Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: 2fvA0e+DB+uQ+XqRim7j4vS5jjhl4U6YZNzlzE8VrnM=
Subject key identifier: 62:FF:3C:75:5D:DA:3A:AB:DE:8F:03:D9:03:3E:4C:EF:05:10:97:70
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 0194BD17ED77839689E4F0D15A79E6494814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 05B2
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: 2MaF2ESYTyUfwDohqcD3Sfa5vJP6hEWlpcbbncxj2V4=)
2: Z4ofkESpTnS_Za2f7bq3x2ReDGc.roa (hash: 8EmcU+Ud2yGKJeKRWd+BCSPrScNtKeU4SYeONSGw0pc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ed:77:83:96:89:e4:f0:d1:5a:79:e6:49:48:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=62ff3c755dda3aabde8f03d9033e4cef05109770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:dd:f7:91:5d:df:a1:77:7c:65:6d:12:b0:
51:e6:7b:db:00:8b:33:02:1a:0e:d1:75:cd:c3:79:
f0:88:0c:6b:a7:ca:7b:24:6b:f7:6c:c9:05:26:90:
f0:f5:b8:31:f1:90:f0:60:34:98:b3:57:5a:01:c7:
7a:4e:f7:42:39:82:a4:60:47:4a:34:e6:31:f0:67:
5d:12:ed:b2:87:62:64:24:4a:ca:6e:e9:cf:72:26:
bf:f1:d5:7b:82:63:18:9e:bf:88:f0:38:3f:58:42:
fb:3b:92:2e:2e:10:8b:71:bf:8f:97:fa:e4:6c:7f:
d6:28:dd:46:8b:c9:14:11:07:44:c4:06:40:b6:66:
62:f7:e2:44:13:2d:92:0c:77:4d:fb:71:0f:6c:2f:
2d:71:11:b8:05:50:7a:ea:36:40:24:81:99:df:8c:
49:08:6b:89:e0:89:de:b6:63:91:44:06:29:45:20:
b0:7f:01:29:19:0a:7a:63:1f:6c:83:84:b4:b5:28:
f5:0b:a5:80:3c:96:38:51:dc:23:10:6e:31:37:39:
b8:c6:65:7d:9c:38:07:e7:c2:5c:0f:0e:89:49:75:
2c:1c:ff:a7:11:fb:c7:28:21:07:d6:00:da:62:ab:
0d:6e:40:db:f8:5e:c6:22:6e:d1:58:06:d3:24:26:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:3C:75:5D:DA:3A:AB:DE:8F:03:D9:03:3E:4C:EF:05:10:97:70
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:70:88:cb:3f:96:46:cc:6d:e0:6f:e8:9f:4b:1f:28:7a:f6:
f2:00:a7:bf:a4:b6:cb:26:b2:a5:8c:45:96:bc:8b:02:d3:87:
21:0f:11:83:d4:69:86:f2:8f:0a:93:ae:d4:d0:14:1d:e8:c6:
29:70:cc:62:ec:4d:ef:d3:cb:ef:0f:b5:68:5f:af:04:ac:50:
4e:81:7f:a5:26:da:16:52:4e:a7:27:a5:cc:3f:b5:9d:4a:c3:
1a:c8:39:3d:f3:e0:a5:52:2c:12:7b:c2:c3:01:e8:3f:4f:61:
fb:22:6f:90:2c:46:d3:e1:36:11:af:19:f9:e1:2e:e5:2e:20:
a4:85:41:17:41:ba:fa:0c:3f:b3:7e:cb:f5:16:0c:5f:df:27:
04:c7:07:ef:e5:53:3d:86:8a:11:02:75:76:5a:08:bf:6a:91:
ee:c1:d7:64:a8:e4:52:a3:39:05:25:22:bb:5c:9d:44:3d:f6:
b3:be:f4:30:be:bc:7c:b1:14:07:71:58:05:2d:ba:2d:9f:54:
a8:28:b6:bc:c4:57:f2:06:b4:57:0b:4e:ac:fd:33:37:72:88:
7e:9f:e5:84:9e:f2:96:65:ca:b7:85:ab:92:5e:e3:a3:83:7d:
41:09:8b:8d:4b:f4:77:0b:3c:9a:35:57:2f:35:c0:0d:d7:08:
9a:c3:46:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+13g5aJ5PDRWnnmSUgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMDg1YzU0MGMxMTRmYzg5NTdhMDI1MGJiNDlmNDg0Yjc0
MzU3YjkwHhcNMjUwMTMxMTYwMDQ5WhcNMjUwMjAxMTYwMDQ5WjAzMTEwLwYDVQQD
Eyg2MmZmM2M3NTVkZGEzYWFiZGU4ZjAzZDkwMzNlNGNlZjA1MTA5NzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wbd95Fd36F3fGVtErBR5nvbAIsz
AhoO0XXNw3nwiAxrp8p7JGv3bMkFJpDw9bgx8ZDwYDSYs1daAcd6TvdCOYKkYEdK
NOYx8GddEu2yh2JkJErKbunPcia/8dV7gmMYnr+I8Dg/WEL7O5IuLhCLcb+Pl/rk
bH/WKN1Gi8kUEQdExAZAtmZi9+JEEy2SDHdN+3EPbC8tcRG4BVB66jZAJIGZ34xJ
CGuJ4InetmORRAYpRSCwfwEpGQp6Yx9sg4S0tSj1C6WAPJY4UdwjEG4xNzm4xmV9
nDgH58JcDw6JSXUsHP+nEfvHKCEH1gDaYqsNbkDb+F7GIm7RWAbTJCbtrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGL/PHVd2jqr3o8D2QM+TO8FEJdwMB8GA1UdIwQY
MBaAFBIIXFQMEU/IlXoCULtJ9IS3Q1e5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAt
OGFhNmY2YzE3MGZmLzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAtOGFhNmY2YzE3MGZm
LzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnCIyz+W
Rsxt4G/on0sfKHr28gCnv6S2yyaypYxFlryLAtOHIQ8Rg9RphvKPCpOu1NAUHejG
KXDMYuxN79PL7w+1aF+vBKxQToF/pSbaFlJOpyelzD+1nUrDGsg5PfPgpVIsEnvC
wwHoP09h+yJvkCxG0+E2Ea8Z+eEu5S4gpIVBF0G6+gw/s37L9RYMX98nBMcH7+VT
PYaKEQJ1dloIv2qR7sHXZKjkUqM5BSUiu1ydRD32s770ML68fLEUB3FYBS26LZ9U
qCi2vMRX8ga0VwtOrP0zN3KIfp/lhJ7ylmXKt4Wrkl7jo4N9QQmLjUv0dws8mjVX
LzXADdcImsNGxw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:48 2025 by rpki-client