Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
File: 6JeVIBx9PZPNKghd42ku3XG3cm0.mft (raw, json)
Hash identifier: fgVFgMkn2Taar+Xm6WAdEpu25oB5CYqweIYbR4mhCDo=
Subject key identifier: 78:E0:6B:C5:E2:7B:9A:16:65:7F:28:51:D3:E6:CB:91:09:00:DE:71
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Certificate issuer: /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial: 0194BC3BDCE44D0C6D58678975E4C0024355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
Manifest number: 07AA
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 6JeVIBx9PZPNKghd42ku3XG3cm0.crl (hash: +RaFBssicpd/Ph+sHH8W7XRlYqmjl63efBpa2J7+kLk=)
2: n5zZ8emiGJc39AvFCX_4g7V1Hbw.roa (hash: lqRnzTh86Fa5qo5s0AzLpFMvIZ+B4HTsCFIStL4pgaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dc:e4:4d:0c:6d:58:67:89:75:e4:c0:02:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=78e06bc5e27b9a16657f2851d3e6cb910900de71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:34:49:aa:dc:94:e2:3f:d5:b7:c2:38:08:
14:83:57:53:64:0b:7f:4f:b6:3d:65:33:df:80:b1:
fd:ee:20:59:fb:09:3c:4a:f8:ac:a6:49:4a:d5:39:
cb:34:74:b0:c0:e9:9a:1a:71:f4:6c:4a:20:d5:f8:
e2:16:47:92:52:41:94:ef:5a:43:f5:74:fe:6a:93:
af:ad:50:6b:20:6b:5b:90:9d:8c:3d:6b:1c:64:7d:
02:b2:4d:cc:de:20:ea:82:c0:ac:91:2f:82:0e:44:
08:06:af:08:64:95:6d:e9:3e:23:4a:8f:2a:55:41:
a5:a1:46:59:96:b8:c4:4d:83:be:6f:30:4e:62:c5:
ed:d7:99:db:b6:42:12:06:02:92:57:be:4b:10:fe:
da:0b:6d:da:fe:d6:ce:31:0e:8f:b3:7c:1f:5b:fe:
70:2e:32:71:c8:8d:80:4b:3d:d3:cc:54:b5:24:b2:
2e:be:31:00:27:dc:1d:82:1d:99:63:92:a8:b5:3a:
a4:d7:96:12:9b:87:ee:33:46:92:6c:f7:be:68:f3:
ac:b0:03:59:38:8a:88:84:07:2e:95:5d:a7:6a:1a:
f0:dc:d8:26:21:a1:8f:ed:ec:c6:dd:29:7f:ce:b7:
56:9a:b7:99:de:af:d4:25:28:6a:87:44:88:a3:f2:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:6B:C5:E2:7B:9A:16:65:7F:28:51:D3:E6:CB:91:09:00:DE:71
X509v3 Authority Key Identifier:
keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d0:0b:ec:03:cd:95:69:ac:1a:72:09:9e:36:df:84:b6:5e:
ee:e7:23:42:03:e2:95:c6:8f:0c:fa:f5:d4:62:b2:f9:e4:65:
7e:cf:75:75:c8:f0:8d:08:81:9f:24:b6:fb:ca:98:fc:ac:20:
82:2d:4e:85:07:36:61:0d:ff:4c:a0:c4:0f:4e:b2:0f:56:53:
66:7b:f1:c4:52:f6:f6:e0:7e:4c:40:df:0a:62:86:d2:6a:a9:
12:69:24:2f:84:78:9b:76:03:dd:26:e2:2c:d7:62:f8:d5:26:
85:00:13:1b:6d:88:31:4e:11:71:89:39:bb:c5:62:ec:3a:e2:
a3:03:c9:1c:33:16:6b:a6:e1:6c:a2:4a:61:2a:7b:ec:f2:0a:
2b:0e:da:1a:3f:08:df:a1:79:f1:7d:3c:4f:fa:68:d8:ba:ee:
6f:6e:2b:07:e8:27:03:14:6d:1c:33:8b:00:ee:5d:9c:5c:49:
90:1f:0e:7f:c6:0f:3d:90:45:88:27:56:18:70:8b:2d:61:8f:
a3:60:9a:ef:49:19:21:a8:6a:49:1b:58:d7:12:1a:16:df:93:
8d:ec:06:5c:c7:5c:7b:9e:5a:8a:8d:ad:85:3f:f8:20:80:f5:
71:e1:f8:9b:fd:e0:74:cb:60:0b:cd:f4:d0:82:23:7a:1b:41:
0f:52:cc:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9zkTQxtWGeJdeTAAkNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTc5NTIwMWM3ZDNkOTNjZDJhMDg1ZGUzNjkyZWRkNzFi
NzcyNmQwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
Eyg3OGUwNmJjNWUyN2I5YTE2NjU3ZjI4NTFkM2U2Y2I5MTA5MDBkZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLU0SarclOI/1bfCOAgUg1dTZAt/
T7Y9ZTPfgLH97iBZ+wk8SvispklK1TnLNHSwwOmaGnH0bEog1fjiFkeSUkGU71pD
9XT+apOvrVBrIGtbkJ2MPWscZH0Csk3M3iDqgsCskS+CDkQIBq8IZJVt6T4jSo8q
VUGloUZZlrjETYO+bzBOYsXt15nbtkISBgKSV75LEP7aC23a/tbOMQ6Ps3wfW/5w
LjJxyI2ASz3TzFS1JLIuvjEAJ9wdgh2ZY5KotTqk15YSm4fuM0aSbPe+aPOssANZ
OIqIhAculV2nahrw3NgmIaGP7ezG3Sl/zrdWmreZ3q/UJShqh0SIo/JXhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjga8Xie5oWZX8oUdPmy5EJAN5xMB8GA1UdIwQY
MBaAFOiXlSAcfT2TzSoIXeNpLt1xt3JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iMThiMDMtNzIyOS00YTJhLTkxODUt
Mjk4NjcxZDEyNjFlLzEvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iMThiMDMtNzIyOS00YTJhLTkxODUtMjk4NjcxZDEyNjFl
LzEvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNAL7APN
lWmsGnIJnjbfhLZe7ucjQgPilcaPDPr11GKy+eRlfs91dcjwjQiBnyS2+8qY/Kwg
gi1OhQc2YQ3/TKDED06yD1ZTZnvxxFL29uB+TEDfCmKG0mqpEmkkL4R4m3YD3Sbi
LNdi+NUmhQATG22IMU4RcYk5u8Vi7DriowPJHDMWa6bhbKJKYSp77PIKKw7aGj8I
36F58X08T/po2Lrub24rB+gnAxRtHDOLAO5dnFxJkB8Of8YPPZBFiCdWGHCLLWGP
o2Ca70kZIahqSRtY1xIaFt+TjewGXMdce55aio2thT/4IID1ceH4m/3gdMtgC830
0IIjehtBD1LMBw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:40 2025 by rpki-client