Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: scDin342bDVEA6FMvokoF4aUH8Fz8ziZoe5dNdbon1U=
Subject key identifier: FF:A8:83:15:2C:F1:77:A2:3E:87:1D:F2:88:E4:00:0A:A9:93:2C:52
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 0194BC729EFF4554DBC2079FB11BE13D411A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 0353
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: bhBMTMg003KMgnwgeXicOaBKctdwxYx2hjE9LWHyK+w=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9e:ff:45:54:db:c2:07:9f:b1:1b:e1:3d:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=ffa883152cf177a23e871df288e4000aa9932c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:0c:f5:ab:09:2e:3f:f8:0b:a3:03:ea:4d:
00:aa:c9:65:62:32:27:e3:76:1d:2d:22:ac:c0:60:
7d:44:9d:ff:13:fc:fc:0c:ca:78:3a:68:c4:b5:5b:
9b:3d:c4:3f:aa:4c:01:83:fc:45:b7:c6:2d:f0:7f:
28:ba:54:d1:59:ac:7e:0c:d3:05:ad:c8:52:87:03:
f5:03:70:62:1b:1c:25:b2:aa:02:76:17:5b:8d:5e:
5b:8f:0d:70:3a:13:a2:00:7e:6a:25:92:76:d3:45:
cb:0c:c7:a3:00:e1:cd:88:a2:2a:71:1b:c5:95:9b:
91:19:80:36:e4:ab:ed:1e:e5:cd:e7:94:22:9c:3a:
ce:cd:b4:9a:78:5e:30:a2:55:3d:76:64:cd:37:0c:
b6:9b:6d:32:26:a7:1b:0f:30:35:43:cb:c6:2b:4b:
47:aa:64:ae:bc:3b:32:e3:81:c5:93:9c:72:07:7a:
32:cc:92:69:3d:49:16:47:ba:4d:27:81:cf:fb:3f:
08:40:84:7d:c6:62:60:3a:c7:9f:94:51:8c:67:71:
fd:01:47:a1:bc:08:31:24:7f:bd:b8:df:14:46:97:
2c:82:6f:39:7e:cc:e6:a8:55:8a:0b:6b:d2:dd:da:
cd:d5:6f:e2:f7:34:74:ec:02:71:6f:c0:9d:12:54:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:83:15:2C:F1:77:A2:3E:87:1D:F2:88:E4:00:0A:A9:93:2C:52
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:3f:32:45:ae:f6:54:9f:a1:36:23:dd:a6:d2:29:ad:d4:
64:d8:70:21:87:d7:d3:9b:93:76:2d:28:fb:39:ee:bf:c7:65:
ff:b2:2a:16:28:a2:ad:31:13:5b:cb:9e:9a:81:7a:2b:30:80:
05:3a:db:ac:e5:d1:c9:31:f3:9a:ba:72:4c:ea:6e:81:ba:82:
78:ee:43:1e:bf:fc:e3:b3:6e:2e:26:18:63:f6:b5:19:cd:1a:
ed:ea:3c:74:a2:60:7a:ce:6d:97:a1:7c:6b:98:69:8c:bc:e4:
7c:e9:dc:90:11:4b:ae:24:dc:c8:8c:76:4a:78:36:59:2e:00:
61:da:ef:86:19:9c:9b:df:30:ef:ca:7a:96:af:60:b6:aa:a4:
4c:8a:11:91:a6:91:14:e4:b4:f8:b3:82:ef:8a:49:90:c1:63:
3e:ef:c6:95:7d:9b:26:c7:e5:99:00:c7:8a:28:f1:45:af:a9:
37:b1:75:8a:64:1a:8d:94:cc:96:a1:b8:80:7d:b3:41:98:77:
b8:96:ff:48:69:0c:80:a8:a9:bc:5c:76:26:b6:d7:0b:2a:f7:
12:b4:a8:eb:f6:22:95:bb:c2:97:f1:45:e2:da:cf:47:bf:0d:
60:54:c5:71:8c:b1:90:60:7d:fc:86:8b:c9:d9:07:e5:77:01:
6d:7a:95:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cp7/RVTbwgefsRvhPUEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjY5YzBjMDg1Y2M5NzhhMzcyYTBlNGYwNTY0ODM5OGUx
ZTdmZTgwHhcNMjUwMTMxMTMwMDE1WhcNMjUwMjAxMTMwMDE1WjAzMTEwLwYDVQQD
EyhmZmE4ODMxNTJjZjE3N2EyM2U4NzFkZjI4OGU0MDAwYWE5OTMyYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sMM9asJLj/4C6MD6k0AqsllYjIn
43YdLSKswGB9RJ3/E/z8DMp4OmjEtVubPcQ/qkwBg/xFt8Yt8H8oulTRWax+DNMF
rchShwP1A3BiGxwlsqoCdhdbjV5bjw1wOhOiAH5qJZJ200XLDMejAOHNiKIqcRvF
lZuRGYA25KvtHuXN55QinDrOzbSaeF4wolU9dmTNNwy2m20yJqcbDzA1Q8vGK0tH
qmSuvDsy44HFk5xyB3oyzJJpPUkWR7pNJ4HP+z8IQIR9xmJgOseflFGMZ3H9AUeh
vAgxJH+9uN8URpcsgm85fszmqFWKC2vS3drN1W/i9zR07AJxb8CdElSCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+ogxUs8XeiPocd8ojkAAqpkyxSMB8GA1UdIwQY
MBaAFBNmnAwIXMl4o3Kg5PBWSDmOHn/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEt
NTNiMDQzNDI3ODNkLzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEtNTNiMDQzNDI3ODNk
LzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMU/MkWu
9lSfoTYj3abSKa3UZNhwIYfX05uTdi0o+znuv8dl/7IqFiiirTETW8uemoF6KzCA
BTrbrOXRyTHzmrpyTOpugbqCeO5DHr/847NuLiYYY/a1Gc0a7eo8dKJges5tl6F8
a5hpjLzkfOnckBFLriTcyIx2Sng2WS4AYdrvhhmcm98w78p6lq9gtqqkTIoRkaaR
FOS0+LOC74pJkMFjPu/GlX2bJsflmQDHiijxRa+pN7F1imQajZTMlqG4gH2zQZh3
uJb/SGkMgKipvFx2JrbXCyr3ErSo6/YilbvCl/FF4trPR78NYFTFcYyxkGB9/IaL
ydkH5XcBbXqVZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:17 2025 by rpki-client