Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: l7Cx+115rhh7z1p6Mu65nenu4rSpxOMIfWNLhJyWst4=
Subject key identifier: 9F:A9:AE:B0:49:D1:6C:A7:97:04:74:CF:AC:A9:9C:88:8C:64:CA:FE
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 0194BD4EB41DD10AB679BC3D83237CDC92A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: RXMc0q2etV6gMDo5hYysjupIRDCcBIlEs0sko7TuKro=)
2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b4:1d:d1:0a:b6:79:bc:3d:83:23:7c:dc:92:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=9fa9aeb049d16ca7970474cfaca99c888c64cafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c0:06:5b:4a:d4:67:4c:4d:dc:62:62:ab:37:
15:17:b9:97:7e:b3:ea:a6:8a:6f:f0:40:a1:8a:a7:
23:dd:31:5f:b0:ba:be:83:64:dc:d9:db:19:61:d0:
d0:96:a0:35:d6:65:a3:e8:b2:26:ef:3d:9f:f2:1c:
0f:e8:ae:a5:4b:c9:e9:08:c4:82:a5:bb:94:02:e0:
a4:81:66:b1:06:a8:92:63:05:2a:1b:9f:e1:61:d9:
08:14:82:f6:61:ac:ce:df:a3:0a:01:39:3b:18:f0:
57:65:00:f4:54:f3:07:c4:17:92:dd:c5:29:74:1c:
cc:ff:2c:73:c2:fe:f7:44:8e:d1:b1:cb:58:8c:0b:
c7:9f:c7:c2:29:a5:e5:af:45:47:08:87:bd:9a:bf:
68:f8:bd:c2:9f:15:64:5c:a5:1d:60:b7:be:dc:00:
4b:5d:1b:e2:b1:53:65:b4:14:7c:27:a1:cf:d2:3f:
35:b5:46:d6:dc:01:97:d2:cd:37:71:b9:01:4d:fc:
05:40:53:f4:20:0f:b5:22:1e:ef:e9:d3:48:a9:a0:
46:4d:cf:c3:4c:7b:f5:3d:ef:45:ac:a2:31:a9:b5:
83:84:b5:0e:2a:df:cd:52:44:a4:f7:1d:d0:f8:7f:
9d:2f:0b:ad:41:8a:48:7e:51:fa:39:44:54:fb:6f:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A9:AE:B0:49:D1:6C:A7:97:04:74:CF:AC:A9:9C:88:8C:64:CA:FE
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:31:6a:d3:71:d1:f7:4f:fc:fa:6c:b3:94:ed:ec:1e:b2:13:
21:a0:ba:2a:3a:84:05:9d:9b:61:9e:8d:3d:a0:13:b3:84:e0:
20:c8:30:d3:e4:40:97:82:d9:a3:3b:4f:c3:d1:b8:73:3d:30:
75:6c:23:c9:a0:b9:22:96:1d:23:be:de:28:6a:c4:f1:4e:40:
8b:5f:1a:85:0e:67:a6:d7:fb:d3:12:66:24:7b:4e:d0:fe:6b:
1b:46:b4:2f:73:8d:82:5c:87:36:9c:42:94:37:1a:0b:32:88:
76:f6:ec:13:31:be:68:2c:90:80:08:38:3f:fa:e2:7a:01:41:
d6:b0:9a:05:4f:b8:19:85:44:60:b4:ad:37:1d:29:e3:17:60:
4d:42:e2:9b:32:1b:80:ff:79:b1:9a:7b:b4:68:e2:9f:09:ce:
d3:73:0e:1c:e9:65:7b:90:d4:d8:52:17:71:2b:77:31:93:7b:
fb:4e:c0:0b:f1:3b:9b:ec:a2:7b:b5:3b:cb:a6:fb:2d:9b:82:
09:62:ab:ab:23:4c:17:8a:db:49:4b:cc:9a:fa:ff:90:2d:ad:
42:b8:d9:d7:d6:c2:e8:79:03:90:73:d9:3f:af:b1:df:f0:7f:
a4:a0:8f:44:f8:29:fd:af:cd:94:39:c7:47:06:f1:04:db:fe:
a6:cc:02:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrQd0Qq2ebw9gyN83JKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjMyMGJlODk3MjY4MzFmM2ZkOTAwNzQwZjFmOTA2Zjli
MTljNmEwHhcNMjUwMTMxMTcwMDM5WhcNMjUwMjAxMTcwMDM5WjAzMTEwLwYDVQQD
Eyg5ZmE5YWViMDQ5ZDE2Y2E3OTcwNDc0Y2ZhY2E5OWM4ODhjNjRjYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MAGW0rUZ0xN3GJiqzcVF7mXfrPq
popv8EChiqcj3TFfsLq+g2Tc2dsZYdDQlqA11mWj6LIm7z2f8hwP6K6lS8npCMSC
pbuUAuCkgWaxBqiSYwUqG5/hYdkIFIL2YazO36MKATk7GPBXZQD0VPMHxBeS3cUp
dBzM/yxzwv73RI7RsctYjAvHn8fCKaXlr0VHCIe9mr9o+L3CnxVkXKUdYLe+3ABL
XRvisVNltBR8J6HP0j81tUbW3AGX0s03cbkBTfwFQFP0IA+1Ih7v6dNIqaBGTc/D
THv1Pe9FrKIxqbWDhLUOKt/NUkSk9x3Q+H+dLwutQYpIflH6OURU+29i+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+prrBJ0WynlwR0z6ypnIiMZMr+MB8GA1UdIwQY
MBaAFO6zIL6Jcmgx8/2QB0Dx+Qb5sZxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kOTBiZTgtZjYwNS00ZmM4LThmMDkt
MDIxMDQwYWEzYzhhLzEvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9kOTBiZTgtZjYwNS00ZmM4LThmMDktMDIxMDQwYWEzYzhh
LzEvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjFq03HR
90/8+myzlO3sHrITIaC6KjqEBZ2bYZ6NPaATs4TgIMgw0+RAl4LZoztPw9G4cz0w
dWwjyaC5IpYdI77eKGrE8U5Ai18ahQ5nptf70xJmJHtO0P5rG0a0L3ONglyHNpxC
lDcaCzKIdvbsEzG+aCyQgAg4P/riegFB1rCaBU+4GYVEYLStNx0p4xdgTULimzIb
gP95sZp7tGjinwnO03MOHOlle5DU2FIXcSt3MZN7+07AC/E7m+yie7U7y6b7LZuC
CWKrqyNMF4rbSUvMmvr/kC2tQrjZ19bC6HkDkHPZP6+x3/B/pKCPRPgp/a/NlDnH
RwbxBNv+pswCEg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:23 2025 by rpki-client