Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: 7CtG6OeRjnzujRFPJ5/+jwtRakK3p6bGsGyhwBMqHUY=
Subject key identifier: E6:49:2C:67:1F:94:6F:0B:8F:DC:7F:D1:DE:9A:9C:A0:65:1B:96:56
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 0194BCA994A33BCFB8F09CA98FF29D278354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 1178
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: 8kI4Rmvd0T8EL1ZrTSCjWSyHrnBzVbeS2bVUxzECsgM=)
2: E1bl48S3uJKeNjvLI-bFqfXhncs.roa (hash: ArUx/3Qpsc+v7haQQn7oiPimdfGwPvnJmdz3/p9me1Q=)
3: V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (hash: n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:94:a3:3b:cf:b8:f0:9c:a9:8f:f2:9d:27:83:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=e6492c671f946f0b8fdc7fd1de9a9ca0651b9656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:6b:d1:20:d6:69:f4:89:a0:a7:f8:3e:98:
97:bc:e8:13:85:7f:a8:34:f1:67:70:7a:05:25:cb:
73:e7:db:fd:72:89:e2:35:b6:e6:99:d5:94:46:72:
86:b2:03:88:af:2c:31:cb:04:80:19:79:31:73:cc:
60:0e:b8:4b:76:14:a1:e6:47:f1:9d:44:1c:2e:bf:
c6:b4:00:41:ad:c0:02:1f:fe:d1:66:3b:ef:3f:90:
6c:14:d1:84:e2:73:b6:56:5f:5d:38:75:8a:16:a6:
ab:5c:b1:78:40:4e:0c:27:bf:fc:60:70:57:1f:39:
f9:de:c3:85:4f:93:50:e7:4b:c4:7c:49:18:e3:5e:
31:30:8d:b5:b4:4e:4b:64:ef:a3:84:d7:3f:b1:0c:
57:51:6b:6c:43:da:30:95:31:88:6c:f9:73:8b:97:
a8:02:00:fe:0e:ad:24:c8:ea:dc:04:9c:e2:b1:b1:
f5:71:9d:34:4e:fb:e6:e8:de:62:52:21:92:7e:9d:
5f:ed:e3:e1:e6:5f:4e:85:a7:5b:92:15:8c:6f:f7:
3c:29:74:4f:39:a2:3a:d6:96:3d:bd:0c:c7:85:0d:
4b:8b:29:fb:85:b9:03:bf:ac:5e:06:73:5e:2a:f8:
d7:34:77:4d:5e:d5:36:d2:50:96:84:bc:28:69:0d:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:49:2C:67:1F:94:6F:0B:8F:DC:7F:D1:DE:9A:9C:A0:65:1B:96:56
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ef:18:36:6f:ef:b3:b3:ef:ed:bf:42:44:87:87:a2:2a:21:
59:0b:15:79:d5:0b:ef:d8:d0:11:28:00:1f:bc:4b:96:e9:72:
2e:31:65:5c:59:39:fa:3a:ad:d2:ec:34:85:52:bc:a7:72:97:
43:2b:b0:4e:47:71:4f:aa:8e:e0:5b:92:15:0d:24:b1:e2:2b:
48:f5:06:d9:88:b3:8a:3b:2b:26:56:69:54:12:52:cc:89:6f:
c3:8a:a3:2c:6a:9f:ee:92:5c:3a:8a:5e:c1:ef:9d:22:3e:70:
36:38:3c:25:f4:39:a6:3f:f8:a8:50:82:21:5b:8f:f6:0a:17:
e9:f9:b7:5f:0e:b3:24:81:31:52:9e:36:f3:1d:31:66:82:aa:
00:10:c8:e4:9b:6f:08:72:7d:7a:52:6c:1c:50:c6:e3:15:9b:
9b:2e:12:1d:73:c3:b7:cf:1f:5c:9e:55:48:41:2b:d9:0b:1b:
d9:bb:19:6a:c0:50:a3:2e:f5:ac:64:39:13:c1:9d:a2:9f:68:
0b:cc:ca:a9:dd:27:ec:da:8c:22:54:63:ad:e9:f8:e2:56:1e:
a4:d2:56:72:37:a6:48:ac:ec:ab:97:c2:74:e1:60:82:58:b8:
3a:75:c9:86:68:94:d5:b7:ee:d9:19:31:10:48:8a:7c:a5:e1:
e9:75:8f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZSjO8+48Jypj/KdJ4NUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTU0YzQ0MDQ2YzM2NDM5YTkxOTczODk0MmYzMWZhNzU2
YjY5MTEwHhcNMjUwMTMxMTQwMDE3WhcNMjUwMjAxMTQwMDE3WjAzMTEwLwYDVQQD
EyhlNjQ5MmM2NzFmOTQ2ZjBiOGZkYzdmZDFkZTlhOWNhMDY1MWI5NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjttr0SDWafSJoKf4PpiXvOgThX+o
NPFncHoFJctz59v9coniNbbmmdWURnKGsgOIrywxywSAGXkxc8xgDrhLdhSh5kfx
nUQcLr/GtABBrcACH/7RZjvvP5BsFNGE4nO2Vl9dOHWKFqarXLF4QE4MJ7/8YHBX
Hzn53sOFT5NQ50vEfEkY414xMI21tE5LZO+jhNc/sQxXUWtsQ9owlTGIbPlzi5eo
AgD+Dq0kyOrcBJzisbH1cZ00Tvvm6N5iUiGSfp1f7ePh5l9OhadbkhWMb/c8KXRP
OaI61pY9vQzHhQ1Liyn7hbkDv6xeBnNeKvjXNHdNXtU20lCWhLwoaQ3v0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZJLGcflG8Lj9x/0d6anKBlG5ZWMB8GA1UdIwQY
MBaAFOtVTEQEbDZDmpGXOJQvMfp1a2kRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFWTVJBUnNOa09ha1pjNGxDOHgtblZyYVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jNTQ3YjgtOTlhYi00MmYxLWE2Y2Mt
YmM2NjViYjIxNjg2LzEvNjFWTVJBUnNOa09ha1pjNGxDOHgtblZyYVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jNTQ3YjgtOTlhYi00MmYxLWE2Y2MtYmM2NjViYjIxNjg2
LzEvNjFWTVJBUnNOa09ha1pjNGxDOHgtblZyYVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+8YNm/v
s7Pv7b9CRIeHoiohWQsVedUL79jQESgAH7xLlulyLjFlXFk5+jqt0uw0hVK8p3KX
QyuwTkdxT6qO4FuSFQ0kseIrSPUG2YizijsrJlZpVBJSzIlvw4qjLGqf7pJcOope
we+dIj5wNjg8JfQ5pj/4qFCCIVuP9goX6fm3Xw6zJIExUp428x0xZoKqABDI5Jtv
CHJ9elJsHFDG4xWbmy4SHXPDt88fXJ5VSEEr2Qsb2bsZasBQoy71rGQ5E8Gdop9o
C8zKqd0n7NqMIlRjren44lYepNJWcjemSKzsq5fCdOFggli4OnXJhmiU1bfu2Rkx
EEiKfKXh6XWPpg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:58 2025 by rpki-client