Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: OTyqA7LFmIEIYWZFlqD81DnZwmNwuG2lcvnKwbnew/g=
Subject key identifier: AF:42:F1:E2:99:D7:29:58:06:58:F5:A8:42:DC:A5:E0:45:13:7C:4C
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 0194BD176F84CB2813407B9FF1EB11AE5570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: kanRc4UEktBg1W7IUi85CNJyCnk0sY2WFh9hVMqTeRs=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6f:84:cb:28:13:40:7b:9f:f1:eb:11:ae:55:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=af42f1e299d729580658f5a842dca5e045137c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:3a:86:e8:37:ba:3f:ee:d0:b3:68:be:af:
13:a8:fd:d4:f7:52:b5:c2:f5:4d:1e:73:8d:65:ec:
58:81:f5:ed:e8:65:5e:bb:58:d6:87:4e:69:0e:6e:
8f:26:cc:e2:4d:d8:51:5c:e6:0b:a1:86:ec:4c:ef:
12:15:b9:e5:4f:96:30:99:dc:a6:d9:b2:2a:48:44:
42:12:b2:76:9a:1d:9b:99:2d:fe:1b:d4:40:ef:60:
c9:6f:3c:2d:0c:02:c6:99:7e:de:c0:d3:29:f6:1c:
88:a0:3e:34:dc:38:b8:48:3b:ed:cd:2f:ab:8f:ba:
1d:b6:19:21:dd:ab:c2:c5:c5:a0:d8:1b:77:e1:52:
59:10:14:af:d8:82:5a:8e:f1:e0:e8:87:39:e1:bb:
fa:48:38:fb:9d:60:23:f3:fd:e4:e5:a4:6d:b0:ff:
7b:89:2f:c5:9e:c7:74:f8:e9:c2:9f:9d:0d:6c:01:
1b:27:3c:f5:80:34:af:1f:3d:08:c4:3a:63:92:02:
31:f4:78:d7:23:39:73:86:08:a9:9b:43:3b:c4:96:
d0:6b:1d:77:5a:2f:4e:6e:a6:ec:ba:cb:3d:5e:81:
5b:9a:62:a3:c0:9c:d7:96:b6:93:9a:22:d6:2e:fb:
1a:f9:53:70:82:0f:78:b1:6d:77:a3:00:79:2a:6b:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:F1:E2:99:D7:29:58:06:58:F5:A8:42:DC:A5:E0:45:13:7C:4C
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:91:f1:80:00:c1:9e:13:22:b5:fd:24:8c:38:e7:c2:b9:4b:
13:41:67:c2:58:a9:b6:03:c0:12:70:98:d9:f6:0e:00:dc:ca:
3e:ca:88:36:09:09:9a:0c:d4:32:68:19:9f:ca:6a:3e:8d:db:
6a:88:ea:ca:cc:df:b3:86:17:35:f9:24:1a:4e:db:58:82:1c:
1b:a5:38:0d:f2:34:5a:77:06:8d:aa:01:60:1f:60:16:e5:dc:
5d:59:a9:1f:d4:6a:8c:0c:cc:5b:d6:18:6c:22:4d:1a:ce:50:
eb:a3:17:90:60:9c:65:22:49:8f:83:d4:11:79:7d:e9:e2:03:
e0:aa:07:70:26:de:ff:f0:71:66:4a:5c:4d:85:eb:c4:da:81:
ec:77:ce:13:cf:d4:74:7d:70:eb:56:31:b5:f0:1e:e2:42:43:
44:b8:74:8f:c5:2f:cd:c3:27:72:cb:e8:70:54:c5:41:f2:bd:
f9:02:b6:fc:49:88:a2:1d:a0:2c:cd:e8:25:54:09:18:b7:1e:
3f:b7:31:11:3d:a2:c1:b8:8f:3e:ab:fc:c7:06:00:48:4a:e7:
0f:7c:21:87:2a:8e:16:f8:99:b0:8b:e7:e5:2e:da:77:6d:b3:
68:f3:22:23:b1:07:ed:c5:8e:ac:d3:32:53:db:50:7d:ab:44:
7e:78:ec:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2+EyygTQHuf8esRrlVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDYzNmM1MDVkNTZhZjQyYTQxNGMxNjdkNTI0MDdkMzU2
YjNkMGIwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
EyhhZjQyZjFlMjk5ZDcyOTU4MDY1OGY1YTg0MmRjYTVlMDQ1MTM3YzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU86hug3uj/u0LNovq8TqP3U91K1
wvVNHnONZexYgfXt6GVeu1jWh05pDm6PJsziTdhRXOYLoYbsTO8SFbnlT5Ywmdym
2bIqSERCErJ2mh2bmS3+G9RA72DJbzwtDALGmX7ewNMp9hyIoD403Di4SDvtzS+r
j7odthkh3avCxcWg2Bt34VJZEBSv2IJajvHg6Ic54bv6SDj7nWAj8/3k5aRtsP97
iS/Fnsd0+OnCn50NbAEbJzz1gDSvHz0IxDpjkgIx9HjXIzlzhgipm0M7xJbQax13
Wi9Obqbsuss9XoFbmmKjwJzXlraTmiLWLvsa+VNwgg94sW13owB5KmsxkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9C8eKZ1ylYBlj1qELcpeBFE3xMMB8GA1UdIwQY
MBaAFHjWNsUF1Wr0KkFMFn1SQH01az0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTIt
ZGRjZDRkOTM1MDMwLzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTItZGRjZDRkOTM1MDMw
LzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5HxgADB
nhMitf0kjDjnwrlLE0FnwliptgPAEnCY2fYOANzKPsqINgkJmgzUMmgZn8pqPo3b
aojqyszfs4YXNfkkGk7bWIIcG6U4DfI0WncGjaoBYB9gFuXcXVmpH9RqjAzMW9YY
bCJNGs5Q66MXkGCcZSJJj4PUEXl96eID4KoHcCbe//BxZkpcTYXrxNqB7HfOE8/U
dH1w61YxtfAe4kJDRLh0j8UvzcMncsvocFTFQfK9+QK2/EmIoh2gLM3oJVQJGLce
P7cxET2iwbiPPqv8xwYASErnD3whhyqOFviZsIvn5S7ad22zaPMiI7EH7cWOrNMy
U9tQfatEfnjsEA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:24 2025 by rpki-client