Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File: EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier: m/wmQM4qdqyYfUhDYvoCSXSjfLFzCa9xQdfvOaiWZwo=
Subject key identifier: 65:3F:46:86:0F:90:F4:FB:C2:B1:09:28:70:09:0B:9B:74:04:6D:3A
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer: /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial: 0194BBCE5CC8BDA7DE5EDD550952B313AD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: U3tRs6AuVpnLXazrjFDhKaY7jV+UGsPcbwFTq40R370=)
2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=)
3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=)
4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=)
5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5c:c8:bd:a7:de:5e:dd:55:09:52:b3:13:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=653f46860f90f4fbc2b1092870090b9b74046d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:a8:9d:64:b7:47:47:e2:78:93:31:97:09:
85:e1:20:3d:48:96:2f:0a:48:6f:3e:fa:e0:fc:fa:
ad:e2:c2:ac:6a:82:98:cb:a3:cf:a4:c7:3d:2e:ce:
f7:0f:2c:48:54:2d:2f:48:52:97:b2:54:e3:a7:ef:
04:4c:1f:02:41:b5:f4:b1:96:67:cf:35:7d:f6:3d:
71:8c:99:92:3a:b9:4e:78:85:eb:6c:09:29:2f:fd:
03:eb:cd:59:84:89:ca:cb:cc:89:84:d7:58:42:0e:
67:d7:29:2a:d1:eb:eb:cc:a3:3a:63:0c:53:37:d9:
0e:c5:f6:d4:d9:83:1e:99:7d:b3:06:33:8c:e0:f8:
43:6c:10:7f:50:57:e8:53:2f:b4:50:ba:b7:3f:73:
a0:c4:83:6e:ee:f0:38:f1:4e:83:c1:95:db:7e:c6:
79:db:66:e8:7c:b5:66:5c:13:d8:ca:59:eb:79:39:
a2:87:3a:13:06:0d:16:3a:42:3a:9c:f3:ab:75:47:
2d:b2:38:6c:cb:b3:35:ec:f4:c3:9d:36:49:e4:be:
f0:c5:92:22:8c:dc:51:6f:90:c6:a1:55:ab:5b:8d:
73:85:83:ad:31:11:a0:b9:41:04:ba:3c:ea:b3:f4:
37:ed:2d:ac:46:e6:03:81:cf:4f:56:0c:f3:dd:1a:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:46:86:0F:90:F4:FB:C2:B1:09:28:70:09:0B:9B:74:04:6D:3A
X509v3 Authority Key Identifier:
keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:8c:4e:ed:5b:29:6c:4d:8d:53:aa:ed:35:41:56:bc:59:
83:d1:f9:fe:8c:46:0b:a8:32:40:83:3a:0d:2c:0c:c0:3e:b8:
cc:19:59:0d:05:d8:ca:e3:e6:ed:81:9d:ec:fb:b4:12:38:90:
9a:df:0e:c5:d5:15:32:2a:7d:53:29:8e:40:0a:6a:df:da:59:
78:08:86:fb:eb:f1:b4:0c:d1:2f:5a:2c:63:b7:2f:0a:0f:a2:
8e:d8:a6:2f:a1:d0:62:58:d2:d1:f7:cc:85:6f:84:96:9e:d8:
69:20:5f:1a:09:70:fe:13:6b:8c:e2:7f:11:75:45:70:2c:46:
f3:1e:ee:e5:37:ee:34:35:7f:bc:c2:3c:cb:9e:da:0d:6b:8b:
df:6b:ff:5d:25:ad:60:56:c6:9e:59:c4:2c:a9:0f:48:1b:b7:
d0:54:66:34:10:43:16:d1:9b:41:29:3d:5c:6a:93:18:6a:cf:
78:f9:5f:49:d9:eb:3f:bc:b0:ed:d5:de:76:45:a9:31:fa:c4:
cd:69:96:b8:af:db:c2:de:36:8d:ac:f2:2e:4c:a1:a6:4a:32:
bc:35:81:58:bc:51:fb:f4:00:89:b4:3b:8b:a2:6b:a5:6e:63:
7d:e7:ee:d4:fb:06:16:67:d0:d7:8c:79:47:3b:70:f9:c6:d5:
85:c1:67:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlzIvafeXt1VCVKzE60fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzBjZDhlMTNjODZkOGVmODM1YzFhYWM3ZDVmOTUzNDU1
YzAzNWMwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
Eyg2NTNmNDY4NjBmOTBmNGZiYzJiMTA5Mjg3MDA5MGI5Yjc0MDQ2ZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvionWS3R0fieJMxlwmF4SA9SJYv
CkhvPvrg/Pqt4sKsaoKYy6PPpMc9Ls73DyxIVC0vSFKXslTjp+8ETB8CQbX0sZZn
zzV99j1xjJmSOrlOeIXrbAkpL/0D681ZhInKy8yJhNdYQg5n1ykq0evrzKM6YwxT
N9kOxfbU2YMemX2zBjOM4PhDbBB/UFfoUy+0ULq3P3OgxINu7vA48U6DwZXbfsZ5
22bofLVmXBPYylnreTmihzoTBg0WOkI6nPOrdUctsjhsy7M17PTDnTZJ5L7wxZIi
jNxRb5DGoVWrW41zhYOtMRGguUEEujzqs/Q37S2sRuYDgc9PVgzz3RrSkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU/RoYPkPT7wrEJKHAJC5t0BG06MB8GA1UdIwQY
MBaAFBIwzY4TyG2O+DXBqsfV+VNFXANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kMWYzOTAtNGVjNS00YzQyLThlNTQt
MDFmYjQ2YTQzM2UxLzEvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kMWYzOTAtNGVjNS00YzQyLThlNTQtMDFmYjQ2YTQzM2Ux
LzEvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHiMTu1b
KWxNjVOq7TVBVrxZg9H5/oxGC6gyQIM6DSwMwD64zBlZDQXYyuPm7YGd7Pu0EjiQ
mt8OxdUVMip9UymOQApq39pZeAiG++vxtAzRL1osY7cvCg+ijtimL6HQYljS0ffM
hW+Elp7YaSBfGglw/hNrjOJ/EXVFcCxG8x7u5TfuNDV/vMI8y57aDWuL32v/XSWt
YFbGnlnELKkPSBu30FRmNBBDFtGbQSk9XGqTGGrPePlfSdnrP7yw7dXedkWpMfrE
zWmWuK/bwt42jazyLkyhpkoyvDWBWLxR+/QAibQ7i6JrpW5jfefu1PsGFmfQ14x5
Rztw+cbVhcFnoA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:29 2025 by rpki-client