Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: dSfMQYJjY9jZeUk44rQq+BYLJsof52UdrqsvvCJgcQg=
Subject key identifier: 24:94:9A:F8:4B:C4:6A:6A:38:01:98:45:1F:01:55:05:87:9D:23:23
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 0194BC727A3F4C0DAA3CF75FF36A6B8632A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: npi6o/Fgkf7OhCCDa7ypHgC2bLKjII8cFPdXGjpOhuU=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7a:3f:4c:0d:aa:3c:f7:5f:f3:6a:6b:86:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=24949af84bc46a6a380198451f015505879d2323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:5f:5e:cc:d1:45:91:c3:d7:9e:4a:d4:16:
1c:b0:35:f5:68:f3:af:35:fa:d5:8a:1d:6b:4e:8a:
cf:aa:8a:06:16:52:0b:45:d9:ea:b6:f7:29:55:07:
eb:e9:da:aa:36:97:b5:8c:86:3c:fe:13:f1:a8:aa:
c9:66:2b:c5:50:09:cc:4f:88:66:d3:47:87:58:c8:
85:b6:d7:82:5f:d1:53:4c:f1:73:91:c2:bd:2b:1c:
4e:71:bc:ac:a4:97:cb:85:50:14:ad:01:15:03:b0:
ce:0d:0e:34:dc:78:8e:3f:dd:46:c1:e6:e0:6b:76:
c9:ad:08:df:65:e6:e5:a9:74:13:88:fd:53:92:a7:
b8:bc:26:08:71:ae:24:4c:02:9c:a4:a2:11:73:64:
8d:a2:00:69:40:c5:2a:40:27:6d:09:84:86:a5:83:
57:c8:74:d5:7c:5c:68:34:d5:e8:2f:52:7b:66:11:
b4:17:48:16:a3:96:2b:04:d1:4c:91:6a:e5:e6:45:
e4:07:b0:1c:cf:ec:d4:7a:1a:75:72:e0:a2:e8:e2:
69:d3:9b:49:dd:e0:e0:e3:ca:54:08:4c:ed:a2:48:
01:d4:e9:35:a8:e0:8f:4b:a9:c0:07:25:95:59:f5:
39:23:95:fd:b7:ca:a0:bf:7b:c2:70:66:e9:b1:7d:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:94:9A:F8:4B:C4:6A:6A:38:01:98:45:1F:01:55:05:87:9D:23:23
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c3:ec:cc:40:3a:e5:1b:00:33:1c:ba:14:bd:21:89:75:87:
52:aa:b2:9b:cd:cb:3b:91:4d:e8:e0:4d:d0:ed:74:20:ff:1f:
ee:a4:bb:7a:6a:11:39:58:6a:3c:c3:bc:81:fa:4a:37:1f:d0:
36:41:30:1f:e9:65:ba:fb:2c:8d:58:51:70:16:ff:a2:de:79:
e1:65:e0:52:a6:48:d1:6d:ae:ca:5e:e0:f1:ea:ff:05:ef:4c:
29:38:98:e0:45:19:5c:d0:5d:6b:ad:32:a9:6e:19:19:86:7d:
c5:03:a4:42:f6:97:ed:01:a3:7c:7b:6e:22:3d:0b:83:01:bf:
f8:48:48:86:cf:2e:f2:57:66:95:49:ec:c0:19:bf:14:0c:27:
c8:33:ec:b1:9a:fc:af:d2:f2:09:e6:af:a4:35:c5:ff:79:3e:
14:fc:63:3d:b8:4b:8c:c4:77:99:6f:e4:e0:14:2e:29:4d:68:
a3:db:b3:c5:1c:8b:d2:63:f3:24:67:31:1e:d2:4e:b7:9a:60:
2c:27:44:9d:8b:a5:02:37:ef:29:46:86:33:47:9f:6d:16:08:
84:8d:d4:01:78:f4:44:99:ce:1c:67:a8:4e:63:68:3f:10:f0:
5a:43:6f:cd:fd:bf:04:4f:90:9a:ca:06:ff:22:04:38:b6:0b:
42:30:19:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cno/TA2qPPdf82prhjKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjUwMTMxMTMwMDA2WhcNMjUwMjAxMTMwMDA2WjAzMTEwLwYDVQQD
EygyNDk0OWFmODRiYzQ2YTZhMzgwMTk4NDUxZjAxNTUwNTg3OWQyMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59FfXszRRZHD155K1BYcsDX1aPOv
NfrVih1rTorPqooGFlILRdnqtvcpVQfr6dqqNpe1jIY8/hPxqKrJZivFUAnMT4hm
00eHWMiFtteCX9FTTPFzkcK9KxxOcbyspJfLhVAUrQEVA7DODQ403HiOP91Gwebg
a3bJrQjfZeblqXQTiP1Tkqe4vCYIca4kTAKcpKIRc2SNogBpQMUqQCdtCYSGpYNX
yHTVfFxoNNXoL1J7ZhG0F0gWo5YrBNFMkWrl5kXkB7Acz+zUehp1cuCi6OJp05tJ
3eDg48pUCEztokgB1Ok1qOCPS6nAByWVWfU5I5X9t8qgv3vCcGbpsX3JPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSUmvhLxGpqOAGYRR8BVQWHnSMjMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8PszEA6
5RsAMxy6FL0hiXWHUqqym83LO5FN6OBN0O10IP8f7qS7emoROVhqPMO8gfpKNx/Q
NkEwH+lluvssjVhRcBb/ot554WXgUqZI0W2uyl7g8er/Be9MKTiY4EUZXNBda60y
qW4ZGYZ9xQOkQvaX7QGjfHtuIj0LgwG/+EhIhs8u8ldmlUnswBm/FAwnyDPssZr8
r9LyCeavpDXF/3k+FPxjPbhLjMR3mW/k4BQuKU1oo9uzxRyL0mPzJGcxHtJOt5pg
LCdEnYulAjfvKUaGM0efbRYIhI3UAXj0RJnOHGeoTmNoPxDwWkNvzf2/BE+QmsoG
/yIEOLYLQjAZ5w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:20 2025 by rpki-client