Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
File: 7eApTRMFvrr2iUZCv9kv1DmCUQI.mft (raw, json)
Hash identifier: 4WljaQOfGTTmvLZte2huO1UZE3cuJynoQymX1bmIbc0=
Subject key identifier: 5D:36:3C:2D:C7:5A:7A:CB:C6:6F:72:96:1C:C2:F6:65:78:F1:CB:5B
Authority key identifier: ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
Certificate issuer: /CN=ede0294d1305bebaf6894642bfd92fd439825102
Certificate serial: 0194BC04EC36D2DA71EFC3C44AB3BE486328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: 7eApTRMFvrr2iUZCv9kv1DmCUQI.crl (hash: 6FR4af6wBqsjtfADF439YuTl9xXMzu+xgtzG+VFaoR4=)
2: bJ4sh6U6AWn89GmwoeAcocafgE4.roa (hash: Y+U7WWWf4hP7E6R51Ww3VT3Vt2JWiwOghZ095dPcPh8=)
3: fNvy3r37_4b6LefWjRGgK8SlrUI.roa (hash: 6A8ADFg9pRpZbe6Cwd0Rb5jshUxYYaxV6Jo4EFTgMJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ec:36:d2:da:71:ef:c3:c4:4a:b3:be:48:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede0294d1305bebaf6894642bfd92fd439825102
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=5d363c2dc75a7acbc66f72961cc2f66578f1cb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:0b:6b:2f:9f:17:75:9a:88:99:d2:83:7b:
ed:f7:a1:44:f7:20:18:ba:20:ea:70:0d:6a:39:b4:
f7:2b:3b:5c:71:bc:f4:a8:59:3b:da:ea:72:23:2d:
72:b0:86:9a:42:55:35:6c:a4:71:5c:b2:94:86:dd:
0b:d7:fd:28:09:2f:9d:ae:be:ea:28:d8:76:20:18:
68:fe:5e:d1:2c:aa:6b:47:49:59:56:ce:a1:9f:3d:
1b:80:fd:da:90:a2:7d:17:8f:71:9b:81:7d:4e:55:
c0:2c:fa:94:5b:a4:52:ee:db:56:bd:49:34:42:fc:
d0:b2:a5:93:71:8d:36:21:1f:8e:02:13:dc:7c:f6:
e1:32:37:2b:c7:01:bc:18:c2:b0:e7:30:ec:ff:71:
7e:dc:72:68:aa:28:25:e1:28:7f:3c:6d:1e:bc:8d:
2a:6b:00:70:c0:ea:ea:9a:04:c1:90:a7:71:25:0b:
88:b5:4f:23:8a:f9:4a:35:71:79:ef:e9:b9:8f:ec:
4b:07:7a:cf:c9:79:7e:0d:76:7d:f1:de:3d:3d:69:
55:8e:69:6b:ca:02:dd:9e:94:dc:a8:05:aa:99:a4:
c0:be:73:cc:1f:96:45:71:89:3f:76:d1:a2:eb:d0:
57:1c:66:c9:cd:2c:b6:90:30:d4:77:b3:09:ca:c6:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:36:3C:2D:C7:5A:7A:CB:C6:6F:72:96:1C:C2:F6:65:78:F1:CB:5B
X509v3 Authority Key Identifier:
keyid:ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f3:ab:dd:13:a7:03:f1:10:1b:dc:2b:20:78:b0:ce:1a:6a:
5b:af:27:b7:8a:7f:ca:e1:33:36:56:76:e4:25:a4:d7:1c:03:
93:42:ac:ba:8b:86:7b:27:7e:8d:49:ef:9c:d3:38:38:df:f9:
c0:32:7f:2b:30:d7:9c:68:6a:27:ae:ee:28:03:c1:97:47:10:
58:5b:81:88:96:c1:e6:44:e0:fb:05:86:6c:6e:c5:23:66:77:
94:a9:1b:70:89:d3:d9:28:9d:80:52:cf:de:d3:91:75:f8:48:
d2:87:20:f0:03:2c:6a:1c:51:2f:d4:20:e5:43:06:35:45:50:
04:ae:ec:76:e9:4a:2a:57:9c:8d:dc:0a:0c:ba:91:60:3f:31:
2c:0d:5e:23:10:3b:84:3b:36:a1:86:db:61:29:67:fb:a5:83:
a1:bf:d6:6e:0c:bc:1b:64:8c:92:07:f3:ca:3c:5a:51:5a:d1:
f1:1a:6e:f6:cc:1a:96:a8:a1:eb:ce:66:d7:c6:b3:3d:e6:82:
b1:16:e8:31:f6:c9:61:f2:19:fd:09:6a:6a:2b:4b:61:ab:53:
e9:4b:c3:0f:d1:1f:d8:9a:b7:6c:f7:d3:bf:0f:3f:41:b3:5d:
3c:23:e8:c5:19:a1:6d:21:47:db:d8:42:e8:cd:b9:6c:1b:fe:
e6:03:5d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOw20tpx78PESrO+SGMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTAyOTRkMTMwNWJlYmFmNjg5NDY0MmJmZDkyZmQ0Mzk4
MjUxMDIwHhcNMjUwMTMxMTEwMDI2WhcNMjUwMjAxMTEwMDI2WjAzMTEwLwYDVQQD
Eyg1ZDM2M2MyZGM3NWE3YWNiYzY2ZjcyOTYxY2MyZjY2NTc4ZjFjYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpcLay+fF3WaiJnSg3vt96FE9yAY
uiDqcA1qObT3Kztccbz0qFk72upyIy1ysIaaQlU1bKRxXLKUht0L1/0oCS+drr7q
KNh2IBho/l7RLKprR0lZVs6hnz0bgP3akKJ9F49xm4F9TlXALPqUW6RS7ttWvUk0
QvzQsqWTcY02IR+OAhPcfPbhMjcrxwG8GMKw5zDs/3F+3HJoqigl4Sh/PG0evI0q
awBwwOrqmgTBkKdxJQuItU8jivlKNXF57+m5j+xLB3rPyXl+DXZ98d49PWlVjmlr
ygLdnpTcqAWqmaTAvnPMH5ZFcYk/dtGi69BXHGbJzSy2kDDUd7MJysY64wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF02PC3HWnrLxm9ylhzC9mV48ctbMB8GA1UdIwQY
MBaAFO3gKU0TBb669olGQr/ZL9Q5glECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2VBcFRSTUZ2cnIyaVVaQ3Y5a3YxRG1DVVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82NjE2YWMtODdjZC00ZWRmLWIxMDct
MDQ2YTNhOWFhY2I5LzEvN2VBcFRSTUZ2cnIyaVVaQ3Y5a3YxRG1DVVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82NjE2YWMtODdjZC00ZWRmLWIxMDctMDQ2YTNhOWFhY2I5
LzEvN2VBcFRSTUZ2cnIyaVVaQ3Y5a3YxRG1DVVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvOr3ROn
A/EQG9wrIHiwzhpqW68nt4p/yuEzNlZ25CWk1xwDk0KsuouGeyd+jUnvnNM4ON/5
wDJ/KzDXnGhqJ67uKAPBl0cQWFuBiJbB5kTg+wWGbG7FI2Z3lKkbcInT2SidgFLP
3tORdfhI0ocg8AMsahxRL9Qg5UMGNUVQBK7sdulKKlecjdwKDLqRYD8xLA1eIxA7
hDs2oYbbYSln+6WDob/Wbgy8G2SMkgfzyjxaUVrR8Rpu9swalqih685m18azPeaC
sRboMfbJYfIZ/QlqaitLYatT6UvDD9Ef2Jq3bPfTvw8/QbNdPCPoxRmhbSFH29hC
6M25bBv+5gNddA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:44 2025 by rpki-client