Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File: 7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier: 4+CNhY7+47+cV6ZwB6kGK/wvKrO4rtdQTZIpOJugkKY=
Subject key identifier: 11:EC:70:8F:DA:FF:93:D8:C4:81:10:40:E2:C0:23:A6:2E:8B:9A:00
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial: 0194BC72E787A46D91D4FBA81A3A8B8823B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa (hash: iLVj7sxryrS44+Um3qKoIRww0o5d/litSLFCSSNu8gk=)
2: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: 0KbWun8sjzpAIvISdpCKAleqmGvorVKH8OwXzUI6YrM=)
3: BUhsNJUBNyb2HSIUiIeGUaXbRSs.roa (hash: WZxDNbWAEQbOChQ4uBirZFUp84bvXSVkcscB3oLo9vU=)
4: g0sPCB79WMlgxKBl78JsjxBs-fY.roa (hash: X+EXtP8p8Q91QAPiVwkYVGvv2ZKJC7/ZwL2Di69yJ1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e7:87:a4:6d:91:d4:fb:a8:1a:3a:8b:88:23:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=11ec708fdaff93d8c4811040e2c023a62e8b9a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:c1:a4:a5:6b:78:42:78:90:b3:d2:a6:1f:
4f:07:d9:63:b0:c6:10:50:0b:98:44:63:98:61:9d:
62:ca:cb:0d:e2:a7:26:ad:e4:d8:2f:57:eb:6b:67:
08:df:a9:47:6b:62:37:8d:b5:ad:47:5d:bc:d2:e2:
53:3e:af:b6:62:d7:49:aa:79:4a:3a:74:ae:d7:90:
8b:27:25:a5:75:b4:e6:9e:aa:72:c0:b7:93:56:a4:
54:8e:b5:9f:fe:3e:82:94:cd:9d:b7:ae:61:b3:da:
ee:2b:93:5a:e3:e8:38:85:7f:e6:5e:a2:4d:6f:64:
04:c3:ab:11:f1:4c:5c:16:d9:22:04:90:b2:48:78:
79:a6:bb:c9:dd:45:dd:93:0d:10:89:a1:81:7c:60:
4b:4d:25:1b:5e:97:4a:3d:e4:ea:01:ad:af:15:16:
9e:fe:75:66:7b:f5:5d:89:3a:ed:df:31:64:60:e0:
65:2e:77:10:6e:33:66:2b:a8:a8:5c:1d:a8:8a:4b:
ac:45:7c:a3:e7:cf:65:f8:9b:74:40:a5:50:16:aa:
68:62:13:d3:98:79:03:e2:f7:60:41:8b:c4:73:17:
1e:29:b0:81:bc:ea:e6:45:9b:35:78:eb:00:95:7a:
66:b5:09:02:b9:2b:ab:c1:23:db:e4:85:88:ba:98:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EC:70:8F:DA:FF:93:D8:C4:81:10:40:E2:C0:23:A6:2E:8B:9A:00
X509v3 Authority Key Identifier:
keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:65:7c:fc:0f:8d:a9:5b:bb:ce:fc:cd:f2:42:c8:88:94:98:
86:f9:ee:70:e8:e3:3a:ad:b5:85:99:b3:4e:3f:90:88:d4:56:
94:69:39:10:1d:25:9b:e6:ca:48:8a:0e:36:f3:95:87:cd:a8:
ec:15:27:b9:66:e6:08:8c:3e:7c:c7:bf:ab:ee:cc:d9:37:47:
a0:6c:de:a5:b0:b2:f4:91:0f:2b:b6:32:47:b3:62:48:7e:92:
42:3c:34:4f:ce:9d:97:fd:7d:89:8e:17:86:67:55:ec:31:eb:
9c:5a:72:80:ac:67:0b:d9:85:ca:6b:b6:3a:61:78:bf:27:9d:
c0:13:07:e6:7b:3a:10:9d:bf:ee:bf:66:d0:46:cd:5e:9d:24:
54:23:85:c0:7d:06:93:25:9e:32:21:fc:53:91:94:7d:e7:f2:
27:42:3f:2d:02:ed:48:1f:ef:30:a6:27:0d:fb:e9:29:bb:ca:
da:99:3f:7c:21:d1:dc:5a:01:59:ac:f7:05:82:0f:df:df:64:
4a:48:aa:34:4b:1d:32:f4:b8:ca:8f:53:5b:22:74:b9:cb:2d:
50:5d:f8:e6:7e:1a:ff:2e:a4:05:6c:bd:39:96:b3:d8:9b:35:
83:20:e6:ef:27:b4:5c:14:04:88:e7:b5:dd:19:53:09:5b:de:
a1:a2:e2:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cueHpG2R1PuoGjqLiCO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNGY3ODk0NzM0MWNlNTU4ODhiN2ViZjM2OTAxNDNiMGNi
ZmYzZDYwHhcNMjUwMTMxMTMwMDM0WhcNMjUwMjAxMTMwMDM0WjAzMTEwLwYDVQQD
EygxMWVjNzA4ZmRhZmY5M2Q4YzQ4MTEwNDBlMmMwMjNhNjJlOGI5YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjLBpKVreEJ4kLPSph9PB9ljsMYQ
UAuYRGOYYZ1iyssN4qcmreTYL1fra2cI36lHa2I3jbWtR1280uJTPq+2YtdJqnlK
OnSu15CLJyWldbTmnqpywLeTVqRUjrWf/j6ClM2dt65hs9ruK5Na4+g4hX/mXqJN
b2QEw6sR8UxcFtkiBJCySHh5prvJ3UXdkw0QiaGBfGBLTSUbXpdKPeTqAa2vFRae
/nVme/VdiTrt3zFkYOBlLncQbjNmK6ioXB2oikusRXyj589l+Jt0QKVQFqpoYhPT
mHkD4vdgQYvEcxceKbCBvOrmRZs1eOsAlXpmtQkCuSurwSPb5IWIupj2awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHscI/a/5PYxIEQQOLAI6Yui5oAMB8GA1UdIwQY
MBaAFO9PeJRzQc5ViIt+vzaQFDsMv/PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAt
OWJhYTY2Y2ExNDA0LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAtOWJhYTY2Y2ExNDA0
LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGV8/A+N
qVu7zvzN8kLIiJSYhvnucOjjOq21hZmzTj+QiNRWlGk5EB0lm+bKSIoONvOVh82o
7BUnuWbmCIw+fMe/q+7M2TdHoGzepbCy9JEPK7YyR7NiSH6SQjw0T86dl/19iY4X
hmdV7DHrnFpygKxnC9mFymu2OmF4vyedwBMH5ns6EJ2/7r9m0EbNXp0kVCOFwH0G
kyWeMiH8U5GUfefyJ0I/LQLtSB/vMKYnDfvpKbvK2pk/fCHR3FoBWaz3BYIP399k
SkiqNEsdMvS4yo9TWyJ0ucstUF345n4a/y6kBWy9OZaz2Js1gyDm7ye0XBQEiOe1
3RlTCVveoaLijA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:36 2025 by rpki-client