Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File: MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier: sCbCSlxJb5vU+0cSIzh/BuUL5YDRw/ZCQ6a35xpHuYw=
Subject key identifier: 09:C2:54:5F:A1:D7:87:41:52:00:E5:48:DF:A9:A8:BD:66:DD:E1:0A
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 0194BBCDC42AD51D03919A5E3EB2E29293CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number: 03E7
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: h8LdVKNT2UIIu/WNfuWOOis7Ok6agQuBCQ3HKZpLylM=)
2: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (hash: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:2a:d5:1d:03:91:9a:5e:3e:b2:e2:92:93:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=09c2545fa1d787415200e548dfa9a8bd66dde10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:63:44:75:b6:d8:6f:d3:cb:41:01:e4:26:
d5:61:b2:cc:3b:88:eb:18:81:2d:d2:4d:4e:ea:f0:
43:06:05:82:91:a8:9e:c3:ba:50:6c:82:2c:c6:e4:
c1:b9:0f:41:bb:f3:5b:fe:7e:91:ac:c8:74:1c:2e:
a9:b0:65:b5:a2:dc:4d:b1:af:f3:82:e8:32:6c:9e:
41:03:ae:7e:76:4a:f6:d8:b1:50:58:35:8f:71:db:
0a:f9:8b:73:8b:c0:83:81:6f:d6:b1:3e:b5:c5:b3:
ba:5d:18:8c:44:60:90:be:9f:df:66:37:5a:6c:76:
52:07:c2:7b:4c:a5:ae:67:c6:95:d0:f6:b0:f2:8a:
6d:ee:ab:a9:62:d0:fa:c9:a6:ff:3e:e8:29:d9:81:
45:de:0f:25:b3:ee:8e:04:64:73:9c:5b:81:1c:55:
8b:8d:07:f1:cc:53:d2:25:78:ee:85:a7:44:f3:38:
e6:71:86:2d:15:cc:35:ee:26:03:66:d1:db:b3:d0:
5a:0a:db:9d:48:1b:4f:3c:b6:1d:94:08:e3:f0:b0:
bf:9f:7e:0c:00:ef:e1:b7:49:e5:df:45:6f:36:83:
3d:a9:a6:4a:80:7d:83:82:53:fc:8d:41:fd:cd:61:
cb:3b:c4:b9:be:95:19:97:ea:ee:e6:1d:a9:1a:3a:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:54:5F:A1:D7:87:41:52:00:E5:48:DF:A9:A8:BD:66:DD:E1:0A
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:71:c3:d2:c7:20:bc:ea:94:77:bf:c1:05:54:b0:15:3d:42:
56:ac:8d:b3:35:a9:f1:69:f0:b8:4c:97:e6:2a:bf:ac:bf:d0:
3d:ca:e1:2a:83:31:af:7f:40:f4:1e:8f:6c:f0:9c:25:b7:63:
91:7d:ba:fe:cf:07:2b:91:3a:31:a7:a0:61:54:79:97:76:dc:
d2:dd:42:76:4c:77:bb:af:d7:54:62:2b:99:58:d7:b9:de:09:
f8:08:e7:e4:3e:f5:6a:9d:5d:b8:b1:8b:26:22:f8:12:df:d1:
e5:48:d0:2f:b3:f8:2f:bd:20:fa:ec:38:d3:f9:2c:28:b0:4a:
67:46:26:75:2c:d6:7d:22:24:3e:b8:94:d2:1b:76:ea:b5:2a:
18:12:9d:83:31:55:31:6f:62:ac:96:fc:cc:86:4a:52:e2:61:
9e:2c:64:47:78:46:65:ac:d2:dc:55:fe:55:27:c1:13:23:05:
61:43:cd:f3:68:8f:e7:8d:70:9f:59:b4:a6:38:0b:8c:41:b5:
dc:2c:bb:dd:e3:b0:99:db:f6:99:1c:29:48:6b:39:df:f4:d2:
d2:6c:0c:8c:47:30:f1:60:ee:49:35:9a:65:c7:be:be:eb:50:
d9:d6:50:6c:ec:35:f9:0c:9e:a0:b3:c0:6c:ce:79:48:d7:24:
ba:15:29:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcQq1R0DkZpePrLikpPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNDEwZjVlZDM4NmY4NzkyMDNjYjQ0MjhhNWY5NWZkYzg5
OWI1OTEwHhcNMjUwMTMxMTAwMDExWhcNMjUwMjAxMTAwMDExWjAzMTEwLwYDVQQD
EygwOWMyNTQ1ZmExZDc4NzQxNTIwMGU1NDhkZmE5YThiZDY2ZGRlMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqthjRHW22G/Ty0EB5CbVYbLMO4jr
GIEt0k1O6vBDBgWCkaiew7pQbIIsxuTBuQ9Bu/Nb/n6RrMh0HC6psGW1otxNsa/z
gugybJ5BA65+dkr22LFQWDWPcdsK+Ytzi8CDgW/WsT61xbO6XRiMRGCQvp/fZjda
bHZSB8J7TKWuZ8aV0Paw8opt7qupYtD6yab/Pugp2YFF3g8ls+6OBGRznFuBHFWL
jQfxzFPSJXjuhadE8zjmcYYtFcw17iYDZtHbs9BaCtudSBtPPLYdlAjj8LC/n34M
AO/ht0nl30VvNoM9qaZKgH2DglP8jUH9zWHLO8S5vpUZl+ru5h2pGjo3kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnCVF+h14dBUgDlSN+pqL1m3eEKMB8GA1UdIwQY
MBaAFDBBD17Thvh5IDy0Qopflf3ImbWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVFUFh0T0ctSGtnUExSQ2lsLVZfY2ladFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMWNlYjAtMDllMi00NzdmLTg3OWQt
ODI2NzM2MGZmOWVkLzEvTUVFUFh0T0ctSGtnUExSQ2lsLVZfY2ladFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xMWNlYjAtMDllMi00NzdmLTg3OWQtODI2NzM2MGZmOWVk
LzEvTUVFUFh0T0ctSGtnUExSQ2lsLVZfY2ladFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHHD0scg
vOqUd7/BBVSwFT1CVqyNszWp8WnwuEyX5iq/rL/QPcrhKoMxr39A9B6PbPCcJbdj
kX26/s8HK5E6MaegYVR5l3bc0t1Cdkx3u6/XVGIrmVjXud4J+Ajn5D71ap1duLGL
JiL4Et/R5UjQL7P4L70g+uw40/ksKLBKZ0YmdSzWfSIkPriU0ht26rUqGBKdgzFV
MW9irJb8zIZKUuJhnixkR3hGZazS3FX+VSfBEyMFYUPN82iP541wn1m0pjgLjEG1
3Cy73eOwmdv2mRwpSGs53/TS0mwMjEcw8WDuSTWaZce+vutQ2dZQbOw1+QyeoLPA
bM55SNckuhUpog==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:02 2025 by rpki-client