Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: eyQR4sSGtoa1Oc/Ddsx27EXxBii3k3BfZjlIOrNj7SE=
Subject key identifier: D8:18:C2:92:7B:18:CE:E9:3F:22:56:91:28:6D:41:05:2A:01:E5:EF
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 0194BD8585E738432C483867963154CD46D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 0F06
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: nof0MSb60fyzv1gZ28qTm1jDDx67HCyPfziYMCuw5EE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:85:e7:38:43:2c:48:38:67:96:31:54:cd:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=d818c2927b18cee93f225691286d41052a01e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:98:5b:06:60:32:8f:80:51:45:f4:9d:41:
4b:74:cc:c6:29:dd:db:ea:d7:a1:24:3c:f7:04:9c:
25:c9:24:33:dd:e2:11:05:82:9b:02:88:f3:f1:0e:
af:9d:f1:b3:a2:46:6c:dc:6c:f8:b7:15:7b:cb:63:
7e:bf:6b:a0:df:58:51:1e:27:3d:0a:26:b7:3e:fb:
96:5a:f3:7a:c9:f3:8d:dc:02:15:4a:5d:7f:29:7f:
b1:b3:33:46:89:ba:3c:f5:5e:56:29:5b:22:27:34:
67:79:77:94:c9:71:60:51:23:bd:d9:e1:fa:9d:53:
1f:e5:59:76:95:a1:55:6b:07:fd:32:61:6d:3e:c3:
84:bf:6f:bf:05:5d:77:c8:50:1c:04:6e:ef:5d:ee:
8d:f6:44:5d:e0:92:b4:00:7b:8a:e2:f1:32:c8:a5:
de:98:e3:0f:96:37:ff:f4:f4:57:03:d0:e0:19:7f:
ef:ac:6c:3c:d5:24:c1:41:7d:8a:0b:47:34:df:6c:
2b:1a:af:38:f0:a3:06:e9:84:c9:b2:5d:43:66:cc:
41:af:f2:e1:36:8e:f9:97:96:21:85:13:cb:a0:80:
0b:40:07:25:ee:bb:5d:b4:c8:0d:0e:58:bf:4c:0b:
ab:fc:80:bb:89:4c:b5:f6:3d:f3:fa:9c:84:10:a8:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:18:C2:92:7B:18:CE:E9:3F:22:56:91:28:6D:41:05:2A:01:E5:EF
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:54:ba:0e:b1:46:20:11:b5:ce:ac:f5:f6:0f:2b:29:59:3c:
00:52:1a:2d:9b:9f:4d:9f:73:35:64:ef:46:b5:e8:3c:a6:b7:
81:16:25:98:38:1d:c0:19:02:06:20:27:53:f1:13:0d:84:05:
c6:e0:f4:3b:65:9a:ca:ce:cf:35:f4:d9:7d:e5:5a:05:67:ca:
3c:87:86:f0:28:0f:ff:c0:8a:36:1f:44:d8:7c:3c:f3:71:f1:
78:3e:ea:df:9b:46:df:82:61:a4:a5:a1:b3:20:21:5e:5c:86:
50:0e:3b:03:14:95:63:b4:6c:f4:c6:5f:7b:52:55:e9:18:2e:
cf:69:b7:ed:a9:65:96:8c:67:cb:80:18:1a:be:0f:b9:33:98:
03:10:6c:47:cd:43:7a:92:12:c8:73:8f:d2:e6:82:c3:86:ea:
5c:9e:0c:27:39:56:39:6f:be:8c:42:a1:ce:69:15:07:d4:9d:
dd:88:c6:8d:fe:63:4d:19:ea:1a:71:26:01:55:d8:ba:e4:d8:
47:b8:f6:e7:de:a7:00:cc:2e:ec:27:07:03:3d:91:fc:3a:7a:
59:86:b0:a4:e6:7f:73:56:d1:e3:ef:69:f0:bc:3e:35:0f:e3:
f6:07:57:01:97:37:52:23:11:ab:fe:d5:8e:06:e3:58:20:22:
a3:09:44:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYXnOEMsSDhnljFUzUbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NjljNGJkODc2Nzc4MGJlYzE2MWEyYWQ2MTJhMjczNWRi
Y2FiZmQwHhcNMjUwMTMxMTgwMDMxWhcNMjUwMjAxMTgwMDMxWjAzMTEwLwYDVQQD
EyhkODE4YzI5MjdiMThjZWU5M2YyMjU2OTEyODZkNDEwNTJhMDFlNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RmYWwZgMo+AUUX0nUFLdMzGKd3b
6tehJDz3BJwlySQz3eIRBYKbAojz8Q6vnfGzokZs3Gz4txV7y2N+v2ug31hRHic9
Cia3PvuWWvN6yfON3AIVSl1/KX+xszNGibo89V5WKVsiJzRneXeUyXFgUSO92eH6
nVMf5Vl2laFVawf9MmFtPsOEv2+/BV13yFAcBG7vXe6N9kRd4JK0AHuK4vEyyKXe
mOMPljf/9PRXA9DgGX/vrGw81STBQX2KC0c032wrGq848KMG6YTJsl1DZsxBr/Lh
No75l5YhhRPLoIALQAcl7rtdtMgNDli/TAur/IC7iUy19j3z+pyEEKj74wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgYwpJ7GM7pPyJWkShtQQUqAeXvMB8GA1UdIwQY
MBaAFHlpxL2HZ3gL7BYaKtYSonNdvKv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZTM4OGItOWJlYS00OGU5LTk2NWYt
MGU4ZGRkNjkxZjYzLzEvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZTM4OGItOWJlYS00OGU5LTk2NWYtMGU4ZGRkNjkxZjYz
LzEvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFS6DrFG
IBG1zqz19g8rKVk8AFIaLZufTZ9zNWTvRrXoPKa3gRYlmDgdwBkCBiAnU/ETDYQF
xuD0O2Ways7PNfTZfeVaBWfKPIeG8CgP/8CKNh9E2Hw883HxeD7q35tG34JhpKWh
syAhXlyGUA47AxSVY7Rs9MZfe1JV6Rguz2m37allloxny4AYGr4PuTOYAxBsR81D
epISyHOP0uaCw4bqXJ4MJzlWOW++jEKhzmkVB9Sd3YjGjf5jTRnqGnEmAVXYuuTY
R7j2596nAMwu7CcHAz2R/Dp6WYawpOZ/c1bR4+9p8Lw+NQ/j9gdXAZc3UiMRq/7V
jgbjWCAiowlExA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:00:11 2025 by rpki-client