Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: Z+eOrGSaMrjcWDVe4Eb3Zs/oDYXwav+d+HDt7j29X6Y=
Subject key identifier: E5:85:38:85:36:14:AD:52:A0:4C:DE:6A:B6:AB:58:A0:54:67:93:6F
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 0194BC72EDB229679C37E82283F87173DBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 01D7
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: OQRq26Ff+pf6fv135/XfSepVElbjZW0mkC+91+ONoPM=)
2: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ed:b2:29:67:9c:37:e8:22:83:f8:71:73:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=e58538853614ad52a04cde6ab6ab58a05467936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:ca:18:eb:c8:18:44:c2:24:89:d7:e6:7b:
0e:4b:6f:69:3d:11:49:4f:a5:91:5e:22:7d:d7:12:
34:b1:7f:df:fe:1a:38:4b:7a:9d:0c:87:b9:40:73:
d4:c2:98:20:1b:2f:67:4f:c7:8c:c7:20:4f:a9:19:
24:94:3e:52:f0:b0:a6:b9:7f:da:ba:77:e8:b1:d6:
74:31:86:2c:94:70:38:35:16:7c:f4:73:64:10:72:
97:13:20:f9:b3:6d:d9:37:db:e8:1b:89:15:1f:29:
89:6f:3c:c1:64:2e:88:9c:67:c7:62:b1:07:2e:91:
aa:ed:4e:3d:72:65:a6:c7:96:a4:71:0f:db:65:51:
c7:47:0b:06:a8:98:40:21:d0:90:00:83:d2:4c:ac:
5a:41:81:ee:8c:6b:cf:ba:cb:ad:f0:f9:a6:58:dd:
09:5b:ba:ad:80:e9:0f:1d:d6:9c:10:65:9c:34:ae:
82:f9:97:08:6f:6e:e0:4d:c7:fb:63:87:1d:da:68:
40:48:4f:f8:0f:32:46:e3:c7:95:34:84:75:bd:6f:
e3:25:ce:d5:0c:f7:fa:d9:fa:51:d7:6f:b4:a1:32:
69:76:2d:a2:d1:92:d0:2a:89:db:d6:b3:57:cb:af:
6f:7e:ae:af:ed:56:39:6f:71:86:32:9b:ce:51:d6:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:85:38:85:36:14:AD:52:A0:4C:DE:6A:B6:AB:58:A0:54:67:93:6F
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:91:d9:4c:30:e4:1c:2d:f3:a6:ff:4c:cf:58:12:a2:73:00:
2a:27:4d:ad:8c:d6:09:c9:47:cc:33:f1:3f:e6:f9:e0:3a:e6:
85:41:ac:1e:ee:aa:d9:54:91:da:ec:a4:e2:01:2e:64:8d:11:
25:0a:d8:ca:62:e6:99:b8:74:8e:83:75:71:70:60:49:74:53:
cd:c4:fa:a5:ca:9e:01:46:7d:6c:cc:78:75:e9:74:3b:29:f8:
9f:dd:7d:6b:24:c0:d1:bc:1a:77:19:e0:15:db:ba:f1:e4:ea:
2c:91:e3:00:c6:15:e5:fc:02:ee:ce:61:f3:0a:ad:b6:d6:7b:
92:94:6b:70:e2:ec:1e:9f:1f:90:6d:c6:66:ab:ac:8f:c5:4e:
bb:a0:aa:2d:af:7c:27:c7:5c:c6:c1:4a:11:d4:80:ce:55:7b:
44:98:d4:72:b1:d6:11:12:3d:83:97:a1:f7:38:89:b2:1c:44:
b3:12:68:10:ca:1d:35:80:9b:54:01:d7:14:03:02:d8:7f:08:
04:eb:98:01:ae:f0:c6:0c:f5:40:04:46:d1:a7:25:d0:0b:36:
a7:26:fe:39:0f:c1:25:5b:fd:ed:af:27:27:d2:03:89:d9:9e:
16:e3:d1:86:b3:c1:f4:cd:0e:93:0a:15:17:5b:e7:9f:e6:85:
02:c7:ba:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cu2yKWecN+gig/hxc9v0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTEzMThkNGJkZDNlYzU5NDMzODZlNzAxZDdkMDJiZDY4
MzAwYWQwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
EyhlNTg1Mzg4NTM2MTRhZDUyYTA0Y2RlNmFiNmFiNThhMDU0Njc5MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HLKGOvIGETCJInX5nsOS29pPRFJ
T6WRXiJ91xI0sX/f/ho4S3qdDIe5QHPUwpggGy9nT8eMxyBPqRkklD5S8LCmuX/a
unfosdZ0MYYslHA4NRZ89HNkEHKXEyD5s23ZN9voG4kVHymJbzzBZC6InGfHYrEH
LpGq7U49cmWmx5akcQ/bZVHHRwsGqJhAIdCQAIPSTKxaQYHujGvPusut8PmmWN0J
W7qtgOkPHdacEGWcNK6C+ZcIb27gTcf7Y4cd2mhASE/4DzJG48eVNIR1vW/jJc7V
DPf62fpR12+0oTJpdi2i0ZLQKonb1rNXy69vfq6v7VY5b3GGMpvOUdbnGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWFOIU2FK1SoEzeararWKBUZ5NvMB8GA1UdIwQY
MBaAFHsRMY1L3T7FlDOG5wHX0CvWgwCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYt
ODhlYzU3OWY4OGNhLzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYtODhlYzU3OWY4OGNh
LzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5HZTDDk
HC3zpv9Mz1gSonMAKidNrYzWCclHzDPxP+b54DrmhUGsHu6q2VSR2uyk4gEuZI0R
JQrYymLmmbh0joN1cXBgSXRTzcT6pcqeAUZ9bMx4del0Oyn4n919ayTA0bwadxng
Fdu68eTqLJHjAMYV5fwC7s5h8wqtttZ7kpRrcOLsHp8fkG3GZqusj8VOu6CqLa98
J8dcxsFKEdSAzlV7RJjUcrHWERI9g5eh9ziJshxEsxJoEModNYCbVAHXFAMC2H8I
BOuYAa7wxgz1QARG0acl0As2pyb+OQ/BJVv97a8nJ9IDidmeFuPRhrPB9M0OkwoV
F1vnn+aFAse6Jw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:10 2025 by rpki-client