Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: NwNAAM0MukmkopIY4BGTBzX6JE9uPx1J78urtymrlZE=
Subject key identifier: A1:52:C5:89:00:51:FB:AA:FD:F5:33:2D:72:BF:A6:8C:2E:89:7D:37
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 0194BCA9C8BA945EBD0FDC58D254E89DDE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 0D29
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: E1PPjzey2mosqJ5w+dzLNwXD+LzUWto4uC1a3Uve4Jg=)
2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:ba:94:5e:bd:0f:dc:58:d2:54:e8:9d:de:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=a152c5890051fbaafdf5332d72bfa68c2e897d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:88:4e:f9:a3:ca:0b:b6:af:74:de:ad:9e:
20:33:d9:0a:9c:bc:6c:4b:83:44:05:8f:18:8b:c3:
7b:ea:92:81:98:19:0e:d9:7b:9c:ea:20:2e:1e:df:
94:cb:5c:e7:ed:19:e1:42:f7:34:6d:3a:71:d5:f2:
b5:1f:91:4d:88:f7:3d:e9:e1:fb:18:68:6e:26:a0:
ee:eb:af:6b:c3:bc:53:a5:ca:d6:b0:a3:3d:85:ed:
cf:39:82:2d:f4:bb:14:a0:6a:22:e0:8c:b8:95:71:
0f:38:8a:de:f0:95:bb:1f:5d:50:32:02:29:e4:7d:
10:0f:40:2a:07:28:68:9e:77:df:e5:0e:cb:52:f6:
a4:4e:5d:45:5e:a2:df:e8:2b:a5:71:97:3a:14:1a:
6e:36:cb:ea:cb:f1:19:14:a2:ac:b3:72:d4:8a:6b:
c1:88:24:ae:27:f5:2c:ec:b7:55:f4:f9:a2:e4:7d:
63:60:d2:82:e4:e3:01:bd:ce:62:68:2d:f3:24:c5:
e2:20:d6:dc:75:d9:dc:de:2b:67:e6:e7:dd:d3:2f:
cc:4d:68:b5:54:3a:ec:d4:93:52:4d:de:0e:06:0a:
89:31:ec:d7:20:68:08:ab:df:db:e3:1d:07:66:47:
4d:7a:f9:6d:cb:50:5c:b6:2f:83:60:18:d9:0d:62:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:52:C5:89:00:51:FB:AA:FD:F5:33:2D:72:BF:A6:8C:2E:89:7D:37
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:dc:d8:1b:9c:c7:e7:f0:17:0e:4e:af:5f:a3:b3:df:d7:50:
88:84:b9:a6:8f:d1:21:e8:b2:ff:44:25:4b:ea:42:71:72:12:
3e:60:45:63:dd:0b:29:62:6a:ce:8d:f3:2b:fc:15:c6:bf:d0:
cf:92:b6:e6:cb:bd:ee:74:76:21:5a:1d:07:9d:70:82:4d:ae:
9d:ed:a3:7e:c6:7a:e3:74:e5:ef:0c:63:e4:d3:a4:3f:fc:96:
73:a6:fb:7f:7a:5f:f7:97:b1:86:26:22:6b:f9:0f:de:ba:d0:
76:a4:65:15:92:5d:75:74:1a:19:f1:19:b5:ab:57:05:69:72:
b7:d7:91:6e:25:2d:75:7b:88:50:04:5a:4d:41:bf:d7:f7:59:
3f:b7:0c:8b:37:a3:46:5e:2b:f0:53:da:28:44:64:f1:d6:20:
12:b1:28:ef:f3:6a:1c:6f:d0:cf:46:18:6a:c7:83:66:b4:35:
b8:ed:08:7c:3a:97:3a:21:87:c6:d6:87:70:d5:b1:2d:57:5e:
97:98:3d:46:56:82:68:b3:d1:9b:5a:8c:68:ba:c0:1c:a6:8e:
ff:29:bf:18:32:7a:df:6d:9c:21:ca:f7:e1:93:06:0d:7f:fd:
ed:e4:eb:58:ab:ab:26:83:69:94:70:a1:5c:b4:81:e5:ee:39:
cd:d3:5d:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qci6lF69D9xY0lTond5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTVhZjRjNzI4NjkyMDk1MzliMTE5NDU5N2IwM2ZhM2E0
YTU1NGEwHhcNMjUwMTMxMTQwMDMwWhcNMjUwMjAxMTQwMDMwWjAzMTEwLwYDVQQD
EyhhMTUyYzU4OTAwNTFmYmFhZmRmNTMzMmQ3MmJmYTY4YzJlODk3ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b+ITvmjygu2r3TerZ4gM9kKnLxs
S4NEBY8Yi8N76pKBmBkO2Xuc6iAuHt+Uy1zn7RnhQvc0bTpx1fK1H5FNiPc96eH7
GGhuJqDu669rw7xTpcrWsKM9he3POYIt9LsUoGoi4Iy4lXEPOIre8JW7H11QMgIp
5H0QD0AqByhonnff5Q7LUvakTl1FXqLf6CulcZc6FBpuNsvqy/EZFKKss3LUimvB
iCSuJ/Us7LdV9Pmi5H1jYNKC5OMBvc5iaC3zJMXiINbcddnc3itn5ufd0y/MTWi1
VDrs1JNSTd4OBgqJMezXIGgIq9/b4x0HZkdNevlty1Bcti+DYBjZDWLnpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFSxYkAUfuq/fUzLXK/powuiX03MB8GA1UdIwQY
MBaAFBHlr0xyhpIJU5sRlFl7A/o6SlVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEt
ZjQyOGI5OTU0YWIyLzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEtZjQyOGI5OTU0YWIy
LzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltzYG5zH
5/AXDk6vX6Oz39dQiIS5po/RIeiy/0QlS+pCcXISPmBFY90LKWJqzo3zK/wVxr/Q
z5K25su97nR2IVodB51wgk2une2jfsZ643Tl7wxj5NOkP/yWc6b7f3pf95exhiYi
a/kP3rrQdqRlFZJddXQaGfEZtatXBWlyt9eRbiUtdXuIUARaTUG/1/dZP7cMizej
Rl4r8FPaKERk8dYgErEo7/NqHG/Qz0YYaseDZrQ1uO0IfDqXOiGHxtaHcNWxLVde
l5g9RlaCaLPRm1qMaLrAHKaO/ym/GDJ6322cIcr34ZMGDX/97eTrWKurJoNplHCh
XLSB5e45zdNdVw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:29 2025 by rpki-client