Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier: EAluuzKVQldttYx/LBFZgk6B4AA8RsqVBMwQ0cinRzg=
Subject key identifier: 2D:60:F6:08:F3:68:3D:2A:80:7B:9D:06:47:9C:B1:34:52:29:56:CC
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 0194BC3C81F4D9FC91477B6E8DBED08D6FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number: 0858
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: xD74ZhN8oXBRD89HyF6e84jQFTtEmRogjfAjZTkGeBA=)
2: ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (hash: uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:81:f4:d9:fc:91:47:7b:6e:8d:be:d0:8d:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=2d60f608f3683d2a807b9d06479cb134522956cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:45:f7:43:ec:91:0b:d4:af:0b:fa:cd:6e:
06:4f:1e:ba:46:d4:25:fe:28:2e:9a:24:ca:2e:8c:
2d:1b:a4:72:a6:64:11:e7:87:78:15:ec:2d:f2:69:
d5:52:f7:b1:eb:a4:14:14:56:dd:cc:79:39:4c:83:
1f:f2:16:42:7a:e3:fc:d9:c0:19:02:f4:4a:54:93:
07:60:ed:e2:6b:50:25:30:a0:9c:52:2f:15:d0:ac:
48:ea:75:aa:98:d2:1b:57:2c:62:ca:aa:89:dc:bf:
a2:e8:3a:f4:53:99:76:43:2e:4d:31:a0:0b:34:8d:
75:6b:2c:17:24:87:aa:02:cf:18:1b:d0:93:59:e1:
f7:2b:b5:22:7e:1e:64:0d:c6:75:4e:a7:fb:b2:63:
63:d7:80:7b:24:07:bf:90:49:25:84:26:97:f6:d9:
0c:88:9d:37:43:f3:d4:3f:bf:e1:e0:9c:1d:92:39:
49:6e:0a:99:e7:3c:fd:a2:94:8c:91:11:07:d7:25:
a8:ea:9a:94:ab:ce:d1:79:70:2e:ce:a2:52:b5:af:
a4:f1:77:c2:09:f1:b6:1a:d5:4c:27:c2:3c:a6:39:
76:a4:e6:22:c3:2a:5f:48:ce:37:76:e2:88:bb:65:
5c:c9:66:98:02:27:32:04:cb:c2:71:19:c5:8d:35:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:60:F6:08:F3:68:3D:2A:80:7B:9D:06:47:9C:B1:34:52:29:56:CC
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8a:65:f4:d0:e7:19:ac:a3:5e:17:79:72:d3:9c:c6:11:60:
2f:0a:cf:be:54:a6:44:23:56:1b:04:ed:26:42:b7:07:59:88:
29:aa:1b:0b:24:97:4b:c6:85:ee:8a:6a:9a:dc:4e:0b:2a:1b:
a7:67:04:5e:60:cd:be:4f:a5:64:91:1a:97:07:b9:d5:ac:7e:
3b:e4:d4:1e:8f:79:28:18:b8:d0:94:e0:9c:9c:95:93:da:43:
1c:c8:8e:e6:4f:09:10:60:13:f3:03:d4:cc:b0:54:1e:81:ce:
cb:97:ac:12:84:04:cf:2d:e1:35:16:9d:b0:c1:72:52:74:82:
21:d2:e8:81:ee:26:01:0a:63:85:37:25:be:33:39:7e:58:68:
35:7d:58:4c:b6:14:88:cf:9b:50:99:8f:73:39:a6:11:3e:4b:
56:3b:79:a0:31:28:f8:1c:4c:4b:4f:7f:6c:75:6b:3e:cf:e8:
4d:7a:10:14:d5:e9:77:29:dd:fa:e0:f4:ce:dc:9e:ab:51:ee:
57:17:22:12:0c:79:50:25:2e:80:c7:4f:36:18:96:ec:a7:22:
d2:bf:2c:28:a0:f5:1a:5f:5c:a3:80:0b:8f:72:9f:9f:b3:30:
b4:02:fa:76:d0:35:fb:4d:90:b9:1a:08:86:ae:a3:f0:5a:07:
d9:6a:be:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIH02fyRR3tujb7QjW/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNjdhODQwZTQxYWM2NmY4ZjM1OWNjYmQ2NTM1NGM5MTcw
NDJiYmYwHhcNMjUwMTMxMTIwMTA5WhcNMjUwMjAxMTIwMTA5WjAzMTEwLwYDVQQD
EygyZDYwZjYwOGYzNjgzZDJhODA3YjlkMDY0NzljYjEzNDUyMjk1NmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhxF90PskQvUrwv6zW4GTx66RtQl
/igumiTKLowtG6RypmQR54d4Fewt8mnVUvex66QUFFbdzHk5TIMf8hZCeuP82cAZ
AvRKVJMHYO3ia1AlMKCcUi8V0KxI6nWqmNIbVyxiyqqJ3L+i6Dr0U5l2Qy5NMaAL
NI11aywXJIeqAs8YG9CTWeH3K7Uifh5kDcZ1Tqf7smNj14B7JAe/kEklhCaX9tkM
iJ03Q/PUP7/h4JwdkjlJbgqZ5zz9opSMkREH1yWo6pqUq87ReXAuzqJSta+k8XfC
CfG2GtVMJ8I8pjl2pOYiwypfSM43duKIu2VcyWaYAicyBMvCcRnFjTVylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1g9gjzaD0qgHudBkecsTRSKVbMMB8GA1UdIwQY
MBaAFOtnqEDkGsZvjzWcy9ZTVMkXBCu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMt
MzRmY2M0MTg3MTQ0LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMtMzRmY2M0MTg3MTQ0
LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIpl9NDn
GayjXhd5ctOcxhFgLwrPvlSmRCNWGwTtJkK3B1mIKaobCySXS8aF7opqmtxOCyob
p2cEXmDNvk+lZJEalwe51ax+O+TUHo95KBi40JTgnJyVk9pDHMiO5k8JEGAT8wPU
zLBUHoHOy5esEoQEzy3hNRadsMFyUnSCIdLoge4mAQpjhTclvjM5flhoNX1YTLYU
iM+bUJmPczmmET5LVjt5oDEo+BxMS09/bHVrPs/oTXoQFNXpdynd+uD0ztyeq1Hu
VxciEgx5UCUugMdPNhiW7Kci0r8sKKD1Gl9co4ALj3Kfn7MwtAL6dtA1+02QuRoI
hq6j8FoH2Wq+3w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:50:24 2025 by rpki-client