Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: /DgPQRTQwpt+mZw5inO41jblp98CbYY39pn6I4ug/b4=
Subject key identifier: 8F:D4:B9:85:51:BC:AD:9B:78:13:90:6B:C1:6E:29:C0:F4:10:5E:36
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 0194BBCE943E3402E67A485EE87D9FE8F4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: L+gY2gCZ/j1f5/2Bl6rt3fElBGIB+NU0zqLJiepK8P0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:3e:34:02:e6:7a:48:5e:e8:7d:9f:e8:f4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=8fd4b98551bcad9b7813906bc16e29c0f4105e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:a6:73:22:76:53:d9:ca:21:4d:53:3c:df:
30:7f:44:82:79:2d:99:f1:5e:89:c0:ea:21:cf:00:
3c:2a:fd:41:81:d6:c6:55:3e:a7:84:f8:15:b0:31:
28:7c:2f:e2:da:92:a0:5e:cb:d0:ba:9d:91:7e:ea:
2d:f3:27:b7:22:48:36:8b:87:f4:a6:ee:23:39:c4:
a4:70:98:86:ea:a1:78:8b:53:a6:01:20:f6:d6:3d:
33:fa:9f:08:c8:53:9e:bc:64:d9:b2:e7:7c:18:b2:
e3:ce:6a:db:3b:09:3e:0c:4f:2a:3c:66:48:7f:63:
16:10:75:d0:88:eb:89:e1:54:b7:ea:e7:d3:b6:cf:
d2:eb:ee:05:bd:57:16:cf:05:a6:2f:01:c9:1b:d9:
95:f5:55:37:58:fa:cc:46:11:d3:b5:79:59:bc:70:
71:62:06:f6:9a:65:9f:c1:9e:26:5c:e1:65:4b:85:
ab:54:3f:6c:b6:68:e2:88:4e:af:f3:39:02:19:12:
f7:7e:1a:ab:dd:58:06:30:b7:c9:79:7b:8b:09:b4:
6a:96:a9:ab:40:eb:4e:d4:47:2f:9e:24:6c:bd:26:
ea:7a:83:ce:4e:0b:1c:30:06:cd:c6:2a:5c:63:f1:
24:2f:aa:07:15:a5:24:88:9b:95:06:c5:a7:8f:19:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:B9:85:51:BC:AD:9B:78:13:90:6B:C1:6E:29:C0:F4:10:5E:36
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:32:76:36:63:a6:11:74:a6:f2:ce:34:fc:85:c6:ac:c9:10:
94:0c:01:7c:e0:74:31:91:70:27:e4:c9:80:dc:aa:5a:8b:20:
26:db:5e:cb:9e:5a:e5:79:e7:a8:79:f5:c9:6f:1d:07:40:4b:
d1:7e:3b:27:12:41:89:b0:d5:68:99:de:39:e1:37:25:15:f7:
5f:59:73:ed:cf:10:3d:5e:9f:eb:00:96:41:64:45:b4:f1:37:
ce:17:8e:43:93:69:43:13:1f:23:3f:27:12:63:d5:58:0f:c4:
38:7a:66:7f:a8:30:79:cd:a2:7c:af:1f:ba:9d:c1:35:99:4b:
a1:9b:df:0b:b7:b2:a0:d1:5d:47:9d:fa:a0:9d:fd:46:dd:39:
30:f0:86:47:d6:df:e4:16:97:a7:1f:ee:d6:80:ba:f1:7a:e6:
91:3e:1f:4f:da:70:38:1e:47:9a:bf:12:0c:6b:68:aa:a8:5e:
0f:b8:36:ff:81:40:c4:09:a6:4b:9a:4d:da:c5:4d:e7:f1:d9:
7b:d1:29:36:a2:0b:88:f9:04:f3:08:76:48:ba:e1:ee:bf:64:
dd:7c:59:a0:26:e0:52:b7:61:7f:c1:11:3e:b1:f7:a4:66:41:
55:1d:86:fe:5e:3c:01:52:c1:d5:a7:7f:4b:a8:a6:37:b8:c4:
eb:0c:fa:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpQ+NALmekhe6H2f6PSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzAzNTYxMzVhZGY0N2VkOTcwOGNiMGExMzY4MDg5NGMy
MzM5ZWEwHhcNMjUwMTMxMTAwMTA1WhcNMjUwMjAxMTAwMTA1WjAzMTEwLwYDVQQD
Eyg4ZmQ0Yjk4NTUxYmNhZDliNzgxMzkwNmJjMTZlMjljMGY0MTA1ZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcCmcyJ2U9nKIU1TPN8wf0SCeS2Z
8V6JwOohzwA8Kv1BgdbGVT6nhPgVsDEofC/i2pKgXsvQup2Rfuot8ye3Ikg2i4f0
pu4jOcSkcJiG6qF4i1OmASD21j0z+p8IyFOevGTZsud8GLLjzmrbOwk+DE8qPGZI
f2MWEHXQiOuJ4VS36ufTts/S6+4FvVcWzwWmLwHJG9mV9VU3WPrMRhHTtXlZvHBx
Ygb2mmWfwZ4mXOFlS4WrVD9stmjiiE6v8zkCGRL3fhqr3VgGMLfJeXuLCbRqlqmr
QOtO1EcvniRsvSbqeoPOTgscMAbNxipcY/EkL6oHFaUkiJuVBsWnjxmr2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/UuYVRvK2beBOQa8FuKcD0EF42MB8GA1UdIwQY
MBaAFBFwNWE1rfR+2XCMsKE2gIlMIznqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEt
ZTYzMTQ2M2IxMjNiLzEvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEtZTYzMTQ2M2IxMjNi
LzEvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjJ2NmOm
EXSm8s40/IXGrMkQlAwBfOB0MZFwJ+TJgNyqWosgJttey55a5XnnqHn1yW8dB0BL
0X47JxJBibDVaJneOeE3JRX3X1lz7c8QPV6f6wCWQWRFtPE3zheOQ5NpQxMfIz8n
EmPVWA/EOHpmf6gwec2ifK8fup3BNZlLoZvfC7eyoNFdR536oJ39Rt05MPCGR9bf
5BaXpx/u1oC68XrmkT4fT9pwOB5Hmr8SDGtoqqheD7g2/4FAxAmmS5pN2sVN5/HZ
e9EpNqILiPkE8wh2SLrh7r9k3XxZoCbgUrdhf8ERPrH3pGZBVR2G/l48AVLB1ad/
S6imN7jE6wz6WA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:03 2025 by rpki-client