS/B57MN/yQ8VQ2BuLzKoDRp+aH2d
lS27dDdvM8lIWMOTFjyxpF0Up6J71wMUsDO5f14+VzenXOaWLJoPzyU1+bB/gR3O
EEjEQ+QvqxlPlwmUfezuzUJFGy0e/wa+9qy/4cssUlu30yAfMtcP66yJhSWb7Asq
5Xk8dFG9rh940yfqkFIphbEY72I3KsA+Ox89CMVKEDhyFdrN9nwsIZI3PhYTNXMv
VgXnH4nmC26PUk4JJARYD9vs04iVA5EpUwXCGdtLSs+ZrkgPXcMeojZQ0Yxmm6gc
eHdwlPuXmn58YA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:55 2025 by rpki-client