Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: fZqoVLqOmjiOooKwJQNRdcjA9V+qEegAnbL3FrGf4h4=
Subject key identifier: 3C:70:82:FD:90:8A:8E:A4:91:41:F3:FD:CA:34:4A:2A:AB:EC:09:93
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 0194BBCE18B0EC3ABEBD7D1217DD6CA5878F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 08E5
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: ERLXwyjPlT6ZNudfGEqc62pnMIaS2hGln5t2XTROZA8=)
2: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (hash: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:b0:ec:3a:be:bd:7d:12:17:dd:6c:a5:87:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=3c7082fd908a8ea49141f3fdca344a2aabec0993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:38:a3:40:40:e4:9a:d4:21:19:1d:e6:10:
f4:df:24:a3:07:9d:33:55:00:c2:7a:b8:3e:49:11:
a7:ba:bf:56:3a:9b:7a:f6:0e:21:a0:e5:c7:ed:5a:
ed:0e:4d:8c:56:b4:35:cf:1e:20:25:a0:7d:6a:97:
30:3e:3e:71:f2:2d:2b:27:4f:4b:4c:1c:b6:ee:67:
75:5b:ca:49:f9:3f:b0:ca:b8:7f:66:46:fe:85:fc:
d6:0b:26:96:54:e4:9a:7f:2d:60:e1:70:2e:cc:ca:
1d:1c:fc:5e:5b:f7:e2:0c:37:ff:fc:df:94:b3:23:
ab:3a:e6:83:6d:6c:ad:e8:1c:d9:96:0b:44:02:2e:
f1:e7:49:cc:c4:0a:ba:f4:1e:3d:e0:8c:e2:6f:c6:
72:f7:fd:c3:26:2c:82:75:74:e9:26:cf:e7:bd:45:
69:11:57:4a:78:69:f3:3a:80:f0:02:b2:e2:6b:90:
0b:2e:ca:00:f7:41:bf:17:cd:f4:42:39:ea:c1:7a:
b6:de:8c:ab:26:fb:59:4d:64:b5:eb:d7:3b:f4:c6:
c2:30:bc:e6:c0:c1:60:d5:e5:6d:a0:01:07:86:c3:
44:ba:52:b1:af:59:1f:be:6e:6a:0d:4e:8a:30:30:
85:b2:a3:02:93:1e:1a:9a:fa:80:e4:ad:c3:4e:d4:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:82:FD:90:8A:8E:A4:91:41:F3:FD:CA:34:4A:2A:AB:EC:09:93
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:29:db:50:3e:7c:3b:1f:41:5a:af:a1:02:a7:4d:e4:8f:34:
34:ea:41:3b:23:7e:d8:9c:6b:2d:38:da:5d:d6:1a:04:dd:b2:
c9:57:38:07:f7:dc:3c:db:9d:6a:e7:a1:34:c0:16:d1:47:68:
c3:94:37:96:a7:ca:63:78:1c:52:a9:e2:fd:7c:ba:72:b6:8a:
42:48:40:ec:38:a1:a7:14:5f:78:ed:1a:fd:fa:4f:e7:03:88:
76:71:03:3e:b1:93:5f:01:b9:bf:ab:6b:82:65:4a:ea:40:a5:
6a:dc:78:e5:71:b3:c2:f4:bf:2b:dc:67:18:a1:3d:da:08:db:
17:0a:a7:8f:57:87:1e:66:88:3b:a7:ad:7d:29:a8:b9:35:73:
22:74:ab:a5:7f:46:ab:a1:ea:d4:8a:e8:50:a6:da:71:fb:e9:
2e:99:8b:d2:ca:b1:74:2f:d9:9f:08:b0:d3:23:37:6f:9c:62:
2d:30:ef:d9:8e:38:40:65:9c:21:fa:17:75:95:e3:05:a3:04:
0a:94:fb:75:27:8a:f1:69:94:63:d4:c9:a8:e9:bb:5c:b5:b1:
0c:bb:91:a7:63:15:21:43:72:ed:74:45:28:bc:3d:4f:49:63:
f9:9b:52:4c:0e:1a:a4:f1:66:b7:00:71:3e:d1:71:46:22:a5:
6d:b9:3d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhiw7Dq+vX0SF91spYePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjUwMTMxMTAwMDMzWhcNMjUwMjAxMTAwMDMzWjAzMTEwLwYDVQQD
EygzYzcwODJmZDkwOGE4ZWE0OTE0MWYzZmRjYTM0NGEyYWFiZWMwOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eE4o0BA5JrUIRkd5hD03ySjB50z
VQDCerg+SRGnur9WOpt69g4hoOXH7VrtDk2MVrQ1zx4gJaB9apcwPj5x8i0rJ09L
TBy27md1W8pJ+T+wyrh/Zkb+hfzWCyaWVOSafy1g4XAuzModHPxeW/fiDDf//N+U
syOrOuaDbWyt6BzZlgtEAi7x50nMxAq69B494Izib8Zy9/3DJiyCdXTpJs/nvUVp
EVdKeGnzOoDwArLia5ALLsoA90G/F830QjnqwXq23oyrJvtZTWS169c79MbCMLzm
wMFg1eVtoAEHhsNEulKxr1kfvm5qDU6KMDCFsqMCkx4amvqA5K3DTtSnDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxwgv2Qio6kkUHz/co0Siqr7AmTMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCnbUD58
Ox9BWq+hAqdN5I80NOpBOyN+2JxrLTjaXdYaBN2yyVc4B/fcPNudauehNMAW0Udo
w5Q3lqfKY3gcUqni/Xy6craKQkhA7DihpxRfeO0a/fpP5wOIdnEDPrGTXwG5v6tr
gmVK6kClatx45XGzwvS/K9xnGKE92gjbFwqnj1eHHmaIO6etfSmouTVzInSrpX9G
q6Hq1IroUKbacfvpLpmL0sqxdC/Znwiw0yM3b5xiLTDv2Y44QGWcIfoXdZXjBaME
CpT7dSeK8WmUY9TJqOm7XLWxDLuRp2MVIUNy7XRFKLw9T0lj+ZtSTA4apPFmtwBx
PtFxRiKlbbk9kA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:08 2025 by rpki-client