Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json)
Hash identifier: XlG28lHT8LBqbe0WE1+8qmXUq/WawdZO27+Ilcx9GpE=
Subject key identifier: 36:C9:71:5D:B3:A7:A2:1C:F2:7A:F9:44:3A:63:73:5A:E7:A1:92:A6
Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a
Certificate serial: 0194BC04BE91AD50B719F6ED226B17FF0F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
Manifest number: 090B
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: dtMIB8SQ6myy2oNOcB8JwNm9NZSkUGcITCfmEZFdfm0=)
2: iR8kHHuMHXHdpW9oFEB19MCcm1M.roa (hash: cqHEhbc9Bc/QLDbHqxDN/gK7OPZ3taLde0WraYz/2vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:be:91:ad:50:b7:19:f6:ed:22:6b:17:ff:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=36c9715db3a7a21cf27af9443a63735ae7a192a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:f2:55:21:32:06:05:20:e1:68:03:4f:49:
9c:3a:93:32:ae:e6:2d:57:6a:38:5d:8d:f3:28:41:
b9:09:fc:59:a1:be:c4:74:a7:8a:08:0c:6d:c7:24:
4d:c9:60:bd:dc:af:52:fa:c7:2e:bd:fa:ec:3d:c8:
ea:79:a7:38:c8:c8:7c:72:fe:07:9f:52:cc:de:58:
12:75:4f:f9:d2:88:ec:9b:95:d8:69:92:af:40:d9:
24:8b:d4:74:46:c9:38:00:f9:5a:8b:f5:78:3c:fe:
13:26:64:c3:84:58:10:6b:3c:be:36:c1:4b:03:8d:
66:e4:e3:a1:64:e9:d1:09:e4:3c:e3:f6:4e:e7:2d:
7a:05:fd:00:31:ea:30:83:8f:a1:f8:32:06:85:01:
06:5d:e8:ce:31:45:91:81:a0:26:86:fa:18:f3:5d:
9b:93:96:35:61:2a:c0:5c:78:3f:92:05:69:6e:3f:
39:ac:be:be:62:c6:99:73:1d:78:5a:bd:b9:ab:ee:
ec:fb:a8:e2:96:e4:1f:0a:79:75:e7:ba:1f:43:ed:
e0:b3:f8:ed:77:3d:a1:00:d2:8c:d2:f6:95:a6:cd:
ae:9c:39:ea:9b:df:c5:64:08:76:03:36:6f:8f:80:
cc:65:f4:bc:59:a6:d9:d8:ec:91:7f:77:9e:b0:cd:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:71:5D:B3:A7:A2:1C:F2:7A:F9:44:3A:63:73:5A:E7:A1:92:A6
X509v3 Authority Key Identifier:
keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a8:ac:aa:da:79:87:b2:b9:d3:43:ba:dc:03:a6:c8:6b:f4:
e5:66:3d:80:3b:38:6a:74:8f:d8:6f:5f:6a:ed:91:de:4f:c3:
ff:53:bd:37:07:d5:44:bb:d8:b1:61:da:4b:5f:8e:8b:17:73:
b5:27:c6:9e:1e:a3:c1:84:fb:3a:a3:29:27:a6:ca:cb:f0:ae:
f8:8e:90:ef:f4:fd:7c:0e:d4:da:50:83:37:fa:02:60:f2:a7:
2e:bb:9b:2b:f5:fc:2f:e1:b1:95:9c:00:d8:ce:c7:d6:3e:05:
3b:ad:e9:b7:f5:0b:63:54:34:7d:49:e1:62:bc:37:e7:64:76:
b8:6a:f9:45:33:77:fe:e2:1b:ff:4e:ab:f6:c7:7d:c1:84:fa:
2e:60:31:c5:7e:36:5b:95:cd:00:fe:2d:ef:a6:43:11:ac:b4:
12:a4:64:ab:6e:57:54:7d:7a:1f:40:1e:e7:31:9b:0b:19:78:
7a:88:8d:34:43:b2:d2:90:72:b2:5c:9a:eb:ee:5d:39:00:b5:
1a:95:56:a5:2f:65:82:23:25:e2:77:bc:82:3a:a2:a0:ec:b5:
25:79:3d:0f:23:6a:fe:63:78:ff:11:a8:a9:08:ae:d4:0b:39:
37:d4:fd:45:40:0a:54:bf:6c:27:13:ea:17:6b:a6:20:1f:b0:
98:9d:60:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BL6RrVC3GfbtImsX/w8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNWMwNDBlYzk3NTQzMjAyMzZjZGNhNjRlMzkzOTBiZGRl
MzYyNmEwHhcNMjUwMTMxMTEwMDE0WhcNMjUwMjAxMTEwMDE0WjAzMTEwLwYDVQQD
EygzNmM5NzE1ZGIzYTdhMjFjZjI3YWY5NDQzYTYzNzM1YWU3YTE5MmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DbyVSEyBgUg4WgDT0mcOpMyruYt
V2o4XY3zKEG5CfxZob7EdKeKCAxtxyRNyWC93K9S+scuvfrsPcjqeac4yMh8cv4H
n1LM3lgSdU/50ojsm5XYaZKvQNkki9R0Rsk4APlai/V4PP4TJmTDhFgQazy+NsFL
A41m5OOhZOnRCeQ84/ZO5y16Bf0AMeowg4+h+DIGhQEGXejOMUWRgaAmhvoY812b
k5Y1YSrAXHg/kgVpbj85rL6+YsaZcx14Wr25q+7s+6jiluQfCnl157ofQ+3gs/jt
dz2hANKM0vaVps2unDnqm9/FZAh2AzZvj4DMZfS8WabZ2OyRf3eesM2GgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbJcV2zp6Ic8nr5RDpjc1rnoZKmMB8GA1UdIwQY
MBaAFBFcBA7JdUMgI2zcpk45OQvd42JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt
NzBlN2QwNTdmZjJkLzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk
LzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaisqtp5
h7K500O63AOmyGv05WY9gDs4anSP2G9fau2R3k/D/1O9NwfVRLvYsWHaS1+Oixdz
tSfGnh6jwYT7OqMpJ6bKy/Cu+I6Q7/T9fA7U2lCDN/oCYPKnLrubK/X8L+GxlZwA
2M7H1j4FO63pt/ULY1Q0fUnhYrw352R2uGr5RTN3/uIb/06r9sd9wYT6LmAxxX42
W5XNAP4t76ZDEay0EqRkq25XVH16H0Ae5zGbCxl4eoiNNEOy0pByslya6+5dOQC1
GpVWpS9lgiMl4ne8gjqioOy1JXk9DyNq/mN4/xGoqQiu1As5N9T9RUAKVL9sJxPq
F2umIB+wmJ1gFQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:36 2025 by rpki-client