Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: jvq+TPPGXvC/CAjg3jzFGkz9K+UwXtAEu6vi+jD8GUo=
Subject key identifier: C8:E7:C8:A9:80:7F:27:A7:0A:E6:1F:B0:90:EA:01:DF:2A:09:17:A2
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 0194BC05087B00EF76AA823DEA0D2002AEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 1383
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: phjGd1mqcMcOn1F+00EQNMagBWWDTEfBesBLs0UjX4s=)
2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:08:7b:00:ef:76:aa:82:3d:ea:0d:20:02:ae:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=c8e7c8a9807f27a70ae61fb090ea01df2a0917a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:12:e3:42:28:c0:94:3d:ae:bd:dd:2d:6e:
0c:75:0f:3e:fa:ee:b8:e0:52:36:7b:2e:51:b7:ad:
56:4e:82:59:9e:51:16:03:0c:31:5d:99:9f:b8:d8:
ea:f7:1e:3d:fb:e3:5e:01:21:4c:96:13:6d:f0:1e:
d6:c2:48:48:e2:f6:b4:a7:94:e8:13:11:4b:22:d4:
dc:52:90:c0:b8:de:71:ec:3a:40:4b:ea:d7:eb:07:
b8:3b:34:87:d5:31:40:0e:de:e4:3b:1b:a3:82:10:
45:b3:ca:63:37:2a:e7:21:b5:ea:f3:e8:4f:fe:9c:
f9:53:20:c8:3d:f4:41:5b:d6:5a:5e:2e:b7:ad:22:
28:aa:35:2e:e4:00:45:bd:17:fe:e2:87:66:d4:20:
19:9a:58:df:ec:30:bd:b4:82:60:c9:b5:71:ff:ff:
2a:a9:c7:d1:b0:86:ab:df:c0:f3:e7:c8:26:6a:47:
f3:40:17:10:47:ac:c4:c7:2d:e1:9a:be:8f:e1:d9:
27:ce:5a:26:10:e8:77:e6:44:4f:5a:b3:6e:4d:3a:
92:88:db:01:fc:1a:3a:23:66:8e:36:19:ef:e0:5c:
ab:9b:c5:19:7a:bf:ae:f4:06:64:32:cc:96:06:57:
37:8b:7d:ff:77:7a:0d:21:93:7b:fe:4f:6d:dc:f7:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:C8:A9:80:7F:27:A7:0A:E6:1F:B0:90:EA:01:DF:2A:09:17:A2
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a6:77:73:2a:d2:96:e9:7b:9f:a2:1a:e5:2c:c6:0c:02:b9:
f3:d4:e2:41:1b:79:2d:a7:89:5f:f8:62:7c:0f:eb:88:cf:00:
b3:c0:73:03:36:f6:cf:78:14:6c:4a:48:54:5a:b3:eb:7b:82:
e2:85:59:ea:a9:6b:d6:3b:85:a2:17:c4:c6:e2:32:76:ef:29:
ec:9a:13:48:b9:84:be:66:88:4f:45:33:9f:4a:59:1a:1d:cb:
dd:26:81:06:64:54:23:f4:4b:ca:49:d6:3b:0e:13:bf:a2:ee:
84:83:7e:61:69:43:90:06:4f:56:12:1d:60:41:ee:7c:c0:56:
b8:a0:0f:e6:6e:37:24:df:e3:1c:a9:ff:95:ba:12:ae:f3:4e:
71:12:df:97:82:8c:fb:5b:1f:e8:83:26:b9:53:d9:51:5c:50:
54:dc:18:9d:4b:c3:2f:64:67:34:b1:61:99:22:a4:66:98:f2:
01:39:53:e8:49:e9:4b:33:f3:7a:7b:11:74:9b:fd:79:2a:9c:
8a:80:4f:49:77:67:35:2f:f0:f1:27:43:ac:e0:1e:4c:e8:8a:
a5:11:3c:f7:5a:a8:de:08:8e:25:43:79:c2:6d:ae:d1:7e:17:
62:b4:5e:9f:6e:9e:53:4a:cb:0b:92:23:19:d0:f9:c0:f0:b3:
6b:3b:22:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQh7AO92qoI96g0gAq7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2YyMzk0NGUzZDc4ZGE5MjAwNTVkNzJjNzRkMDJiZTU0
NTVmMzUwHhcNMjUwMTMxMTEwMDMzWhcNMjUwMjAxMTEwMDMzWjAzMTEwLwYDVQQD
EyhjOGU3YzhhOTgwN2YyN2E3MGFlNjFmYjA5MGVhMDFkZjJhMDkxN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5QS40IowJQ9rr3dLW4MdQ8++u64
4FI2ey5Rt61WToJZnlEWAwwxXZmfuNjq9x49++NeASFMlhNt8B7WwkhI4va0p5To
ExFLItTcUpDAuN5x7DpAS+rX6we4OzSH1TFADt7kOxujghBFs8pjNyrnIbXq8+hP
/pz5UyDIPfRBW9ZaXi63rSIoqjUu5ABFvRf+4odm1CAZmljf7DC9tIJgybVx//8q
qcfRsIar38Dz58gmakfzQBcQR6zExy3hmr6P4dknzlomEOh35kRPWrNuTTqSiNsB
/Bo6I2aONhnv4Fyrm8UZer+u9AZkMsyWBlc3i33/d3oNIZN7/k9t3Pfw+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjnyKmAfyenCuYfsJDqAd8qCReiMB8GA1UdIwQY
MBaAFBN/I5ROPXjakgBV1yx00CvlRV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEt
NDA3YWY4OWFkOGU5LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEtNDA3YWY4OWFkOGU5
LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKZ3cyrS
lul7n6Ia5SzGDAK589TiQRt5LaeJX/hifA/riM8As8BzAzb2z3gUbEpIVFqz63uC
4oVZ6qlr1juFohfExuIydu8p7JoTSLmEvmaIT0Uzn0pZGh3L3SaBBmRUI/RLyknW
Ow4Tv6LuhIN+YWlDkAZPVhIdYEHufMBWuKAP5m43JN/jHKn/lboSrvNOcRLfl4KM
+1sf6IMmuVPZUVxQVNwYnUvDL2RnNLFhmSKkZpjyATlT6EnpSzPzensRdJv9eSqc
ioBPSXdnNS/w8SdDrOAeTOiKpRE891qo3giOJUN5wm2u0X4XYrRen26eU0rLC5Ij
GdD5wPCzazsitQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:43 2025 by rpki-client