Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier: 5lg9d+bWLj8Sz/B2gwW0FlniTT+wqFGoH5jjXwDx0ws=
Subject key identifier: 92:9E:0F:3B:FA:6A:B1:CD:93:51:61:CB:55:D8:17:52:5D:74:FA:A0
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 0194BD17F7525E7F71F344B90467DADA9C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number: 088A
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: T8FxXqEpr138SOGaCPvMzEYLa5J4fjvcvCHtvfw8qvk=)
2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f7:52:5e:7f:71:f3:44:b9:04:67:da:da:9c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=929e0f3bfa6ab1cd935161cb55d817525d74faa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:aa:f0:22:89:f8:7b:da:95:4c:63:4e:5e:
0e:68:4f:6f:bc:04:d3:97:a1:b5:30:65:06:ef:93:
cd:d2:21:32:d2:4e:f7:ea:a2:de:6d:59:90:88:a5:
12:e1:56:eb:32:7f:42:02:54:65:7f:3c:ed:8a:a3:
d5:5f:d2:be:a4:64:8d:15:b7:46:ae:13:ef:df:a2:
01:f9:f4:e9:21:7c:14:7f:48:6f:a6:d0:c2:fb:0c:
39:b8:10:f4:3c:8e:63:57:bb:cc:ea:14:e4:cf:ad:
87:75:fe:16:62:7a:5a:5f:6d:36:13:07:6b:87:b6:
0c:e2:86:d7:30:bc:e9:d9:d6:0f:89:c2:ed:36:f8:
6b:f1:a2:74:c9:e9:fa:c2:33:e4:af:d9:41:18:f5:
17:c3:04:3c:d1:b4:3d:f4:b7:49:65:27:2c:43:ce:
71:c2:03:e9:5a:0e:52:e5:c8:fe:9f:21:83:8d:42:
6c:04:ba:69:c6:69:26:f8:e1:00:54:18:eb:4d:e6:
1d:5b:a7:fe:6a:14:f0:97:12:90:a9:5f:91:a4:84:
89:ff:7e:49:11:16:a7:8b:33:6e:3a:cf:36:fd:91:
77:38:2c:77:1b:ed:74:46:e7:6c:a7:72:85:df:bb:
bb:ea:df:a6:b6:30:db:66:e4:74:cf:4d:23:82:cd:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:0F:3B:FA:6A:B1:CD:93:51:61:CB:55:D8:17:52:5D:74:FA:A0
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5e:d1:0d:25:79:29:42:f0:0e:d1:82:23:97:15:03:f6:2f:
cc:6d:c4:92:ec:93:b5:71:d1:43:34:3e:90:14:2c:45:b5:99:
a1:2e:69:be:0e:67:88:87:90:90:bb:b4:2b:87:fa:de:d4:22:
b9:63:11:74:4a:b4:59:97:12:40:33:ea:85:ef:75:64:73:f6:
fc:bb:a4:df:d0:a3:1a:f7:f1:71:3f:8d:57:56:08:40:e5:cd:
1b:a6:b0:14:e8:64:f9:a8:e2:c6:20:6f:94:7c:67:8d:fa:a8:
c5:8f:d2:a7:34:f3:95:14:61:96:f4:b2:08:37:a7:b4:80:70:
77:ad:46:65:6f:27:c7:a1:0b:a4:2d:4d:3a:b5:2a:c9:aa:dd:
dc:10:27:9d:94:4d:d6:61:99:85:1a:63:8b:39:eb:24:46:20:
2f:7f:d8:a0:89:1b:6f:83:37:3c:2d:a9:6e:b5:bb:8e:23:2e:
32:c1:30:2d:bd:52:2d:0a:7f:3f:12:23:a5:91:e6:49:ea:7d:
3e:8b:31:e9:11:16:a4:5e:86:b3:b4:e6:af:c9:58:3b:f7:a2:
e8:40:4a:1c:ca:be:06:65:5c:21:9d:a1:49:cf:9c:6a:2c:9b:
de:e2:96:4c:a2:e3:ff:b5:10:19:62:94:93:b5:6b:aa:ff:2b:
8f:4f:f1:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/dSXn9x80S5BGfa2pwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTk2OTYyMTQyNDgwY2JiMWQzODQxMTc3MWViNGZmM2Uz
OTgzOWYwHhcNMjUwMTMxMTYwMDUxWhcNMjUwMjAxMTYwMDUxWjAzMTEwLwYDVQQD
Eyg5MjllMGYzYmZhNmFiMWNkOTM1MTYxY2I1NWQ4MTc1MjVkNzRmYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosWq8CKJ+HvalUxjTl4OaE9vvATT
l6G1MGUG75PN0iEy0k736qLebVmQiKUS4VbrMn9CAlRlfzztiqPVX9K+pGSNFbdG
rhPv36IB+fTpIXwUf0hvptDC+ww5uBD0PI5jV7vM6hTkz62Hdf4WYnpaX202Ewdr
h7YM4obXMLzp2dYPicLtNvhr8aJ0yen6wjPkr9lBGPUXwwQ80bQ99LdJZScsQ85x
wgPpWg5S5cj+nyGDjUJsBLppxmkm+OEAVBjrTeYdW6f+ahTwlxKQqV+RpISJ/35J
ERanizNuOs82/ZF3OCx3G+10Rudsp3KF37u76t+mtjDbZuR0z00jgs2kpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKeDzv6arHNk1Fhy1XYF1JddPqgMB8GA1UdIwQY
MBaAFNHpaWIUJIDLsdOEEXcetP8+OYOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAt
ODhmNjQxNjg4ZTBmLzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAtODhmNjQxNjg4ZTBm
LzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx17RDSV5
KULwDtGCI5cVA/YvzG3EkuyTtXHRQzQ+kBQsRbWZoS5pvg5niIeQkLu0K4f63tQi
uWMRdEq0WZcSQDPqhe91ZHP2/Luk39CjGvfxcT+NV1YIQOXNG6awFOhk+ajixiBv
lHxnjfqoxY/SpzTzlRRhlvSyCDentIBwd61GZW8nx6ELpC1NOrUqyard3BAnnZRN
1mGZhRpjiznrJEYgL3/YoIkbb4M3PC2pbrW7jiMuMsEwLb1SLQp/PxIjpZHmSep9
Posx6REWpF6Gs7Tmr8lYO/ei6EBKHMq+BmVcIZ2hSc+caiyb3uKWTKLj/7UQGWKU
k7Vrqv8rj0/xYg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:34 2025 by rpki-client