Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier: W6HeNYe6cfI01UgqVBqQ9oajVW+9Fms5q/fKJxjUDjQ=
Subject key identifier: B3:8D:D2:DB:C1:0D:FC:FD:A4:1E:2F:5E:6C:95:C9:11:0D:FD:D7:AE
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 0194BD4E9A629920862C88559190FF9D0299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: 4fwnNaqtfv7CCwaAigXylSZ/R2gfJmz3c/N8rvZc0lQ=)
2: UKIFbdEhJSvRJBhQ9UZ29Ixwxd8.roa (hash: djsrsXvlKMi85HEyAQmyat+QxO41fFJrWFnZ+KpDs6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:62:99:20:86:2c:88:55:91:90:ff:9d:02:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=b38dd2dbc10dfcfda41e2f5e6c95c9110dfdd7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:8a:dd:c2:48:71:44:3e:9b:1c:14:e4:28:
26:32:b1:78:72:13:70:1c:61:f2:46:41:7f:92:c9:
36:3b:e9:47:83:08:cb:57:46:56:54:00:9a:c6:4d:
af:94:66:25:0d:fa:21:b4:cd:f7:7f:6b:e6:56:89:
06:40:9b:5f:9b:b2:af:88:1e:e8:89:d3:70:c3:d2:
73:1a:7b:2f:d6:9c:f9:5c:53:e3:8e:e6:e0:dc:a1:
49:ed:4d:4e:df:4a:4d:8f:d5:8e:42:2f:3a:bc:7a:
d8:1c:da:61:16:b6:38:1b:51:d6:c6:c2:9b:37:67:
a2:75:e7:f2:ab:bb:31:79:e0:3e:be:7d:ba:a8:aa:
0a:a3:fb:7c:37:0f:3c:c3:f5:65:15:c8:88:0a:ca:
a4:bc:07:47:93:c2:29:4f:27:07:fd:f2:67:5a:4a:
3f:5b:34:6b:bb:00:ad:25:ea:d6:be:c9:e5:15:d0:
bf:a4:27:5f:3c:0d:35:f3:3b:3b:63:46:a1:c3:44:
b2:57:a5:aa:d2:6a:ee:bf:c4:b6:f3:be:0c:c8:bc:
72:dd:05:5b:c7:e2:1a:1d:21:3b:11:f0:82:c2:cd:
14:de:06:08:4d:00:ad:77:c0:8d:3c:1e:65:df:5f:
35:f4:fb:a2:48:83:9a:50:3d:51:63:7c:5a:28:ee:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8D:D2:DB:C1:0D:FC:FD:A4:1E:2F:5E:6C:95:C9:11:0D:FD:D7:AE
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:e6:67:11:38:45:e1:9c:a5:79:dc:86:d0:c1:d4:12:7a:
78:20:69:a7:96:ae:79:90:21:c3:fe:9b:31:08:d4:46:f7:d1:
f0:22:a8:ab:65:87:dd:f9:4e:f3:75:62:5e:d6:0a:77:5e:b5:
33:28:83:5f:76:43:01:2d:22:5d:a1:1e:5e:7b:0b:26:19:dc:
06:15:ce:b5:a6:bf:16:40:dd:e9:98:b8:e5:75:11:c2:d2:68:
41:dd:c2:64:d5:2f:8e:8d:15:de:a2:30:d4:02:e4:df:03:0c:
ba:ac:f3:97:e8:ef:9e:7f:04:0e:fd:8b:a6:31:e8:82:0e:19:
a8:9a:e6:84:a3:07:d4:89:63:50:7b:7b:fe:6f:9a:e9:ae:28:
c6:a6:9d:e3:0f:e5:a8:c8:d9:3e:26:2f:c2:95:44:7a:03:1c:
86:38:e5:54:3c:f4:ed:f5:9d:c7:41:a0:24:80:7c:9b:31:b7:
75:84:22:a0:e8:99:cc:63:5c:25:06:2b:9c:c0:c0:2b:d2:c6:
2d:c1:7d:87:be:bc:03:a7:00:42:36:b6:08:b5:5c:6b:0c:23:
89:41:81:84:35:00:7c:a4:58:80:7a:b5:27:e5:ee:77:13:0a:
bd:db:9a:08:48:c2:e3:7e:75:dc:b5:fe:c7:b0:47:da:30:f9:
e2:6c:86:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TppimSCGLIhVkZD/nQKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzMwNTQwNGU4MGI1YTRkNzBkMjFkYWI4NmZjNWI2Yjgw
MWE4YjgwHhcNMjUwMTMxMTcwMDMyWhcNMjUwMjAxMTcwMDMyWjAzMTEwLwYDVQQD
EyhiMzhkZDJkYmMxMGRmY2ZkYTQxZTJmNWU2Yzk1YzkxMTBkZmRkN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EeK3cJIcUQ+mxwU5CgmMrF4chNw
HGHyRkF/ksk2O+lHgwjLV0ZWVACaxk2vlGYlDfohtM33f2vmVokGQJtfm7KviB7o
idNww9JzGnsv1pz5XFPjjubg3KFJ7U1O30pNj9WOQi86vHrYHNphFrY4G1HWxsKb
N2eidefyq7sxeeA+vn26qKoKo/t8Nw88w/VlFciICsqkvAdHk8IpTycH/fJnWko/
WzRruwCtJerWvsnlFdC/pCdfPA018zs7Y0ahw0SyV6Wq0mruv8S2874MyLxy3QVb
x+IaHSE7EfCCws0U3gYITQCtd8CNPB5l31819PuiSIOaUD1RY3xaKO62qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLON0tvBDfz9pB4vXmyVyREN/deuMB8GA1UdIwQY
MBaAFBLDBUBOgLWk1w0h2rhvxba4Aai4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEt
Y2U5MjNkMTk1MDhmLzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEtY2U5MjNkMTk1MDhm
LzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYPmZxE4
ReGcpXnchtDB1BJ6eCBpp5aueZAhw/6bMQjURvfR8CKoq2WH3flO83ViXtYKd161
MyiDX3ZDAS0iXaEeXnsLJhncBhXOtaa/FkDd6Zi45XURwtJoQd3CZNUvjo0V3qIw
1ALk3wMMuqzzl+jvnn8EDv2LpjHogg4ZqJrmhKMH1IljUHt7/m+a6a4oxqad4w/l
qMjZPiYvwpVEegMchjjlVDz07fWdx0GgJIB8mzG3dYQioOiZzGNcJQYrnMDAK9LG
LcF9h768A6cAQja2CLVcawwjiUGBhDUAfKRYgHq1J+XudxMKvduaCEjC43513LX+
x7BH2jD54myGdw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:52 2025 by rpki-client