Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: ffYRS9GhfZ2FFPIyibEES8Jym5fELXTg40tkYTTgA2k=
Subject key identifier: BE:F8:A4:10:69:66:35:8A:06:72:57:E3:AD:AB:4A:26:6B:68:55:B8
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 0194BC729C6983FEF1B251351F1969B63D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0B98
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: V+NhDNnXLAU0pP2nAj/f+nAT7kpA5cI6KI7dVKSoWHM=)
2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9c:69:83:fe:f1:b2:51:35:1f:19:69:b6:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=bef8a4106966358a067257e3adab4a266b6855b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:fe:86:4a:87:bb:83:8a:33:83:6e:12:ce:
32:9f:68:48:4d:f3:52:6d:c1:60:a1:a9:03:09:24:
ed:c7:d1:d8:4c:6c:79:ff:a4:b3:83:33:ef:a6:0f:
95:0f:40:bc:68:f2:53:2f:32:19:84:cb:53:ed:3b:
a3:4a:7d:70:50:38:da:df:ab:04:f5:88:53:c6:c9:
a9:9b:9b:27:f8:b1:6f:e1:70:e1:be:1c:6d:56:9e:
08:7b:0a:65:e6:1d:1a:eb:f0:90:fd:ae:94:67:a9:
05:2f:7b:fc:c6:66:17:0f:6d:73:3d:2e:20:21:58:
72:c6:2a:56:b7:66:8e:21:8e:b1:a0:cd:ad:d7:6e:
7b:98:70:67:54:13:37:cf:42:4f:e4:b6:fa:bc:c0:
64:3a:11:ef:af:0f:70:64:b4:15:3c:58:bf:25:62:
17:52:ad:c2:ae:43:60:4f:eb:b7:e7:6b:bf:9c:6f:
68:9b:b0:58:d3:d3:e5:2c:32:aa:58:b4:37:1c:8f:
83:9b:22:59:6e:60:d7:a3:e8:79:2a:ee:f2:4e:33:
90:35:02:2b:21:0d:2c:77:bb:7a:61:f3:8f:46:e2:
39:8c:16:e9:11:b7:93:52:d1:4c:c7:da:84:e5:9d:
71:87:55:1c:83:d4:53:f1:52:5e:39:5f:19:f1:c7:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F8:A4:10:69:66:35:8A:06:72:57:E3:AD:AB:4A:26:6B:68:55:B8
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cd:8d:ee:0d:b2:44:c6:b3:72:7b:21:7a:83:4c:3d:e5:e2:
1a:06:1d:89:01:1f:7d:e1:de:79:35:63:fb:6a:b6:38:3a:c6:
a4:85:bf:15:82:c9:1a:16:c7:c2:9d:08:dc:df:1b:cd:24:8a:
5e:b6:03:04:4a:2f:20:1c:a5:a5:44:9e:0b:1a:35:6b:d2:fc:
c3:59:cd:93:c1:e5:b2:a3:c1:0a:55:6a:ea:90:00:3a:b0:f1:
72:9a:ed:e7:07:0f:24:1c:eb:1b:75:45:ac:95:48:cc:5d:48:
3c:69:46:c0:25:4e:c8:09:c1:8d:d3:d3:5d:a3:71:b0:ed:89:
11:28:a0:56:73:48:ff:93:98:b3:8d:4a:80:77:ee:23:21:b3:
1e:f3:62:ec:c9:9c:51:46:6d:c8:9c:30:54:95:d1:c1:08:bc:
3b:2b:9f:0a:8e:1b:b4:ef:89:39:cf:8c:43:98:5e:87:4a:10:
e8:dc:a0:fa:7f:b1:60:52:37:64:65:aa:98:f2:35:5e:3e:58:
00:7a:83:fe:51:b7:25:22:49:60:af:ac:aa:3c:95:a7:67:2d:
4d:26:8a:a1:61:b0:9f:1b:bd:3a:72:7a:7e:54:67:d2:48:06:
df:b7:00:97:f2:00:9a:ad:1b:55:c1:43:24:99:4d:e9:25:ae:
48:5e:08:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpxpg/7xslE1Hxlptj06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmMzM2ZkMDExNzhhZTJmOTc0ZWVlZDVkY2RjZDNjMTc1
ZTE2YTcwHhcNMjUwMTMxMTMwMDE1WhcNMjUwMjAxMTMwMDE1WjAzMTEwLwYDVQQD
EyhiZWY4YTQxMDY5NjYzNThhMDY3MjU3ZTNhZGFiNGEyNjZiNjg1NWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlb+hkqHu4OKM4NuEs4yn2hITfNS
bcFgoakDCSTtx9HYTGx5/6SzgzPvpg+VD0C8aPJTLzIZhMtT7TujSn1wUDja36sE
9YhTxsmpm5sn+LFv4XDhvhxtVp4Iewpl5h0a6/CQ/a6UZ6kFL3v8xmYXD21zPS4g
IVhyxipWt2aOIY6xoM2t1257mHBnVBM3z0JP5Lb6vMBkOhHvrw9wZLQVPFi/JWIX
Uq3CrkNgT+u352u/nG9om7BY09PlLDKqWLQ3HI+DmyJZbmDXo+h5Ku7yTjOQNQIr
IQ0sd7t6YfOPRuI5jBbpEbeTUtFMx9qE5Z1xh1Ucg9RT8VJeOV8Z8ccg0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL74pBBpZjWKBnJX462rSiZraFW4MB8GA1UdIwQY
MBaAFOy8M/0BF4ri+XTu7V3NzTwXXhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lM2I5ZDktYmU5Zi00YTc2LWIzYTMt
M2UwNWIzN2UxMzhiLzEvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lM2I5ZDktYmU5Zi00YTc2LWIzYTMtM2UwNWIzN2UxMzhi
LzEvN0x3el9RRVhpdUw1ZE83dFhjM05QQmRlRnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADM2N7g2y
RMazcnsheoNMPeXiGgYdiQEffeHeeTVj+2q2ODrGpIW/FYLJGhbHwp0I3N8bzSSK
XrYDBEovIBylpUSeCxo1a9L8w1nNk8HlsqPBClVq6pAAOrDxcprt5wcPJBzrG3VF
rJVIzF1IPGlGwCVOyAnBjdPTXaNxsO2JESigVnNI/5OYs41KgHfuIyGzHvNi7Mmc
UUZtyJwwVJXRwQi8OyufCo4btO+JOc+MQ5heh0oQ6Nyg+n+xYFI3ZGWqmPI1Xj5Y
AHqD/lG3JSJJYK+sqjyVp2ctTSaKoWGwnxu9OnJ6flRn0kgG37cAl/IAmq0bVcFD
JJlN6SWuSF4Ijw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:35 2025 by rpki-client