Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
File: imgZHKtu8GsyKwsSSHhdSEpFJPM.mft (raw, json)
Hash identifier: eh9zfZaAY0IWNXUke2NsIw5x5FN9TKFwI0szhhlwtfk=
Subject key identifier: E9:E2:81:20:1D:31:F8:49:C0:54:96:22:74:47:8A:5B:E3:C8:C2:06
Authority key identifier: 8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
Certificate issuer: /CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Certificate serial: 0194BC3C44935E28F33560AE71BB98AE7FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
Manifest number: 0E79
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: U8GRHKScYdSNdnB2mr1xryjNCyA.roa (hash: gCSVLFeQA2Qb3RyGGtdWNAIaM4Y9u0sDXVDglP6HH5k=)
2: imgZHKtu8GsyKwsSSHhdSEpFJPM.crl (hash: 3pHi5xJM0NFQAJKDKEHWFO0H8U+9/rFec6OJSEgbgWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:44:93:5e:28:f3:35:60:ae:71:bb:98:ae:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=e9e281201d31f849c054962274478a5be3c8c206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:51:41:bd:8f:55:e4:65:34:67:3e:ea:92:
73:97:e0:33:05:1f:cb:cd:03:5e:21:82:e4:3c:5a:
57:99:3f:12:79:71:81:74:34:6b:f6:86:e5:b0:64:
64:62:ff:07:9c:f3:33:74:83:ac:a3:88:27:b7:a4:
10:79:88:fe:c9:0f:ce:5b:22:12:f6:2c:de:48:b7:
ca:d8:29:ad:16:6a:72:b6:2e:3e:5e:93:37:d8:5b:
2c:c1:20:10:ff:7f:ec:bc:bd:d2:6a:46:c3:f5:f2:
cf:96:76:33:7f:cb:bc:dc:ec:17:91:6d:32:0d:5d:
18:f3:36:f6:ec:11:f9:32:21:c3:bd:02:73:93:fb:
dd:42:ea:6a:f1:1a:f4:22:46:b0:ec:78:0d:c6:d3:
d7:fc:5d:36:82:b8:d6:68:98:de:97:5b:91:dd:63:
ab:79:75:d5:2b:19:d2:61:4b:f7:73:dd:fa:f4:4a:
ea:12:b2:db:70:b2:2c:6d:5f:5b:33:44:bd:99:4e:
44:45:20:03:67:d0:b9:45:1d:1f:98:16:a6:c1:60:
4f:50:bd:2d:f1:7e:8e:68:21:88:5e:03:54:fe:7d:
d4:9c:d3:a1:68:d5:ce:15:e3:15:08:99:8e:f5:e1:
33:66:3e:11:c5:6e:c3:9f:27:2e:66:67:17:33:11:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E2:81:20:1D:31:F8:49:C0:54:96:22:74:47:8A:5B:E3:C8:C2:06
X509v3 Authority Key Identifier:
keyid:8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ee:f4:c2:35:6c:12:36:20:bf:3a:41:ac:ec:21:07:7f:87:
a4:5b:38:8b:35:68:97:f9:30:1c:b3:3c:31:21:bc:c8:db:0b:
7c:86:46:05:27:a8:ea:85:19:03:aa:bb:0c:71:d5:e2:5d:69:
04:bb:f6:da:53:ad:50:4f:5b:66:ae:b6:b9:06:c9:06:c7:41:
6e:5b:a3:27:c1:eb:2d:3e:5d:17:f5:13:88:bc:85:f9:f0:a0:
9b:f7:49:92:e2:91:6f:0f:08:64:66:9a:4a:fd:9b:25:7f:80:
af:6b:e7:e3:6f:ce:17:9f:7a:71:6f:3a:79:7e:87:6f:2b:57:
c1:cb:02:56:f3:d0:57:b2:e2:f1:c6:e9:d6:38:60:ef:82:69:
0a:b4:ff:21:93:44:ad:31:b0:9d:97:27:9b:3b:c2:2a:c2:35:
b6:16:13:6d:08:0c:f8:a1:15:8e:ec:b2:18:25:a6:6d:08:3c:
9f:17:ed:be:51:59:3c:4a:1d:ee:3c:bc:29:c8:fa:42:34:87:
1e:75:ae:3b:0c:11:a4:3c:92:da:41:11:a3:72:97:17:96:4d:
4f:a1:06:f9:24:99:ee:0f:de:9c:c0:3d:f7:32:49:2e:8e:a0:
7a:98:1b:23:97:74:48:a6:ce:e1:70:a5:53:6e:b0:92:b0:af:
27:c2:9c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PESTXijzNWCucbuYrn+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjgxOTFjYWI2ZWYwNmIzMjJiMGIxMjQ4Nzg1ZDQ4NGE0
NTI0ZjMwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EyhlOWUyODEyMDFkMzFmODQ5YzA1NDk2MjI3NDQ3OGE1YmUzYzhjMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YpRQb2PVeRlNGc+6pJzl+AzBR/L
zQNeIYLkPFpXmT8SeXGBdDRr9oblsGRkYv8HnPMzdIOso4gnt6QQeYj+yQ/OWyIS
9izeSLfK2CmtFmpyti4+XpM32FsswSAQ/3/svL3SakbD9fLPlnYzf8u83OwXkW0y
DV0Y8zb27BH5MiHDvQJzk/vdQupq8Rr0Ikaw7HgNxtPX/F02grjWaJjel1uR3WOr
eXXVKxnSYUv3c9369ErqErLbcLIsbV9bM0S9mU5ERSADZ9C5RR0fmBamwWBPUL0t
8X6OaCGIXgNU/n3UnNOhaNXOFeMVCJmO9eEzZj4RxW7DnycuZmcXMxG12wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnigSAdMfhJwFSWInRHilvjyMIGMB8GA1UdIwQY
MBaAFIpoGRyrbvBrMisLEkh4XUhKRSTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1nWkhLdHU4R3N5S3dzU1NIaGRTRXBGSlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lM2VlOGQtZTQ1OS00ZjQ3LWI3NWQt
OTcxMTdlZWI0ODkxLzEvaW1nWkhLdHU4R3N5S3dzU1NIaGRTRXBGSlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lM2VlOGQtZTQ1OS00ZjQ3LWI3NWQtOTcxMTdlZWI0ODkx
LzEvaW1nWkhLdHU4R3N5S3dzU1NIaGRTRXBGSlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfu70wjVs
EjYgvzpBrOwhB3+HpFs4izVol/kwHLM8MSG8yNsLfIZGBSeo6oUZA6q7DHHV4l1p
BLv22lOtUE9bZq62uQbJBsdBblujJ8HrLT5dF/UTiLyF+fCgm/dJkuKRbw8IZGaa
Sv2bJX+Ar2vn42/OF596cW86eX6HbytXwcsCVvPQV7Li8cbp1jhg74JpCrT/IZNE
rTGwnZcnmzvCKsI1thYTbQgM+KEVjuyyGCWmbQg8nxftvlFZPEod7jy8Kcj6QjSH
HnWuOwwRpDyS2kERo3KXF5ZNT6EG+SSZ7g/enMA99zJJLo6gepgbI5d0SKbO4XCl
U26wkrCvJ8KcWg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:06 2025 by rpki-client