Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: bv2sFpKaFNldPA2nhJSJ9dpOvQ6nVTvQ0qTUPPsDL20=
Subject key identifier: C8:67:CC:72:C9:46:25:A4:52:B0:EB:4D:60:35:2E:70:EA:98:7D:F3
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 0194BD4EAE81597FB352C3B6F960B8D81614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 0D95
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: uFfxhkeNSzXbOskKT92Hk3XLPgcJqVf/TpPCvW5uy3I=)
2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ae:81:59:7f:b3:52:c3:b6:f9:60:b8:d8:16:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=c867cc72c94625a452b0eb4d60352e70ea987df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:9a:d2:dc:d0:f1:6f:32:e9:a6:c2:56:81:
f4:b2:90:be:d7:09:67:d2:d3:9f:26:85:f9:b3:08:
6f:0d:ea:92:ce:5b:c6:66:ef:bc:62:36:fd:e9:ff:
22:dc:88:86:b3:b3:c2:fb:18:f6:52:0e:e0:1d:5b:
3d:f9:fa:ed:a1:ee:01:38:6f:81:d9:4e:35:10:f6:
e0:b1:a5:c6:5d:3b:21:4c:12:49:f6:63:eb:24:a1:
ec:3f:32:7d:f4:3f:9b:3a:ab:5f:52:4d:69:e5:75:
4e:1a:58:52:c2:5f:e4:3e:79:67:39:e6:6f:eb:e8:
a3:73:c2:19:ff:c5:8b:50:47:ce:a3:54:be:5c:ea:
c0:3f:7c:56:09:2b:14:06:1d:2f:56:e7:39:24:b8:
1e:12:28:1b:df:5c:1b:9b:07:0e:fa:10:51:39:13:
45:a4:f0:96:52:46:2f:2b:8e:f9:b6:10:3d:73:ed:
57:9c:fe:c6:13:e1:3c:bc:4b:c4:17:87:40:dd:de:
b6:30:d2:c9:9e:53:a7:4c:1a:85:03:03:38:9e:6f:
af:98:98:b3:cc:58:97:ca:db:95:8b:f7:6c:2a:e6:
ce:c9:75:38:99:ed:64:2d:32:a1:fc:12:eb:83:00:
fd:df:1f:dc:f1:cc:00:af:ff:1e:d8:0b:41:f2:29:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:67:CC:72:C9:46:25:A4:52:B0:EB:4D:60:35:2E:70:EA:98:7D:F3
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4d:ed:f8:00:16:4e:31:54:f5:8d:da:cf:b5:a7:55:00:ad:
7a:99:63:79:13:8b:78:c4:5e:46:87:f0:89:b3:f0:c3:ea:0f:
db:55:66:25:60:60:8f:5a:50:f0:71:bf:a1:42:0f:d4:9e:68:
61:14:5f:6c:07:e3:22:36:dd:c4:f1:f2:61:6f:9d:81:31:84:
52:cb:eb:0f:ca:bd:1e:94:23:c8:45:d9:41:1c:8b:ec:e2:7d:
56:02:3f:e0:47:56:9c:1e:fd:a8:8f:84:5e:67:c6:dc:21:ad:
54:ce:61:35:cb:24:34:29:9a:1c:10:c6:9d:3f:a0:35:f3:30:
40:61:89:a5:a4:29:ae:81:32:95:ff:12:ad:68:a1:4f:60:2a:
72:d2:65:0b:02:56:00:b3:1f:7d:b0:a0:a6:f1:4b:fb:1b:68:
57:4d:c2:da:c5:7c:23:ec:23:c6:2b:15:f2:a6:08:2f:15:4e:
d3:c4:d0:8a:84:96:64:9c:53:e8:a1:21:f4:98:6e:8a:08:78:
57:d2:70:0d:15:a5:fd:6f:3b:e9:3e:83:99:1d:81:63:93:a7:
ae:34:3b:a8:c3:16:09:f4:68:81:0c:29:5e:64:3c:9d:40:fd:
51:53:01:b6:80:e2:95:8e:c7:28:39:52:01:93:bc:c2:8a:ad:
34:2f:e0:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tq6BWX+zUsO2+WC42BYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2
ODI0ZjEwHhcNMjUwMTMxMTcwMDM3WhcNMjUwMjAxMTcwMDM3WjAzMTEwLwYDVQQD
EyhjODY3Y2M3MmM5NDYyNWE0NTJiMGViNGQ2MDM1MmU3MGVhOTg3ZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Nua0tzQ8W8y6abCVoH0spC+1wln
0tOfJoX5swhvDeqSzlvGZu+8Yjb96f8i3IiGs7PC+xj2Ug7gHVs9+frtoe4BOG+B
2U41EPbgsaXGXTshTBJJ9mPrJKHsPzJ99D+bOqtfUk1p5XVOGlhSwl/kPnlnOeZv
6+ijc8IZ/8WLUEfOo1S+XOrAP3xWCSsUBh0vVuc5JLgeEigb31wbmwcO+hBRORNF
pPCWUkYvK475thA9c+1XnP7GE+E8vEvEF4dA3d62MNLJnlOnTBqFAwM4nm+vmJiz
zFiXytuVi/dsKubOyXU4me1kLTKh/BLrgwD93x/c8cwAr/8e2AtB8imPnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhnzHLJRiWkUrDrTWA1LnDqmH3zMB8GA1UdIwQY
MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt
MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh
LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARE3t+AAW
TjFU9Y3az7WnVQCtepljeROLeMReRofwibPww+oP21VmJWBgj1pQ8HG/oUIP1J5o
YRRfbAfjIjbdxPHyYW+dgTGEUsvrD8q9HpQjyEXZQRyL7OJ9VgI/4EdWnB79qI+E
XmfG3CGtVM5hNcskNCmaHBDGnT+gNfMwQGGJpaQproEylf8SrWihT2AqctJlCwJW
ALMffbCgpvFL+xtoV03C2sV8I+wjxisV8qYILxVO08TQioSWZJxT6KEh9Jhuigh4
V9JwDRWl/W876T6DmR2BY5OnrjQ7qMMWCfRogQwpXmQ8nUD9UVMBtoDilY7HKDlS
AZO8woqtNC/gEg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:18 2025 by rpki-client