Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: Kvn5cVb53SqT5ole5zc/U/C22+irfx4LXATMNU7CDEA=
Subject key identifier: EE:E4:75:36:21:10:AB:60:2D:15:12:55:59:7A:E5:DA:FE:FF:1F:77
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 0194BC3C495E3AA695A750B57EAB1CE8F0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 068E
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: AToN0Ys2YUC0kHbY3rV7rwB4uQP534r8hiICuqxBVJ8=)
2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:49:5e:3a:a6:95:a7:50:b5:7e:ab:1c:e8:f0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=eee475362110ab602d151255597ae5dafeff1f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:1e:fc:02:57:c7:43:1d:99:7c:85:d6:a0:
d8:c2:e9:c4:7f:56:27:da:7a:9c:1b:7f:9e:f9:0c:
b9:67:ce:d9:7b:f2:6e:6d:54:c6:21:d1:f3:a0:70:
da:84:0b:b8:81:c5:85:f9:2c:6e:7f:2d:60:b6:de:
9a:38:cb:e2:45:d6:e1:49:c0:0c:7f:d2:42:a8:1a:
5b:51:5f:86:5f:df:c5:02:81:9d:1a:ec:b9:da:dd:
82:4a:e3:b0:86:d1:55:2e:a2:f5:ae:2f:48:5b:3c:
56:6b:b0:33:81:c2:62:19:78:44:16:ad:6a:72:15:
11:19:04:bc:7d:50:11:48:1c:05:38:31:35:0c:cd:
aa:74:f3:08:71:bd:29:55:04:69:67:cd:73:95:76:
3a:53:d7:9c:ea:be:e4:0c:da:6c:ff:68:28:7b:d4:
1a:2c:cd:8b:67:4c:73:ad:46:96:75:2f:bd:57:98:
36:ac:51:d5:c7:ff:99:d7:cc:e5:23:d3:43:04:01:
be:17:9c:77:8e:2f:10:4f:40:8b:40:26:ec:00:ff:
59:2f:86:b8:b0:38:cb:8b:81:93:a7:76:85:14:61:
3d:7b:d8:ba:73:de:ce:05:78:92:08:09:72:c3:43:
04:57:6e:b8:d3:cb:f6:28:df:e8:d8:07:6a:7e:5e:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:75:36:21:10:AB:60:2D:15:12:55:59:7A:E5:DA:FE:FF:1F:77
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:da:68:78:5c:93:ac:41:97:3a:27:64:45:f8:38:b6:69:f8:
f7:85:ea:41:6b:31:0f:8e:e8:4b:b8:0d:67:cf:4a:b2:f9:50:
d0:56:d0:8f:e2:1b:28:93:bf:63:ad:93:bf:8a:d6:cb:ba:0d:
cc:20:dc:e4:59:71:dc:ad:74:0c:3e:d8:b6:aa:f0:eb:3c:46:
ea:ea:da:83:18:1b:88:e0:6e:0a:2e:33:f1:57:99:ee:3f:ef:
e7:18:b8:4e:34:79:3e:00:2e:8f:b0:f2:a3:23:ff:44:53:54:
42:5f:1e:a1:89:d6:0c:6a:74:e9:bc:e6:0d:a9:61:d0:88:80:
b7:c6:56:cd:61:5c:2f:57:38:f7:ec:0a:d1:8c:b3:dd:8e:05:
99:91:30:de:79:d3:53:95:04:23:ea:44:7d:d1:3b:c3:68:ca:
a6:cf:8b:8f:b1:50:65:b9:eb:a8:f1:43:d0:77:02:24:a2:20:
8b:8d:5d:2b:a2:be:fa:c5:8f:66:74:7a:a6:f3:0d:32:52:f8:
36:9c:d8:0f:18:26:5c:9c:63:d1:a5:5b:42:4f:33:cf:1b:a9:
93:fb:bf:b4:dd:47:e4:e1:12:67:6d:a1:ff:c9:65:89:6f:f6:
28:ca:d2:53:d8:75:43:2e:a1:95:e0:a9:02:8f:8d:13:e3:70:
58:58:86:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEleOqaVp1C1fqsc6PD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl
OGE3ZTIwHhcNMjUwMTMxMTIwMDU1WhcNMjUwMjAxMTIwMDU1WjAzMTEwLwYDVQQD
EyhlZWU0NzUzNjIxMTBhYjYwMmQxNTEyNTU1OTdhZTVkYWZlZmYxZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ce/AJXx0MdmXyF1qDYwunEf1Yn
2nqcG3+e+Qy5Z87Ze/JubVTGIdHzoHDahAu4gcWF+Sxufy1gtt6aOMviRdbhScAM
f9JCqBpbUV+GX9/FAoGdGuy52t2CSuOwhtFVLqL1ri9IWzxWa7AzgcJiGXhEFq1q
chURGQS8fVARSBwFODE1DM2qdPMIcb0pVQRpZ81zlXY6U9ec6r7kDNps/2goe9Qa
LM2LZ0xzrUaWdS+9V5g2rFHVx/+Z18zlI9NDBAG+F5x3ji8QT0CLQCbsAP9ZL4a4
sDjLi4GTp3aFFGE9e9i6c97OBXiSCAlyw0MEV26408v2KN/o2Adqfl6akwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7kdTYhEKtgLRUSVVl65dr+/x93MB8GA1UdIwQY
MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt
Mzg3NzA2YzJhODQ5LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5
LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdpoeFyT
rEGXOidkRfg4tmn494XqQWsxD47oS7gNZ89KsvlQ0FbQj+IbKJO/Y62Tv4rWy7oN
zCDc5Flx3K10DD7Ytqrw6zxG6uragxgbiOBuCi4z8VeZ7j/v5xi4TjR5PgAuj7Dy
oyP/RFNUQl8eoYnWDGp06bzmDalh0IiAt8ZWzWFcL1c49+wK0Yyz3Y4FmZEw3nnT
U5UEI+pEfdE7w2jKps+Lj7FQZbnrqPFD0HcCJKIgi41dK6K++sWPZnR6pvMNMlL4
NpzYDxgmXJxj0aVbQk8zzxupk/u/tN1H5OESZ22h/8lliW/2KMrSU9h1Qy6hleCp
Ao+NE+NwWFiG/w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:30 2025 by rpki-client