Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: oo7hyosgaxtatqn4+gH1xKK8QY0cyimeaZNfdrbBt3s=
Subject key identifier: 0E:B4:A3:F3:94:56:DA:49:53:8B:13:3B:9C:8F:41:98:C0:0F:62:28
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 0194BD85721A97FAF3AFB8EED149604B093E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 0C22
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: SYRnChSsh0_v6fjwXGx7ILcwh_8.roa (hash: ub+o2UwDjpsKp4KwHEYNQcFaXm52BqcyybdGRXcC+wM=)
2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: YlX3wpcDD8Aj1M8z75R1ykrnUDO+X636i291sMnmQX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:1a:97:fa:f3:af:b8:ee:d1:49:60:4b:09:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=0eb4a3f39456da49538b133b9c8f4198c00f6228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:18:6f:a6:c5:ac:9b:5d:aa:3a:60:5d:62:
ce:51:69:ae:be:59:ca:de:e5:1d:7b:13:8a:0d:bf:
b9:a8:07:73:8e:ce:19:fc:48:13:01:3c:5f:c7:13:
ef:f7:28:99:b6:33:6f:15:3d:91:a6:6c:ae:9f:b3:
b7:c3:66:1e:fb:fb:7a:42:09:90:8e:18:49:1f:51:
b2:3e:29:a2:b1:d2:6e:f9:bc:0b:07:21:59:4b:45:
00:3a:c4:87:35:67:38:4c:d2:61:c5:c8:8b:f2:97:
b3:73:bf:62:37:06:53:a2:83:b5:35:3e:b8:3a:8b:
f9:f0:c7:a3:78:4b:47:11:71:1b:5d:11:d9:da:c0:
29:58:f4:4d:2c:39:cc:ea:08:0b:6c:51:5d:df:9a:
9a:6a:0b:fb:e1:57:a3:aa:07:aa:80:5c:98:73:4a:
04:a5:4e:99:27:a1:55:a0:13:54:c9:d7:23:8e:4b:
38:2b:02:81:0e:42:f1:89:b8:45:27:09:d2:ee:56:
89:b3:69:23:91:ab:ef:30:de:7c:97:77:5c:1b:40:
55:ab:6f:1c:2f:d5:c0:df:86:19:f6:5f:30:73:6d:
5e:8b:b4:a2:a4:51:f5:61:1b:1a:1a:88:93:4f:9d:
f9:3a:3b:28:7f:80:f4:67:9b:09:15:18:31:4b:8f:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:A3:F3:94:56:DA:49:53:8B:13:3B:9C:8F:41:98:C0:0F:62:28
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5f:28:62:76:3e:48:a0:8d:33:32:1e:c4:ad:d5:77:f3:e6:
d3:06:de:9a:02:09:40:6c:50:0e:53:15:67:04:41:fa:ab:88:
d3:16:f0:95:89:2a:72:a3:ef:b1:8b:95:4d:8a:78:93:04:f0:
0d:ae:71:d0:d6:80:b9:3e:ad:cb:40:d2:e4:67:85:e3:57:9b:
99:7f:82:7d:dc:2a:3d:bf:9b:2a:7b:a6:de:64:38:23:b6:ff:
7f:fa:aa:df:0c:ae:4e:b1:59:da:87:11:b2:10:31:af:75:da:
8e:9f:e7:00:7a:ec:fb:ad:15:92:ec:a4:b7:ed:e0:a0:74:fe:
60:d0:99:f0:35:b6:51:e4:0b:15:48:c6:44:09:f8:41:9c:18:
66:a3:d2:86:fc:65:b4:07:18:da:37:bb:71:65:27:97:bc:f0:
09:a9:ba:50:91:74:b9:32:29:63:ee:e7:38:29:e7:96:19:c3:
68:91:43:49:d8:00:7d:46:42:cf:23:b2:db:8b:f5:2a:c4:32:
51:e6:ca:fa:a4:61:47:a6:a1:ff:d2:58:30:93:35:d7:d5:8d:
cb:41:de:41:de:cf:43:64:21:65:56:98:82:a2:86:29:b5:2a:
aa:2b:a3:4e:74:90:e9:d1:b7:f7:4c:ad:2d:fc:24:61:50:3f:
25:3a:78:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXIal/rzr7ju0UlgSwk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYzYyM2VmYmZjMTI0NzEyMTYyMjQwY2JhMDJhNGRhMWQ0
ZGNlYTMwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
EygwZWI0YTNmMzk0NTZkYTQ5NTM4YjEzM2I5YzhmNDE5OGMwMGY2MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ4Yb6bFrJtdqjpgXWLOUWmuvlnK
3uUdexOKDb+5qAdzjs4Z/EgTATxfxxPv9yiZtjNvFT2Rpmyun7O3w2Ye+/t6QgmQ
jhhJH1GyPimisdJu+bwLByFZS0UAOsSHNWc4TNJhxciL8pezc79iNwZTooO1NT64
Oov58MejeEtHEXEbXRHZ2sApWPRNLDnM6ggLbFFd35qaagv74VejqgeqgFyYc0oE
pU6ZJ6FVoBNUydcjjks4KwKBDkLxibhFJwnS7laJs2kjkavvMN58l3dcG0BVq28c
L9XA34YZ9l8wc21ei7SipFH1YRsaGoiTT535Ojsof4D0Z5sJFRgxS48MNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA60o/OUVtpJU4sTO5yPQZjAD2IoMB8GA1UdIwQY
MBaAFHrGI++/wSRxIWIkDLoCpNodTc6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3Zjgt
NDNhYTRjY2UzZjQ4LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3ZjgtNDNhYTRjY2UzZjQ4
LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF8oYnY+
SKCNMzIexK3Vd/Pm0wbemgIJQGxQDlMVZwRB+quI0xbwlYkqcqPvsYuVTYp4kwTw
Da5x0NaAuT6ty0DS5GeF41ebmX+CfdwqPb+bKnum3mQ4I7b/f/qq3wyuTrFZ2ocR
shAxr3Xajp/nAHrs+60Vkuykt+3goHT+YNCZ8DW2UeQLFUjGRAn4QZwYZqPShvxl
tAcY2je7cWUnl7zwCam6UJF0uTIpY+7nOCnnlhnDaJFDSdgAfUZCzyOy24v1KsQy
UebK+qRhR6ah/9JYMJM119WNy0HeQd7PQ2QhZVaYgqKGKbUqqiujTnSQ6dG390yt
LfwkYVA/JTp4NQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client