Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: ExTJNvWj7mAI2OmTOUfLoaWAqN8WjCWS2LhT4aeIPVc=
Subject key identifier: 44:83:0E:63:49:07:B1:56:54:B8:AE:3C:2E:52:62:9F:54:9F:6D:66
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 0194BD17F9FB3C9A0E20DB4C0ACD06EEB68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: awYv2+VhtiCmbxrdGXp3TN3eLKARRQkXb8xGk8pIQF0=)
2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f9:fb:3c:9a:0e:20:db:4c:0a:cd:06:ee:b6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=44830e634907b15654b8ae3c2e52629f549f6d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:93:ca:aa:df:b1:73:9d:74:40:d4:2e:e5:
a4:39:1c:fa:d0:5d:c4:95:4f:b0:27:eb:d8:ff:a3:
10:7f:48:de:72:6b:cc:ee:b3:af:cd:61:ac:9a:53:
3b:e9:29:c8:50:70:70:b8:f2:8c:ba:57:2d:3e:6e:
59:66:df:47:a2:72:15:39:7a:7e:c9:35:65:9a:f4:
f7:1b:ac:2e:f3:d8:ce:a5:49:4e:ec:cc:44:f9:c5:
8c:fc:66:87:0e:4c:c2:19:da:72:24:0b:80:96:3b:
aa:86:cf:85:11:cf:46:cb:2d:86:84:21:cb:b4:01:
05:f2:c4:d0:35:5d:2a:e6:e2:61:63:9e:22:5f:1b:
ae:5a:7f:63:76:32:5d:7d:f7:6f:17:41:3d:d9:60:
57:96:44:8b:24:dc:eb:9b:f7:51:a0:f1:22:6b:11:
71:65:64:44:e2:6e:c3:5f:88:81:c5:a9:6e:2b:38:
34:3b:ee:11:e7:1b:b9:d9:cc:dc:f4:d0:3e:2e:3e:
0c:5c:38:fe:12:59:45:f4:c1:8b:d6:06:3b:16:2b:
5b:d2:2b:91:a7:b1:41:5f:b0:f0:0c:c9:df:e9:bd:
94:84:af:1e:e4:2a:43:d6:14:ea:6a:fa:b8:a0:99:
06:a1:22:9e:a0:74:32:a8:c2:e4:06:88:cd:35:41:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:0E:63:49:07:B1:56:54:B8:AE:3C:2E:52:62:9F:54:9F:6D:66
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:dd:64:81:f3:dd:7d:34:52:27:80:24:53:7d:1f:9d:88:3f:
97:f2:ed:b7:d2:d2:1f:eb:d5:25:1b:5c:19:e2:75:86:35:17:
a7:31:1a:a8:3e:04:94:f1:46:c7:33:02:1c:13:11:00:d8:cf:
46:ca:44:a5:27:d8:d7:35:4f:82:29:81:ee:5b:83:51:30:5a:
fb:77:86:2d:58:76:e7:93:9b:e4:04:9c:f7:25:d6:17:2d:14:
6e:fe:e1:5f:c2:90:88:ce:79:4f:62:74:48:0d:46:bd:81:70:
73:4d:b3:44:9b:77:51:62:48:a1:b7:3d:1d:c7:4d:a2:2a:15:
8e:04:6c:9c:50:c3:5a:aa:3d:02:4b:d7:3f:e2:bb:3f:3b:2b:
13:65:60:2e:7c:e3:c5:f5:8f:6f:b5:e2:f4:12:9b:08:e7:c8:
f6:9a:3d:3a:19:0e:ed:c1:83:2e:e2:b6:97:c9:41:b3:12:40:
60:62:aa:8e:e0:15:9e:62:db:b8:27:20:34:7b:e9:7e:b0:e2:
25:74:a1:30:bf:71:5b:ee:de:1b:b8:0d:46:86:7a:79:ba:b9:
8a:2e:34:ff:6b:e6:14:d9:20:3d:19:4e:37:18:d3:87:77:c0:
59:51:b4:5e:a7:c6:d7:48:27:19:1c:4b:bd:93:1f:09:3a:4a:
db:b3:30:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/n7PJoOINtMCs0G7raNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwOTE5MmMwNzM4NjJlNjIyMGM1ZjkxMDZkN2M1NWUzZmM2
YzVkNGIwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
Eyg0NDgzMGU2MzQ5MDdiMTU2NTRiOGFlM2MyZTUyNjI5ZjU0OWY2ZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxmTyqrfsXOddEDULuWkORz60F3E
lU+wJ+vY/6MQf0jecmvM7rOvzWGsmlM76SnIUHBwuPKMulctPm5ZZt9HonIVOXp+
yTVlmvT3G6wu89jOpUlO7MxE+cWM/GaHDkzCGdpyJAuAljuqhs+FEc9Gyy2GhCHL
tAEF8sTQNV0q5uJhY54iXxuuWn9jdjJdffdvF0E92WBXlkSLJNzrm/dRoPEiaxFx
ZWRE4m7DX4iBxaluKzg0O+4R5xu52czc9NA+Lj4MXDj+EllF9MGL1gY7Fitb0iuR
p7FBX7DwDMnf6b2UhK8e5CpD1hTqavq4oJkGoSKeoHQyqMLkBojNNUG2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESDDmNJB7FWVLiuPC5SYp9Un21mMB8GA1UdIwQY
MBaAFBCRksBzhi5iIMX5EG18VeP8bF1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81M2MwNTEtNTU3Mi00ZjgzLWE3ZDYt
ZTZmZTY5MWQ5NDg5LzEvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81M2MwNTEtNTU3Mi00ZjgzLWE3ZDYtZTZmZTY5MWQ5NDg5
LzEvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASN1kgfPd
fTRSJ4AkU30fnYg/l/Ltt9LSH+vVJRtcGeJ1hjUXpzEaqD4ElPFGxzMCHBMRANjP
RspEpSfY1zVPgimB7luDUTBa+3eGLVh255Ob5ASc9yXWFy0Ubv7hX8KQiM55T2J0
SA1GvYFwc02zRJt3UWJIobc9HcdNoioVjgRsnFDDWqo9AkvXP+K7PzsrE2VgLnzj
xfWPb7Xi9BKbCOfI9po9OhkO7cGDLuK2l8lBsxJAYGKqjuAVnmLbuCcgNHvpfrDi
JXShML9xW+7eG7gNRoZ6ebq5ii40/2vmFNkgPRlONxjTh3fAWVG0XqfG10gnGRxL
vZMfCTpK27MwyQ==
-----END CERTIFICATE-----
Generated at Thu May 1 14:53:55 2025 by rpki-client