Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: 7A/hJoXwQngNEZHRFDyFA8/K52MdZJlUsIc4QyveE/k=
Subject key identifier: 7D:3E:48:2F:42:7F:54:15:53:83:6C:1C:F1:2F:5F:6B:9C:A0:48:BB
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 0194BBCDCB368EA17805FA9CA25B20FF3539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 0490
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: 0tQL8HPhVyjxx4s+SSEdC5J2o/uPFHMCBV0mPgOjuss=)
2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cb:36:8e:a1:78:05:fa:9c:a2:5b:20:ff:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=7d3e482f427f541553836c1cf12f5f6b9ca048bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ae:52:9e:4a:28:f3:75:d1:cc:cf:ea:a6:fb:
a2:83:76:72:dd:76:f2:1a:0e:e6:0e:70:cd:da:70:
b3:15:e4:fa:7c:da:55:21:09:f6:1a:17:70:ce:82:
5b:1a:24:ef:97:c6:cc:39:18:c8:9f:a8:87:35:a8:
bd:78:a0:00:ad:b4:bd:87:83:cd:9f:d1:87:7b:9a:
1b:77:ab:07:bd:ad:84:35:43:7e:51:71:f2:83:0e:
c1:2b:ed:32:99:b9:a0:66:1f:36:44:06:af:c6:dd:
44:76:ea:dd:21:ea:81:19:aa:8c:18:64:1f:20:a1:
0a:df:65:1b:b5:d9:5a:ba:94:2e:10:2c:16:5e:8e:
32:5f:80:f0:38:74:7e:cc:28:cb:e9:4c:12:ad:29:
56:17:cd:ae:27:19:52:91:cb:cb:72:86:b8:56:00:
02:84:f4:d2:fd:cd:20:ab:61:68:54:63:b1:e1:b0:
78:3a:ff:93:d7:4c:ba:21:85:e9:e3:dc:c1:5c:d5:
14:8d:74:c6:e0:37:9a:70:89:c0:03:93:66:cb:42:
69:87:46:c4:96:14:cd:f8:24:9e:08:82:da:47:94:
f6:dc:28:3f:39:e6:73:03:4a:48:57:5b:87:d2:f5:
c2:29:4e:4a:6d:4a:44:aa:d1:f6:48:bb:8a:dd:fd:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3E:48:2F:42:7F:54:15:53:83:6C:1C:F1:2F:5F:6B:9C:A0:48:BB
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c2:be:c8:15:cb:bc:84:e3:d9:14:68:bc:69:14:11:57:e4:
15:be:ea:cb:2e:9d:59:d8:99:79:6c:09:31:3b:28:20:77:58:
52:c8:45:14:d8:08:b2:7a:d5:e4:4a:af:dd:98:fa:2c:b6:74:
68:db:7d:43:6c:ee:df:b0:60:0d:c9:a0:c5:4c:5a:ab:82:b8:
06:7f:c2:3b:90:de:be:4e:91:40:05:62:43:c2:33:88:be:eb:
0e:03:02:e5:2d:59:53:48:a4:a0:ca:5e:32:9f:ca:06:fc:0e:
a7:61:5b:cc:2f:6b:eb:01:f0:93:b8:f5:00:2e:55:7d:b3:81:
e3:9c:db:5f:83:b9:8f:be:55:23:29:50:a5:4f:51:f9:0b:a7:
de:3c:7b:cd:08:f2:36:ac:74:1e:e0:ac:5c:5e:fb:c3:f0:52:
62:0e:c5:66:fa:2b:59:0e:4c:d3:81:64:f2:cf:e7:8f:32:a3:
53:ce:18:a7:6d:f7:65:a6:b2:aa:f4:d0:e3:0d:d4:a9:a1:90:
2a:19:71:88:c1:47:27:7a:cf:f1:46:8f:2f:aa:d4:7d:12:cb:
97:f0:84:4c:c3:b1:5b:cf:35:fe:6d:34:58:66:34:fd:8b:18:
37:27:2e:2a:4c:6f:55:a0:0e:31:9f:eb:8d:10:1e:b7:54:b8:
db:10:7d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcs2jqF4Bfqcolsg/zU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1
Y2FlNGQwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
Eyg3ZDNlNDgyZjQyN2Y1NDE1NTM4MzZjMWNmMTJmNWY2YjljYTA0OGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA965Snkoo83XRzM/qpvuig3Zy3Xby
Gg7mDnDN2nCzFeT6fNpVIQn2GhdwzoJbGiTvl8bMORjIn6iHNai9eKAArbS9h4PN
n9GHe5obd6sHva2ENUN+UXHygw7BK+0ymbmgZh82RAavxt1EdurdIeqBGaqMGGQf
IKEK32UbtdlaupQuECwWXo4yX4DwOHR+zCjL6UwSrSlWF82uJxlSkcvLcoa4VgAC
hPTS/c0gq2FoVGOx4bB4Ov+T10y6IYXp49zBXNUUjXTG4DeacInAA5Nmy0Jph0bE
lhTN+CSeCILaR5T23Cg/OeZzA0pIV1uH0vXCKU5KbUpEqtH2SLuK3f2kiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0+SC9Cf1QVU4NsHPEvX2ucoEi7MB8GA1UdIwQY
MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt
NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4
LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMK+yBXL
vITj2RRovGkUEVfkFb7qyy6dWdiZeWwJMTsoIHdYUshFFNgIsnrV5Eqv3Zj6LLZ0
aNt9Q2zu37BgDcmgxUxaq4K4Bn/CO5Devk6RQAViQ8IziL7rDgMC5S1ZU0ikoMpe
Mp/KBvwOp2FbzC9r6wHwk7j1AC5VfbOB45zbX4O5j75VIylQpU9R+Qun3jx7zQjy
Nqx0HuCsXF77w/BSYg7FZvorWQ5M04Fk8s/njzKjU84Yp233ZaayqvTQ4w3UqaGQ
KhlxiMFHJ3rP8UaPL6rUfRLLl/CETMOxW881/m00WGY0/YsYNycuKkxvVaAOMZ/r
jRAet1S42xB9bA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:05:52 2025 by rpki-client