Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
File: Eo8JYL8vv3DExJrhAd_y7MOYde0.mft (raw, json)
Hash identifier: oAKB165TNSg03O/UYQr4Iw7nuDbr8lX0FV9pfb3Z6is=
Subject key identifier: E4:0C:C5:9C:D2:1E:7B:2A:51:71:05:F1:EA:E1:D3:5D:9B:9C:9A:FB
Authority key identifier: 12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED
Certificate issuer: /CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
Certificate serial: 0194BCA9C888621E24C91A4C29283C85CBA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: Eo8JYL8vv3DExJrhAd_y7MOYde0.crl (hash: tYkaoW+Q/3N7QABqFTFMmcHwczZMw2vKRDELpQLbt/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:88:62:1e:24:c9:1a:4c:29:28:3c:85:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=e40cc59cd21e7b2a517105f1eae1d35d9b9c9afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:ba:2c:a8:80:96:bc:5a:c3:30:a3:bc:79:
73:42:99:66:d2:c6:1f:ba:65:c5:ca:e4:39:0d:53:
88:49:e3:c5:de:75:63:81:32:73:59:f0:ae:61:19:
18:f1:09:ab:f8:ec:97:d8:72:b6:37:8d:ca:7c:97:
d9:a7:7a:66:58:f6:4f:62:36:f6:24:d0:38:2a:9f:
bc:73:6e:e1:3e:45:67:b9:f4:8e:76:10:12:e4:73:
22:51:f3:9b:f8:34:0c:88:27:15:be:b9:d2:73:d3:
c6:c8:d8:91:17:f4:3f:12:9e:87:f3:d1:4c:e9:0d:
7e:13:8b:fb:f6:ea:09:de:34:38:20:46:82:1a:39:
48:62:54:45:69:e3:42:c8:70:5f:20:b0:ad:36:f3:
ee:57:6a:ce:a8:85:76:5e:30:f9:5e:62:4e:fe:31:
c3:9a:55:93:f8:dd:a1:de:74:20:03:bf:e1:4c:bd:
af:9d:3c:32:28:f5:f0:4d:12:c1:a0:2a:43:b1:1e:
7f:c0:95:76:10:f8:1f:ff:06:c2:33:38:fa:8f:c0:
3e:23:2f:81:00:ce:1d:43:9b:54:ea:67:c5:c1:8e:
58:c1:62:73:f3:67:04:8c:ef:e1:6e:0f:3c:05:2a:
90:bd:8e:c0:c7:0d:82:a7:a6:78:c5:90:69:33:48:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0C:C5:9C:D2:1E:7B:2A:51:71:05:F1:EA:E1:D3:5D:9B:9C:9A:FB
X509v3 Authority Key Identifier:
keyid:12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:01:86:54:0e:fd:af:a9:32:75:73:90:e2:59:45:7f:a4:
7f:71:6c:4d:fd:9d:81:4a:92:b3:ac:57:33:3d:ce:64:b1:f1:
e3:17:46:f2:2f:60:c7:66:f2:71:f6:7b:c5:e4:bb:5e:d1:0c:
68:c2:3c:10:c2:99:2a:f7:5c:97:b8:f3:5d:21:55:7c:7e:e4:
4c:8b:78:ff:40:a0:df:29:b9:89:8c:67:1e:63:97:d8:08:49:
a6:21:77:0b:cd:bf:59:33:27:2c:8a:43:6e:39:7d:1c:6a:ae:
b8:d0:33:75:6f:ff:07:c5:4e:79:28:eb:fd:c0:f3:05:c4:73:
dd:d7:12:f2:1b:c4:ab:07:60:df:03:10:5b:04:51:23:96:8f:
11:fe:4a:0b:a6:88:9e:28:4b:13:f3:17:fe:a9:61:b4:4f:8e:
1c:0b:82:8d:00:32:a7:cf:a6:32:28:f4:7e:24:59:a2:17:89:
78:9b:dc:ac:fc:75:e3:82:24:0e:24:65:77:dd:1d:82:89:5a:
fc:bc:25:86:33:12:2f:a4:78:48:01:66:57:5c:f6:ee:79:80:
68:d3:bc:f0:a9:21:6b:8c:75:4e:8e:16:1b:8b:50:52:a5:2c:
16:9a:6d:f6:db:9c:e0:97:36:34:98:91:52:0c:73:54:f8:18:
09:15:16:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qciIYh4kyRpMKSg8hcunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGYwOTYwYmYyZmJmNzBjNGM0OWFlMTAxZGZmMmVjYzM5
ODc1ZWQwHhcNMjUwMTMxMTQwMDMwWhcNMjUwMjAxMTQwMDMwWjAzMTEwLwYDVQQD
EyhlNDBjYzU5Y2QyMWU3YjJhNTE3MTA1ZjFlYWUxZDM1ZDliOWM5YWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRO6LKiAlrxawzCjvHlzQplm0sYf
umXFyuQ5DVOISePF3nVjgTJzWfCuYRkY8Qmr+OyX2HK2N43KfJfZp3pmWPZPYjb2
JNA4Kp+8c27hPkVnufSOdhAS5HMiUfOb+DQMiCcVvrnSc9PGyNiRF/Q/Ep6H89FM
6Q1+E4v79uoJ3jQ4IEaCGjlIYlRFaeNCyHBfILCtNvPuV2rOqIV2XjD5XmJO/jHD
mlWT+N2h3nQgA7/hTL2vnTwyKPXwTRLBoCpDsR5/wJV2EPgf/wbCMzj6j8A+Iy+B
AM4dQ5tU6mfFwY5YwWJz82cEjO/hbg88BSqQvY7Axw2Cp6Z4xZBpM0gKJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQMxZzSHnsqUXEF8erh012bnJr7MB8GA1UdIwQY
MBaAFBKPCWC/L79wxMSa4QHf8uzDmHXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW84SllMOHZ2M0RFeEpyaEFkX3k3TU9ZZGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wMDg2ODEtZGY3OS00NzdiLTkyMzYt
NDUzMDlhNWUyNzY4LzEvRW84SllMOHZ2M0RFeEpyaEFkX3k3TU9ZZGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wMDg2ODEtZGY3OS00NzdiLTkyMzYtNDUzMDlhNWUyNzY4
LzEvRW84SllMOHZ2M0RFeEpyaEFkX3k3TU9ZZGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZoBhlQO
/a+pMnVzkOJZRX+kf3FsTf2dgUqSs6xXMz3OZLHx4xdG8i9gx2bycfZ7xeS7XtEM
aMI8EMKZKvdcl7jzXSFVfH7kTIt4/0Cg3ym5iYxnHmOX2AhJpiF3C82/WTMnLIpD
bjl9HGquuNAzdW//B8VOeSjr/cDzBcRz3dcS8hvEqwdg3wMQWwRRI5aPEf5KC6aI
nihLE/MX/qlhtE+OHAuCjQAyp8+mMij0fiRZoheJeJvcrPx144IkDiRld90dgola
/LwlhjMSL6R4SAFmV1z27nmAaNO88Kkha4x1To4WG4tQUqUsFppt9tuc4Jc2NJiR
UgxzVPgYCRUWFw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:22 2025 by rpki-client