Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: 9SieKRg+3TXS+IqrBam/ooWQa3JN1HW3VgDw5q6NFFg=
Subject key identifier: 30:48:7E:EB:CA:A5:86:A3:4C:EE:8C:3A:54:F7:F4:A9:64:B7:2A:72
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 0194BD17B9C1521D4B51BCDFB47BE4AB7C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0BEE
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: BPj4ByPitxcNWsj65WH3snzn5C5MzlOwtwU5PSSaIMo=)
2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b9:c1:52:1d:4b:51:bc:df:b4:7b:e4:ab:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=30487eebcaa586a34cee8c3a54f7f4a964b72a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:d4:ae:d1:24:0c:7f:b8:4a:cf:d4:3b:90:
8e:80:51:9f:ac:a0:a7:5b:e5:e9:b3:41:12:16:9e:
d9:bc:5d:b5:a2:fd:f0:6c:59:6c:18:9e:65:33:fb:
4f:3e:ef:3e:d8:0e:f4:1a:8c:da:bb:df:37:3b:66:
46:a9:6e:e0:98:1a:1b:58:53:89:c5:1f:f2:31:77:
4b:ed:dc:67:b7:b4:ef:e5:34:b7:46:7d:3f:71:d1:
8d:8c:db:55:7c:9e:9a:ac:d5:a7:44:f7:3b:35:89:
36:a3:f5:e0:86:b1:1d:d9:db:74:d9:ba:bd:80:40:
51:73:48:30:b4:94:7e:19:e4:99:d8:22:98:25:7f:
98:e6:37:d8:76:3a:b2:92:60:4a:07:2b:6f:6e:9a:
3e:91:9d:d6:24:a3:51:d4:34:9a:b0:f5:42:26:61:
56:da:94:ba:03:05:3a:76:f8:45:ac:92:5d:de:a6:
f2:e6:c5:60:45:cf:a6:35:1c:e3:98:e9:e2:0a:58:
ed:e2:6c:93:bb:59:6e:cb:25:1b:d8:ed:47:04:27:
25:e7:10:98:03:48:a8:8a:e8:31:ed:26:24:ca:db:
3a:8b:d8:bd:6b:d0:d5:7f:6d:d7:8e:93:da:8a:e1:
ec:d3:f3:07:b2:9d:02:87:b2:e7:4b:d9:59:b2:94:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:48:7E:EB:CA:A5:86:A3:4C:EE:8C:3A:54:F7:F4:A9:64:B7:2A:72
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c6:03:36:08:87:27:02:87:29:22:e0:fd:43:26:81:61:8a:
55:cd:9e:36:f4:14:59:51:b7:29:3a:b3:81:17:ee:4b:0d:d0:
14:9a:0f:40:49:05:d0:3f:a0:8f:cc:9d:e9:57:67:b0:7f:fc:
98:ea:3f:70:22:c7:89:23:f8:07:03:a2:ad:50:da:1b:45:c4:
42:a4:6e:b0:c1:ce:52:cd:18:38:8b:cc:22:e8:c6:89:b8:92:
83:a9:f3:3e:e4:73:e7:f9:8a:1a:85:bc:64:3c:15:c6:4e:70:
36:33:2c:8e:dc:62:31:bf:39:ba:ed:43:8f:bd:87:b6:94:e8:
db:cb:e7:82:e9:88:d1:b0:8c:90:9f:d1:a3:21:f2:4b:90:43:
12:d0:b8:35:58:b5:5a:2d:90:d5:bd:89:75:8e:2d:6a:86:c6:
cc:74:14:8f:78:24:a0:1f:25:34:30:9a:74:d4:da:fa:7e:3c:
4e:d8:48:f5:2e:54:6e:28:47:7e:a4:0e:4b:2c:9f:b8:be:d0:
5b:2f:bc:a2:81:01:6c:80:be:45:3d:cb:d1:bf:88:37:69:7b:
9f:83:7c:36:f9:7a:63:23:72:ca:21:8b:18:5a:f3:4e:dc:ff:
c9:91:87:ed:34:5e:56:1d:31:6d:48:ea:d4:ce:76:30:36:cb:
64:63:15:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7nBUh1LUbzftHvkq3wCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDc4NTUwMDY4YmY3ODIyMDQwOGMyNWQ2MTJiYzJmYjAy
NDYwYzEwHhcNMjUwMTMxMTYwMDM2WhcNMjUwMjAxMTYwMDM2WjAzMTEwLwYDVQQD
EygzMDQ4N2VlYmNhYTU4NmEzNGNlZThjM2E1NGY3ZjRhOTY0YjcyYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmnUrtEkDH+4Ss/UO5COgFGfrKCn
W+Xps0ESFp7ZvF21ov3wbFlsGJ5lM/tPPu8+2A70Gozau983O2ZGqW7gmBobWFOJ
xR/yMXdL7dxnt7Tv5TS3Rn0/cdGNjNtVfJ6arNWnRPc7NYk2o/XghrEd2dt02bq9
gEBRc0gwtJR+GeSZ2CKYJX+Y5jfYdjqykmBKBytvbpo+kZ3WJKNR1DSasPVCJmFW
2pS6AwU6dvhFrJJd3qby5sVgRc+mNRzjmOniCljt4myTu1luyyUb2O1HBCcl5xCY
A0ioiugx7SYkyts6i9i9a9DVf23XjpPaiuHs0/MHsp0Ch7LnS9lZspRAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBIfuvKpYajTO6MOlT39KlktypyMB8GA1UdIwQY
MBaAFOdHhVAGi/eCIECMJdYSvC+wJGDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzkt
N2RhM2NkMjUzYmY2LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzktN2RhM2NkMjUzYmY2
LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMYDNgiH
JwKHKSLg/UMmgWGKVc2eNvQUWVG3KTqzgRfuSw3QFJoPQEkF0D+gj8yd6VdnsH/8
mOo/cCLHiSP4BwOirVDaG0XEQqRusMHOUs0YOIvMIujGibiSg6nzPuRz5/mKGoW8
ZDwVxk5wNjMsjtxiMb85uu1Dj72HtpTo28vngumI0bCMkJ/RoyHyS5BDEtC4NVi1
Wi2Q1b2JdY4taobGzHQUj3gkoB8lNDCadNTa+n48TthI9S5UbihHfqQOSyyfuL7Q
Wy+8ooEBbIC+RT3L0b+IN2l7n4N8Nvl6YyNyyiGLGFrzTtz/yZGH7TReVh0xbUjq
1M52MDbLZGMV4A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:31 2025 by rpki-client