Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File: 70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier: j7dT0pfPFrFftKJNdAMbGFecaRZ4FCPba3J4xAEblxo=
Subject key identifier: EF:27:E1:BA:A2:8F:92:08:A8:5B:C5:0E:58:F3:89:C2:B3:E3:4B:9E
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 0194BBCDDCE27932A359F97CA3918EEB91D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number: 0B95
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: K3hTmupUuvByG/BKe1HtGtNXs9IUzkphQVvP9/MbENQ=)
2: S4KhO_-8xzMvt1B6k_-GK_XNTGs.roa (hash: 298ot3rN9ux+k96S6A3kz+LkCwnTR/d/qtOX4jSeeqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:e2:79:32:a3:59:f9:7c:a3:91:8e:eb:91:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=ef27e1baa28f9208a85bc50e58f389c2b3e34b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:af:cd:4a:92:3b:a6:3d:71:ed:a2:43:60:
20:e9:96:8c:76:cb:b9:32:1f:8c:d9:f9:13:fe:31:
a9:9e:29:73:22:b2:1b:4a:d1:01:0c:07:44:99:a0:
c8:1f:bf:69:ec:3e:61:7c:cd:3d:f2:b8:8a:36:7c:
fa:82:6c:0b:1d:c6:81:66:a8:4f:10:36:4e:27:d1:
c8:b3:31:32:84:9e:da:6f:16:b7:11:f7:66:a8:fb:
71:1a:c6:70:53:b6:48:00:a3:ce:e6:14:f6:30:8c:
06:59:a7:cb:0e:d9:d6:7f:0f:20:07:ec:52:83:95:
95:b0:c6:19:b1:36:a8:d8:b8:d3:75:68:53:60:cd:
56:64:b1:29:00:ec:ba:3c:dc:61:ff:17:52:2e:9b:
03:87:6e:04:af:a7:5b:65:c7:d6:7d:40:e8:0d:39:
b1:8d:90:c2:67:39:69:10:18:12:68:5a:bd:b6:5a:
11:e6:26:c5:af:29:8b:db:b6:c9:e4:22:9c:28:09:
fb:62:bc:a8:00:06:64:c9:55:b3:7a:08:f7:c9:f2:
c8:f7:49:aa:8a:25:0d:5d:29:1b:89:6c:2e:72:42:
ef:e1:48:70:55:4c:19:81:66:24:d1:58:29:f2:12:
f8:ea:25:67:15:69:da:4c:21:44:ce:a1:e9:fa:06:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:27:E1:BA:A2:8F:92:08:A8:5B:C5:0E:58:F3:89:C2:B3:E3:4B:9E
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:39:d3:97:40:9f:41:0b:0a:61:4e:20:b6:47:1c:a4:b0:da:
ed:9c:aa:be:c5:5a:fd:95:d4:86:47:9e:fd:9d:5b:db:f7:d3:
d1:34:6e:0a:9b:44:47:36:ed:a7:1a:c5:df:f3:70:4b:69:00:
64:f1:a2:02:6e:8a:a8:a2:6b:e3:49:e9:d1:a6:b1:8c:31:b4:
6f:f2:61:be:03:37:81:ad:d1:9c:e5:c7:2d:d5:8e:7b:83:a0:
d3:a0:88:7c:6b:37:4c:fc:16:b3:19:c3:37:6a:bb:5d:ba:82:
78:10:fb:44:9c:e5:fb:28:ae:a9:ec:61:b1:8f:90:ed:88:07:
f0:8e:8f:10:0e:4a:f8:45:61:30:98:7f:d5:10:f8:d4:00:2a:
a1:6a:0f:5c:44:82:0f:36:a5:e3:e6:10:96:bb:e8:57:54:dd:
56:0a:0f:66:ed:a3:de:43:85:a8:58:04:c4:a7:73:19:c4:2e:
ab:b9:2a:6f:8e:f1:3a:ce:17:64:76:e3:6c:e9:ca:1b:1c:f1:
29:f6:4e:df:82:5b:ac:d3:92:d6:0e:43:d2:4f:f9:aa:97:f8:
f9:71:c8:e6:6d:fe:f9:d3:af:33:7a:e5:10:37:b6:92:5f:22:
a6:5b:21:4f:02:e4:81:0a:f6:68:1f:7b:d9:83:5a:f7:c8:22:
4c:4a:f7:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdzieTKjWfl8o5GO65HTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDAxYTUyZTNmZGU2OTk0ODZlOTk2NzhkYmY0ODg3NTMy
OWMzM2QwHhcNMjUwMTMxMTAwMDE4WhcNMjUwMjAxMTAwMDE4WjAzMTEwLwYDVQQD
EyhlZjI3ZTFiYWEyOGY5MjA4YTg1YmM1MGU1OGYzODljMmIzZTM0YjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzOvzUqSO6Y9ce2iQ2Ag6ZaMdsu5
Mh+M2fkT/jGpnilzIrIbStEBDAdEmaDIH79p7D5hfM098riKNnz6gmwLHcaBZqhP
EDZOJ9HIszEyhJ7abxa3EfdmqPtxGsZwU7ZIAKPO5hT2MIwGWafLDtnWfw8gB+xS
g5WVsMYZsTao2LjTdWhTYM1WZLEpAOy6PNxh/xdSLpsDh24Er6dbZcfWfUDoDTmx
jZDCZzlpEBgSaFq9tloR5ibFrymL27bJ5CKcKAn7YryoAAZkyVWzegj3yfLI90mq
iiUNXSkbiWwuckLv4UhwVUwZgWYk0Vgp8hL46iVnFWnaTCFEzqHp+gYW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8n4bqij5IIqFvFDljzicKz40ueMB8GA1UdIwQY
MBaAFO9AGlLj/eaZSG6ZZ42/SIdTKcM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBBYVV1UDk1cGxJYnBsbmpiOUloMU1wd3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yNTIzOGMtOGVlZS00NDAzLTkxMDQt
OWNhOTQ3YWE2NjVhLzEvNzBBYVV1UDk1cGxJYnBsbmpiOUloMU1wd3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yNTIzOGMtOGVlZS00NDAzLTkxMDQtOWNhOTQ3YWE2NjVh
LzEvNzBBYVV1UDk1cGxJYnBsbmpiOUloMU1wd3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDnTl0Cf
QQsKYU4gtkccpLDa7ZyqvsVa/ZXUhkee/Z1b2/fT0TRuCptERzbtpxrF3/NwS2kA
ZPGiAm6KqKJr40np0aaxjDG0b/JhvgM3ga3RnOXHLdWOe4Og06CIfGs3TPwWsxnD
N2q7XbqCeBD7RJzl+yiuqexhsY+Q7YgH8I6PEA5K+EVhMJh/1RD41AAqoWoPXESC
Dzal4+YQlrvoV1TdVgoPZu2j3kOFqFgExKdzGcQuq7kqb47xOs4XZHbjbOnKGxzx
KfZO34JbrNOS1g5D0k/5qpf4+XHI5m3++dOvM3rlEDe2kl8iplshTwLkgQr2aB97
2YNa98giTEr3gg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:40 2025 by rpki-client