Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File: evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier: qWzqrz1xx/pDWy1FHDrwj0ocvLcO5g+B4fqwECzBqko=
Subject key identifier: 9C:78:D8:CF:E7:72:61:35:9C:E5:C7:D8:67:92:7E:15:E9:CC:F4:F7
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 0194BC72F5EB8FD0CA81E3FC955EF5A37C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number: 03DB
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 3I2mGfHorPrDep9I0nPeIh65tkI.roa (hash: OLscXpyWIbrn1RcZqjdSr9XXKKiPI7j2rv0JHHPMEQI=)
2: dNzpUeScS40SGAakdE8EMOqK8-0.roa (hash: ChCS0TPiqjqC3j7rrZypS24t3Ck3/GrBq9+62XOwDas=)
3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: Jt66hWGSJ9TMKA6fqUzR8lRLWpXVmhFZMVKUQVWJq08=)
4: y_1DokJhuMn6KiVy0_PFo2uwqL4.roa (hash: CyQURB7g+UVvvUP5P21dxzNPaEmL0tzfzogezhC6J2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f5:eb:8f:d0:ca:81:e3:fc:95:5e:f5:a3:7c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=9c78d8cfe77261359ce5c7d867927e15e9ccf4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:b9:05:64:4e:5e:40:9d:ce:5b:62:2d:02:
d4:c4:e4:2e:07:3b:e2:da:fd:58:fc:ff:91:18:cd:
c5:37:23:20:95:20:d4:1d:85:f5:a7:57:e8:47:0a:
82:f2:2b:57:8f:29:1a:0c:e8:df:e9:2e:8c:05:32:
20:9a:8e:dd:21:b7:92:4b:0e:af:70:bf:b7:32:dc:
48:29:8a:b8:83:5c:40:65:ab:f3:80:23:da:12:5a:
a5:55:5c:a5:78:37:30:b4:0e:60:7c:17:ee:1a:02:
e2:73:a5:cf:48:c5:19:5d:5f:92:24:a9:2d:7d:1d:
56:32:80:31:2b:6a:a3:b1:73:09:c0:e8:f6:48:41:
db:64:89:ac:02:9a:da:6d:af:e7:2b:3d:25:cc:ea:
c3:08:48:44:d6:a6:7e:4f:73:fd:af:69:5b:ea:f1:
52:f3:c5:12:bc:8c:23:18:e8:cf:aa:f8:fa:11:82:
30:40:eb:24:5c:14:9a:f6:de:2b:3e:f3:79:ed:88:
2c:fe:4a:d8:48:07:8d:62:88:86:11:ab:28:b4:2a:
26:9c:e5:81:26:04:41:82:ad:83:5a:ab:f6:f0:2e:
8f:30:b9:af:48:8e:fe:02:9a:85:21:cd:2a:13:9c:
99:7d:87:82:bd:61:68:ae:f9:a2:39:82:c1:85:95:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:D8:CF:E7:72:61:35:9C:E5:C7:D8:67:92:7E:15:E9:CC:F4:F7
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0b:63:9b:e8:d9:06:4c:ec:cd:19:cf:b0:c2:d1:5f:c2:d1:
de:47:6c:a9:8d:9b:8f:93:37:9f:c0:b3:b2:96:11:ac:c6:b6:
7b:45:9b:b0:9f:c0:0f:8f:e6:92:32:43:13:58:6d:c5:73:53:
a3:2d:bf:4f:21:cc:13:e0:55:d6:76:47:46:a3:49:ef:7b:d1:
42:20:c3:9f:ac:0e:44:90:cc:03:b6:6a:d5:b8:fc:f1:ac:a7:
c2:07:f5:cf:07:56:51:81:6c:6f:2c:b3:a6:cd:06:27:75:58:
dc:3e:d6:7b:fc:f2:d9:a9:bd:a4:6d:7d:45:5b:bb:46:34:f1:
4f:c6:01:b2:82:33:80:cd:fd:2d:47:dc:74:09:85:7a:67:91:
aa:79:1e:b1:15:e0:62:61:94:ce:8c:68:40:f9:29:9e:f7:d7:
6a:ba:fa:63:c2:81:8b:0f:ac:56:2a:42:cb:bd:6c:82:1c:a8:
da:a9:58:a2:58:99:80:0a:f0:53:28:d2:f0:e3:ff:20:2d:fb:
81:72:e2:33:cb:22:23:75:4b:25:38:7b:6c:a2:bb:e1:05:55:
ba:58:16:54:c1:b4:58:7a:8c:6b:f0:69:2e:63:ac:27:13:1b:
88:f4:2e:5d:b5:74:7f:f8:8c:05:e6:b4:a2:36:85:df:84:52:
ab:8f:ee:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvXrj9DKgeP8lV71o3wWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmI1NDQxZDhlZjhlNDFhYTI4ZGQ1MWNkZGU5MjU5NDNh
ZWY3ZmEwHhcNMjUwMTMxMTMwMDM4WhcNMjUwMjAxMTMwMDM4WjAzMTEwLwYDVQQD
Eyg5Yzc4ZDhjZmU3NzI2MTM1OWNlNWM3ZDg2NzkyN2UxNWU5Y2NmNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKe5BWROXkCdzltiLQLUxOQuBzvi
2v1Y/P+RGM3FNyMglSDUHYX1p1foRwqC8itXjykaDOjf6S6MBTIgmo7dIbeSSw6v
cL+3MtxIKYq4g1xAZavzgCPaElqlVVyleDcwtA5gfBfuGgLic6XPSMUZXV+SJKkt
fR1WMoAxK2qjsXMJwOj2SEHbZImsApraba/nKz0lzOrDCEhE1qZ+T3P9r2lb6vFS
88USvIwjGOjPqvj6EYIwQOskXBSa9t4rPvN57Ygs/krYSAeNYoiGEasotComnOWB
JgRBgq2DWqv28C6PMLmvSI7+ApqFIc0qE5yZfYeCvWForvmiOYLBhZWbpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx42M/ncmE1nOXH2GeSfhXpzPT3MB8GA1UdIwQY
MBaAFHr7VEHY745BqijdUc3ekllDrvf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTIt
ZDg5NzNhY2FmNDFkLzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTItZDg5NzNhY2FmNDFk
LzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwtjm+jZ
BkzszRnPsMLRX8LR3kdsqY2bj5M3n8CzspYRrMa2e0WbsJ/AD4/mkjJDE1htxXNT
oy2/TyHME+BV1nZHRqNJ73vRQiDDn6wORJDMA7Zq1bj88aynwgf1zwdWUYFsbyyz
ps0GJ3VY3D7We/zy2am9pG19RVu7RjTxT8YBsoIzgM39LUfcdAmFemeRqnkesRXg
YmGUzoxoQPkpnvfXarr6Y8KBiw+sVipCy71sghyo2qlYoliZgArwUyjS8OP/IC37
gXLiM8siI3VLJTh7bKK74QVVulgWVMG0WHqMa/BpLmOsJxMbiPQuXbV0f/iMBea0
ojaF34RSq4/usw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:52 2025 by rpki-client