Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: ltQq6VUzY8Qoyng0CpNBfJpFoop6IvUtmBFO6XGrzSA=
Subject key identifier: D4:3B:2A:93:33:AC:A3:99:92:0E:37:D3:FD:BA:63:8C:E5:21:E1:7F
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 0194BD858D9078ABB6E1D793B5C789DC375C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 10DB
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: RjluQGj2Zpf1XLPP94A8bGPIDNBS/2HjQ/77XKB0aG0=)
2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8d:90:78:ab:b6:e1:d7:93:b5:c7:89:dc:37:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=d43b2a9333aca399920e37d3fdba638ce521e17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:d2:56:da:9b:cb:56:48:76:77:9d:43:15:
cc:1b:0f:b2:cc:e8:61:33:46:4d:49:10:2f:dc:dc:
34:66:0a:d2:9c:9f:4d:5a:04:36:d9:f8:68:4f:74:
9d:4b:e9:08:83:28:a4:fc:4c:50:3e:e8:ba:df:62:
ab:4d:a6:39:ff:ae:07:c4:30:a7:bd:db:8a:a3:88:
3a:42:75:54:ef:33:46:83:51:00:c5:c4:08:50:0a:
08:00:74:20:24:03:96:6e:09:b8:e4:56:40:f5:0c:
f7:6c:f2:4c:d9:8f:6b:90:92:6c:b6:2d:29:e6:0e:
34:0c:9f:83:d1:66:bc:05:be:7b:b8:65:e6:96:31:
e4:c4:89:4c:9b:ab:dc:ac:92:eb:5d:8c:2c:39:98:
78:fd:83:20:83:7d:9f:42:f1:3e:e9:a3:dc:6f:c3:
8b:ba:06:96:d8:0a:a8:37:d1:95:a9:28:28:4f:ff:
2c:2b:f5:55:f0:05:2e:ad:7e:82:43:6b:7c:c2:48:
bf:d3:28:84:7a:64:65:4a:5c:a1:cd:79:8a:4d:e6:
95:db:2e:64:3a:aa:f0:0b:73:85:e1:3c:f7:f7:65:
29:e2:ca:67:36:d7:9c:a4:ee:a7:fb:70:24:38:59:
8f:6b:96:36:2d:55:fc:71:20:73:2f:c4:b0:a2:e8:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:2A:93:33:AC:A3:99:92:0E:37:D3:FD:BA:63:8C:E5:21:E1:7F
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2f:29:77:f6:40:ca:33:18:30:60:1c:3a:11:10:53:ec:7a:
97:07:81:aa:7b:1a:bc:da:f4:41:57:4d:0c:34:bc:a3:77:21:
9c:e4:5f:f4:4f:df:40:cb:9c:e0:62:c3:67:c3:4b:62:a0:cd:
79:3b:f2:61:81:70:2e:5a:f9:e5:55:20:1f:d6:95:30:71:19:
b5:b4:b2:b9:29:e6:6a:e9:ed:dd:a6:7b:a4:e3:e2:89:4e:35:
53:40:9a:ec:15:d7:e0:3d:c0:e7:9b:ab:bf:0c:ec:8f:ee:cc:
8c:4b:e7:fd:49:db:65:21:03:d7:50:c3:ad:5b:9a:4c:57:61:
1a:a4:d2:c3:1d:3f:18:ee:04:8d:74:82:c1:93:b7:6d:18:08:
48:42:85:1c:e9:ae:23:4e:fd:b7:86:f6:40:da:d5:ed:40:dd:
4d:a9:b5:04:00:c0:18:85:df:5d:7b:48:d7:0b:34:1f:2c:f3:
aa:cc:e0:b7:6b:02:3c:e7:04:53:a8:e8:15:33:0c:9b:89:8b:
4e:2e:a8:1d:da:82:cc:eb:ad:11:3b:02:1c:15:8e:da:24:ab:
ad:58:16:19:0b:1f:9c:bb:98:3b:6e:bc:54:de:26:e2:42:03:
3c:98:29:37:62:18:fc:90:f3:3f:8d:18:4f:00:a4:21:e9:5e:
ad:0a:41:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hY2QeKu24deTtceJ3DdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5
MmZjZTkwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
EyhkNDNiMmE5MzMzYWNhMzk5OTIwZTM3ZDNmZGJhNjM4Y2U1MjFlMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwDSVtqby1ZIdnedQxXMGw+yzOhh
M0ZNSRAv3Nw0ZgrSnJ9NWgQ22fhoT3SdS+kIgyik/ExQPui632KrTaY5/64HxDCn
vduKo4g6QnVU7zNGg1EAxcQIUAoIAHQgJAOWbgm45FZA9Qz3bPJM2Y9rkJJsti0p
5g40DJ+D0Wa8Bb57uGXmljHkxIlMm6vcrJLrXYwsOZh4/YMgg32fQvE+6aPcb8OL
ugaW2AqoN9GVqSgoT/8sK/VV8AUurX6CQ2t8wki/0yiEemRlSlyhzXmKTeaV2y5k
OqrwC3OF4Tz392Up4spnNtecpO6n+3AkOFmPa5Y2LVX8cSBzL8SwoujeJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ7KpMzrKOZkg430/26Y4zlIeF/MB8GA1UdIwQY
MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt
ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3
LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy8pd/ZA
yjMYMGAcOhEQU+x6lweBqnsavNr0QVdNDDS8o3chnORf9E/fQMuc4GLDZ8NLYqDN
eTvyYYFwLlr55VUgH9aVMHEZtbSyuSnmaunt3aZ7pOPiiU41U0Ca7BXX4D3A55ur
vwzsj+7MjEvn/UnbZSED11DDrVuaTFdhGqTSwx0/GO4EjXSCwZO3bRgISEKFHOmu
I079t4b2QNrV7UDdTam1BADAGIXfXXtI1ws0Hyzzqszgt2sCPOcEU6joFTMMm4mL
Ti6oHdqCzOutETsCHBWO2iSrrVgWGQsfnLuYO268VN4m4kIDPJgpN2IY/JDzP40Y
TwCkIelerQpBOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:17 2025 by rpki-client