Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: 8C8zev/eGrrP/WLmbUm2s6WG5HA733ix8AhXTGl9iAY=
Subject key identifier: 06:C8:34:80:2F:5E:75:C4:69:AE:63:AC:BC:D9:C8:E7:0F:4A:AF:51
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 0194BCE084C35368DA5F972B41B02C3AA6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: OAw5tzQtLGRsKW7QYcDgYOZJG5o9OBScc+jizOrZxEg=)
2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:84:c3:53:68:da:5f:97:2b:41:b0:2c:3a:a6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=06c834802f5e75c469ae63acbcd9c8e70f4aaf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:68:40:fb:68:96:d5:57:8b:07:24:84:c9:
3b:58:fd:15:ea:99:04:02:72:bf:1f:a5:b1:81:f3:
80:a1:d5:fd:f2:02:68:4c:78:78:83:c5:3d:5f:3b:
b0:d9:b8:37:94:6b:10:eb:39:87:f4:20:10:13:32:
cc:05:e6:eb:b3:f4:82:8f:e6:1f:cb:bd:8f:12:ca:
ff:b9:5c:81:76:16:49:78:a9:19:e9:10:89:99:65:
8b:83:95:73:85:0c:2c:65:22:ee:9f:3c:b7:1f:c7:
96:5a:80:c8:13:17:87:aa:0a:09:9f:01:3c:b6:f8:
df:f4:3e:56:b1:39:61:42:19:8a:d3:36:39:a0:ff:
76:6f:10:1c:41:c9:6a:a6:2e:1e:0e:15:7c:36:fb:
0f:71:8b:8a:6c:85:eb:c8:89:ad:fd:7b:41:88:69:
01:72:5e:c0:56:59:45:f8:77:bd:71:af:db:af:3d:
0b:fd:76:29:41:e7:1c:07:4a:25:3d:1f:da:34:dc:
f4:a8:8d:44:15:b0:82:6c:2f:29:9a:3c:7d:f4:e2:
31:49:d9:c5:5e:af:13:38:71:2b:45:5a:83:13:10:
cb:73:1c:f3:31:bb:2c:bb:b7:92:4e:9b:ef:9c:fc:
5d:2c:76:d1:6a:bc:75:fb:08:9d:42:93:55:2e:ce:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:34:80:2F:5E:75:C4:69:AE:63:AC:BC:D9:C8:E7:0F:4A:AF:51
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3c:52:03:e2:ed:d1:dd:50:d5:04:64:fa:50:9a:13:10:44:
e4:43:53:59:21:96:48:11:ad:f1:df:95:16:f2:ea:f8:00:fa:
0e:42:e8:b7:5d:cf:3a:fe:0a:3f:df:a1:2f:ae:e1:29:c3:f6:
ea:67:b6:20:69:a2:69:4c:25:07:29:b1:41:29:bd:d0:98:9a:
59:c4:52:6b:ba:9e:db:18:3c:06:3d:ed:97:6e:c7:02:99:f0:
c9:62:50:20:1a:e9:8e:49:35:ed:85:51:a7:c4:e0:dd:3b:ef:
07:fc:52:a9:2a:f1:52:eb:ac:4f:7f:1e:72:ef:be:e7:39:b2:
4c:fc:73:6e:9a:b4:b5:d9:c1:00:2f:7d:eb:fa:ea:9c:0b:2e:
5c:6e:a2:15:45:92:95:b6:e9:6f:ac:cd:a1:8c:96:df:9c:81:
d2:d5:af:35:77:0c:72:ed:8d:7a:50:24:21:8b:b9:83:35:ac:
d9:9c:3f:e4:ee:6c:d0:0a:0f:80:45:b6:64:4f:0c:bb:f0:89:
6b:df:73:41:22:d2:0f:0b:4f:48:91:f5:47:11:36:82:5d:0e:
c0:e4:95:22:7f:36:bf:2e:4a:88:e6:e2:eb:bb:bb:91:76:25:
c1:8b:06:6f:16:99:df:d2:97:4c:e1:57:f7:7d:06:49:11:b8:
9e:63:66:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84ITDU2jaX5crQbAsOqbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwN2E1YWYxOTZiOGEwZWE5NjBjMjhmNmIzZTc1MjkxYzdl
ODYxY2QwHhcNMjUwMTMxMTUwMDE4WhcNMjUwMjAxMTUwMDE4WjAzMTEwLwYDVQQD
EygwNmM4MzQ4MDJmNWU3NWM0NjlhZTYzYWNiY2Q5YzhlNzBmNGFhZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYFoQPtoltVXiwckhMk7WP0V6pkE
AnK/H6WxgfOAodX98gJoTHh4g8U9Xzuw2bg3lGsQ6zmH9CAQEzLMBebrs/SCj+Yf
y72PEsr/uVyBdhZJeKkZ6RCJmWWLg5VzhQwsZSLunzy3H8eWWoDIExeHqgoJnwE8
tvjf9D5WsTlhQhmK0zY5oP92bxAcQclqpi4eDhV8NvsPcYuKbIXryImt/XtBiGkB
cl7AVllF+He9ca/brz0L/XYpQeccB0olPR/aNNz0qI1EFbCCbC8pmjx99OIxSdnF
Xq8TOHErRVqDExDLcxzzMbssu7eSTpvvnPxdLHbRarx1+widQpNVLs4ubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbINIAvXnXEaa5jrLzZyOcPSq9RMB8GA1UdIwQY
MBaAFBB6WvGWuKDqlgwo9rPnUpHH6GHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjIt
ZjkyOWUyNTUxNjI3LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjItZjkyOWUyNTUxNjI3
LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDxSA+Lt
0d1Q1QRk+lCaExBE5ENTWSGWSBGt8d+VFvLq+AD6DkLot13POv4KP9+hL67hKcP2
6me2IGmiaUwlBymxQSm90JiaWcRSa7qe2xg8Bj3tl27HApnwyWJQIBrpjkk17YVR
p8Tg3TvvB/xSqSrxUuusT38ecu++5zmyTPxzbpq0tdnBAC996/rqnAsuXG6iFUWS
lbbpb6zNoYyW35yB0tWvNXcMcu2NelAkIYu5gzWs2Zw/5O5s0AoPgEW2ZE8Mu/CJ
a99zQSLSDwtPSJH1RxE2gl0OwOSVIn82vy5KiObi67u7kXYlwYsGbxaZ39KXTOFX
930GSRG4nmNmnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:14 2025 by rpki-client