Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: o+XK7fKTVtOzubYexDF5YVLEFHgA+1x2AVwQFOWH52A=
Subject key identifier: 05:21:C2:B3:3F:15:13:4D:8F:CF:CB:05:5B:35:C4:5F:D2:53:27:83
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 0194BD4E91938BE5E016D68090512C58B3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0A1E
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: 9xSYfXzPAaSxI738roimHbJr7tYhAtOD4jlGr5GUmbQ=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:91:93:8b:e5:e0:16:d6:80:90:51:2c:58:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=0521c2b33f15134d8fcfcb055b35c45fd2532783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:c6:e8:b5:00:70:6c:68:0b:9b:5d:67:b2:
6f:a3:49:c9:45:3a:79:35:47:87:47:09:79:f4:bf:
e0:2b:32:39:01:dd:7d:09:cd:6c:e9:cd:17:da:41:
1e:f3:9c:ef:56:07:76:59:44:0e:d4:a6:d6:86:88:
9d:84:f8:a4:ab:41:ae:53:55:2e:e2:e6:ed:ae:1c:
a1:72:bf:72:ed:5b:62:11:c8:17:fe:10:e8:c3:ac:
1b:03:c0:98:62:a4:91:b4:45:fa:cd:fa:62:f7:e2:
0b:9b:6a:95:1f:4b:85:c1:fa:a3:5c:5c:d5:ae:bd:
94:ac:ab:a9:c8:63:32:a6:fd:4e:6f:f8:50:5f:99:
8c:61:37:19:d4:b5:e1:a8:e3:06:9f:ce:20:56:9e:
46:5a:0a:4f:32:ba:a8:49:29:39:2d:8a:60:ac:12:
c0:25:59:46:a7:52:f7:18:e1:00:f1:a3:13:59:1c:
2f:34:3f:e3:85:7f:cd:6d:a0:dd:1b:ca:ea:7c:d0:
e0:d7:db:6a:c7:20:1e:ea:ba:e8:3a:d9:83:17:84:
59:88:51:f3:eb:65:53:26:69:e8:aa:31:96:78:6c:
88:af:da:ea:73:68:f1:ab:5b:9f:a6:b1:ba:dc:bc:
07:0a:31:77:53:6e:11:54:fb:a0:ab:a6:79:ef:04:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:C2:B3:3F:15:13:4D:8F:CF:CB:05:5B:35:C4:5F:D2:53:27:83
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8e:2d:61:58:0f:a0:d8:02:96:4a:02:c3:7d:a8:99:d0:d0:
68:dc:8a:df:4c:f2:27:0d:d0:13:68:bf:a9:a1:44:85:5c:bf:
82:1c:29:1f:02:a0:f6:5a:5f:fd:e5:fc:f2:c8:50:c4:d6:f2:
69:3e:35:cb:64:7e:ea:23:37:d9:4c:ec:75:2e:28:e7:67:4f:
45:93:9e:69:7c:05:55:88:00:6c:d3:6d:c9:3b:4a:4a:60:03:
d4:cb:d0:e5:ce:f4:fc:64:42:99:72:f3:8a:2b:48:ee:74:f2:
ce:51:b2:17:05:ff:dd:7c:49:b5:a9:fb:0a:3e:e0:a1:69:11:
c1:57:13:74:67:2d:8e:7f:cb:d1:31:9b:ff:f3:09:13:aa:65:
a9:20:e4:d6:23:3e:d0:1f:75:9a:ec:09:35:7f:3a:58:c8:21:
61:c7:1f:33:d7:f3:0c:d1:fd:7e:40:e0:2e:82:f5:7f:63:3b:
d9:65:ed:8b:0a:0a:1b:17:cb:05:74:92:8a:9f:ad:80:4d:07:
3d:87:b3:6d:7e:b8:a6:6a:d8:ed:44:fd:00:57:d4:0e:73:65:
89:eb:70:22:6e:1b:5d:7b:74:3f:6c:4b:b7:11:a3:1b:2f:af:
b9:1b:20:25:dd:36:71:d6:48:9b:f3:66:85:ba:d6:29:00:b4:
d4:7a:3d:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpGTi+XgFtaAkFEsWLPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3
NTBkMDIwHhcNMjUwMTMxMTcwMDMwWhcNMjUwMjAxMTcwMDMwWjAzMTEwLwYDVQQD
EygwNTIxYzJiMzNmMTUxMzRkOGZjZmNiMDU1YjM1YzQ1ZmQyNTMyNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC7G6LUAcGxoC5tdZ7Jvo0nJRTp5
NUeHRwl59L/gKzI5Ad19Cc1s6c0X2kEe85zvVgd2WUQO1KbWhoidhPikq0GuU1Uu
4ubtrhyhcr9y7VtiEcgX/hDow6wbA8CYYqSRtEX6zfpi9+ILm2qVH0uFwfqjXFzV
rr2UrKupyGMypv1Ob/hQX5mMYTcZ1LXhqOMGn84gVp5GWgpPMrqoSSk5LYpgrBLA
JVlGp1L3GOEA8aMTWRwvND/jhX/NbaDdG8rqfNDg19tqxyAe6rroOtmDF4RZiFHz
62VTJmnoqjGWeGyIr9rqc2jxq1ufprG63LwHCjF3U24RVPugq6Z57wQqVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUhwrM/FRNNj8/LBVs1xF/SUyeDMB8GA1UdIwQY
MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt
MTBiMDIxMWQ5NmZjLzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj
LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo4tYVgP
oNgClkoCw32omdDQaNyK30zyJw3QE2i/qaFEhVy/ghwpHwKg9lpf/eX88shQxNby
aT41y2R+6iM32UzsdS4o52dPRZOeaXwFVYgAbNNtyTtKSmAD1MvQ5c70/GRCmXLz
iitI7nTyzlGyFwX/3XxJtan7Cj7goWkRwVcTdGctjn/L0TGb//MJE6plqSDk1iM+
0B91muwJNX86WMghYccfM9fzDNH9fkDgLoL1f2M72WXtiwoKGxfLBXSSip+tgE0H
PYezbX64pmrY7UT9AFfUDnNlietwIm4bXXt0P2xLtxGjGy+vuRsgJd02cdZIm/Nm
hbrWKQC01Ho9hA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:20 2025 by rpki-client