Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: y2d6q0jPJjAwirhhTZZ49JudpL5rbs3NsVmEEMzkefs=
Subject key identifier: 7D:8F:AB:B6:29:C0:E9:94:B3:7D:A4:23:07:0E:81:68:99:9A:9E:19
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 0194BD176E1FD12B6E95EA92DCC71E4B05C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: kiGs810kukS87UkAUYfoILgiVtn23VipZpFs3kB8TMk=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:1f:d1:2b:6e:95:ea:92:dc:c7:1e:4b:05:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=7d8fabb629c0e994b37da423070e8168999a9e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:2e:70:01:88:68:42:fb:95:41:49:fb:64:
2d:05:a2:dc:00:76:2c:54:1b:b6:ce:5e:61:c3:de:
7e:73:4e:14:43:ce:7b:a2:19:a1:48:7d:c2:91:1b:
d3:c3:6d:ea:54:9d:92:7c:42:4c:1b:00:5c:56:75:
df:18:c8:9a:81:48:69:de:01:10:e2:ac:2c:43:5e:
12:45:18:15:b1:bf:d4:b9:a0:06:f9:d0:5e:3b:01:
cf:1b:0b:43:40:d0:fe:83:49:0d:8d:61:71:cc:88:
fc:55:4d:55:14:b8:ad:fe:1b:67:28:06:fa:f5:57:
12:60:9a:44:84:3d:db:3b:ca:72:e3:77:6e:91:26:
51:f0:22:53:ab:92:d1:e6:da:cd:9a:16:06:fd:cd:
60:8f:42:3e:a4:29:6e:28:12:b1:8d:43:64:6c:00:
2a:db:6c:34:2e:a6:e0:5a:78:32:b7:01:2a:e8:5b:
80:a7:6e:7a:75:11:92:85:5e:8f:ba:a9:b3:29:da:
09:d4:c0:47:4c:cc:dd:46:a6:e2:f3:f2:12:b5:9b:
a8:ba:fc:70:11:8f:4a:51:25:a3:dc:e9:96:53:00:
a9:d0:e8:2d:34:24:6e:13:ad:62:5a:cd:59:62:b8:
ef:8d:80:f1:c8:23:a3:b5:b9:42:38:f0:c4:c1:ef:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:AB:B6:29:C0:E9:94:B3:7D:A4:23:07:0E:81:68:99:9A:9E:19
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7f:c1:ca:31:b0:20:c9:fe:02:93:d2:0a:be:c1:29:55:9e:
fa:54:aa:e2:dc:19:04:65:38:8e:92:b5:0b:97:53:ad:2f:e8:
7c:67:67:26:88:49:8c:61:98:cc:f4:f3:21:f9:5a:f7:8a:5f:
43:3d:3e:9c:86:f8:51:09:2c:83:cb:19:07:0e:50:6c:62:a6:
00:fa:fe:89:5b:e7:67:cc:2d:af:03:62:b8:18:be:a0:25:a7:
4a:f4:f0:f7:ef:e2:20:5d:ea:3e:25:da:0f:41:b7:b9:f3:9d:
49:57:18:4b:29:c1:71:0a:b8:29:9d:14:07:26:9c:c6:44:d1:
b6:a6:62:3d:83:48:cf:e9:89:56:3b:63:8d:88:76:06:3b:dd:
c0:6d:ee:ad:fc:92:af:7f:39:ab:e3:5f:2e:14:9e:52:94:91:
36:3f:6b:01:67:52:b4:a5:26:c8:50:bd:6a:71:8a:17:56:de:
cf:d2:00:b3:ad:2b:3d:9b:dc:6e:6b:af:14:d8:cc:8d:37:25:
02:d9:39:e8:3f:93:0b:75:31:c9:a3:bc:03:31:a7:e0:59:ef:
07:9e:87:67:04:10:ef:13:af:1f:24:e7:b1:b9:05:e2:9a:a0:
65:e8:6d:4b:e0:b5:11:69:1a:5b:2c:c1:a8:c9:98:5e:9c:73:
43:0e:29:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F24f0StuleqS3MceSwXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3
MjEwZTUwHhcNMjUwMTMxMTYwMDE2WhcNMjUwMjAxMTYwMDE2WjAzMTEwLwYDVQQD
Eyg3ZDhmYWJiNjI5YzBlOTk0YjM3ZGE0MjMwNzBlODE2ODk5OWE5ZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt8ucAGIaEL7lUFJ+2QtBaLcAHYs
VBu2zl5hw95+c04UQ857ohmhSH3CkRvTw23qVJ2SfEJMGwBcVnXfGMiagUhp3gEQ
4qwsQ14SRRgVsb/UuaAG+dBeOwHPGwtDQND+g0kNjWFxzIj8VU1VFLit/htnKAb6
9VcSYJpEhD3bO8py43dukSZR8CJTq5LR5trNmhYG/c1gj0I+pCluKBKxjUNkbAAq
22w0LqbgWngytwEq6FuAp256dRGShV6PuqmzKdoJ1MBHTMzdRqbi8/IStZuouvxw
EY9KUSWj3OmWUwCp0OgtNCRuE61iWs1ZYrjvjYDxyCOjtblCOPDEwe+aWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2Pq7YpwOmUs32kIwcOgWiZmp4ZMB8GA1UdIwQY
MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt
YWIyY2U5NGMxNDIzLzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz
LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn/ByjGw
IMn+ApPSCr7BKVWe+lSq4twZBGU4jpK1C5dTrS/ofGdnJohJjGGYzPTzIfla94pf
Qz0+nIb4UQksg8sZBw5QbGKmAPr+iVvnZ8wtrwNiuBi+oCWnSvTw9+/iIF3qPiXa
D0G3ufOdSVcYSynBcQq4KZ0UByacxkTRtqZiPYNIz+mJVjtjjYh2BjvdwG3urfyS
r385q+NfLhSeUpSRNj9rAWdStKUmyFC9anGKF1bez9IAs60rPZvcbmuvFNjMjTcl
Atk56D+TC3UxyaO8AzGn4FnvB56HZwQQ7xOvHyTnsbkF4pqgZehtS+C1EWkaWyzB
qMmYXpxzQw4p1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:35 2025 by rpki-client