Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: sEZ3Hf+8LtDcbJbJulTRcgwNJf11f1nbLmsfjwAhVtQ=
Subject key identifier: ED:5D:6C:50:E7:96:F6:64:52:32:F7:CC:7B:32:D1:48:E1:19:3D:7B
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 0194BD177268E1E3BA92E4DD8FE0D155A349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 0D17
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: rOjBK0V/qT8tjjacjVTWL+k413/OEFlGeqXjhAL9JYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:68:e1:e3:ba:92:e4:dd:8f:e0:d1:55:a3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=ed5d6c50e796f6645232f7cc7b32d148e1193d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:58:f8:36:6e:f8:b9:ec:8e:19:bb:d7:fb:35:
f7:d7:dc:f8:b6:73:5b:55:5d:67:be:3d:14:ba:8f:
5f:cb:62:7c:38:d7:c5:75:9d:26:50:93:89:62:e2:
07:33:5e:fd:e0:d5:dd:3c:b6:29:1d:1a:3d:46:4a:
72:65:ca:ac:37:ab:bc:5f:09:86:76:fa:7b:52:38:
fd:dc:60:3b:ce:c4:14:82:00:04:f6:b6:5e:c1:79:
eb:05:98:cf:62:93:36:50:87:72:1a:16:e0:1c:3a:
f2:e4:1d:9e:f1:9b:9c:64:b9:ee:10:9f:a6:ab:5a:
c0:d9:4a:d4:c9:af:92:32:fd:5d:f1:8b:99:19:4e:
ab:b3:48:0c:51:a7:11:04:c2:29:c3:c6:bb:f7:20:
1f:8d:36:02:b6:fd:9a:69:93:97:25:2f:b1:e3:56:
54:e8:e9:7d:83:b6:e2:d1:12:10:81:2d:52:b2:31:
3b:4b:6b:20:c8:70:9b:12:f7:6b:e0:38:2f:20:b7:
86:63:a2:aa:12:a3:ef:7c:ad:71:cf:27:be:dd:71:
3f:e2:18:c2:07:0b:3f:95:5d:b8:b9:b8:d0:29:47:
b8:80:8f:07:4b:3e:a8:f8:ad:30:bf:fc:65:d8:2a:
8f:28:0e:4e:00:52:2e:ff:7a:99:61:6b:d0:0e:59:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5D:6C:50:E7:96:F6:64:52:32:F7:CC:7B:32:D1:48:E1:19:3D:7B
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c3:b6:7c:5c:66:29:00:1f:c3:c2:e2:03:8c:35:94:85:38:
b9:06:23:96:8a:50:e2:d7:4f:d8:26:f8:5a:1d:30:53:58:ee:
c9:2a:7f:51:03:8f:38:26:8a:30:d5:9e:8e:57:0a:5d:6b:45:
2e:ff:86:c0:3b:c8:13:fd:6c:ec:68:1c:cf:a7:e6:51:f1:de:
c4:22:a4:30:ae:c2:1b:ba:99:32:36:1c:ae:76:35:e2:34:a3:
f3:85:3d:34:e4:ff:09:0e:3b:ee:d7:ee:6b:67:d9:af:ab:c4:
45:bb:4e:d5:43:41:9c:92:19:2f:43:e3:c8:f2:25:6f:8a:38:
e3:bc:aa:d1:63:f2:5a:eb:b6:a8:e2:8b:cf:8a:c7:88:28:6d:
9a:0b:96:a6:06:5b:ad:d3:c4:b2:b3:c5:f7:cc:c5:0d:a0:fb:
bc:e7:48:b1:c5:58:56:73:3e:a4:80:53:b8:8a:bd:99:b3:37:
6b:39:6a:d9:f5:bb:2a:af:8d:41:25:ec:fb:29:29:43:e9:45:
ae:fc:31:3f:0e:f4:87:d3:db:86:f3:da:b8:a9:5c:18:f1:27:
d7:9c:87:37:f7:45:97:b8:6a:6b:76:9c:6e:49:91:db:96:06:
ee:62:72:98:e7:3d:32:1c:d5:ea:e0:65:1b:0b:9e:46:d0:bf:
e1:be:88:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3Jo4eO6kuTdj+DRVaNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MDI0ZDQ4MGIzNzcwNWZhMDA5MWI1Nzc0MTc0ZTgwZmRk
OGFkZDgwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
EyhlZDVkNmM1MGU3OTZmNjY0NTIzMmY3Y2M3YjMyZDE0OGUxMTkzZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Vj4Nm74ueyOGbvX+zX319z4tnNb
VV1nvj0Uuo9fy2J8ONfFdZ0mUJOJYuIHM1794NXdPLYpHRo9RkpyZcqsN6u8XwmG
dvp7Ujj93GA7zsQUggAE9rZewXnrBZjPYpM2UIdyGhbgHDry5B2e8ZucZLnuEJ+m
q1rA2UrUya+SMv1d8YuZGU6rs0gMUacRBMIpw8a79yAfjTYCtv2aaZOXJS+x41ZU
6Ol9g7bi0RIQgS1SsjE7S2sgyHCbEvdr4DgvILeGY6KqEqPvfK1xzye+3XE/4hjC
Bws/lV24ubjQKUe4gI8HSz6o+K0wv/xl2CqPKA5OAFIu/3qZYWvQDlktiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1dbFDnlvZkUjL3zHsy0UjhGT17MB8GA1UdIwQY
MBaAFHgCTUgLN3BfoAkbV3QXToD92K3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUFKTlNBczNjRi1nQ1J0WGRCZE9nUDNZcmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83ZmZjYjMtMzU3Zi00MzZkLThhZTMt
MDA5NDc3ZTg0YTg2LzEvZUFKTlNBczNjRi1nQ1J0WGRCZE9nUDNZcmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi83ZmZjYjMtMzU3Zi00MzZkLThhZTMtMDA5NDc3ZTg0YTg2
LzEvZUFKTlNBczNjRi1nQ1J0WGRCZE9nUDNZcmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8O2fFxm
KQAfw8LiA4w1lIU4uQYjlopQ4tdP2Cb4Wh0wU1juySp/UQOPOCaKMNWejlcKXWtF
Lv+GwDvIE/1s7Ggcz6fmUfHexCKkMK7CG7qZMjYcrnY14jSj84U9NOT/CQ477tfu
a2fZr6vERbtO1UNBnJIZL0PjyPIlb4o447yq0WPyWuu2qOKLz4rHiChtmguWpgZb
rdPEsrPF98zFDaD7vOdIscVYVnM+pIBTuIq9mbM3azlq2fW7Kq+NQSXs+ykpQ+lF
rvwxPw70h9PbhvPauKlcGPEn15yHN/dFl7hqa3acbkmR25YG7mJymOc9MhzV6uBl
GwueRtC/4b6IHA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:00 2025 by rpki-client