Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File: eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier: bkw9RWClAdc49keQDklfdfV65FUA1a3KVstscs93vMM=
Subject key identifier: 5B:83:5D:3D:CC:B0:59:83:EA:F4:59:EA:2E:06:AE:C2:C9:CA:26:97
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer: /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial: 0194BD1779EF6CC7D8B72F3AB0547AFA69D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number: 0874
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: 0U0iwiffVettO-vogpqMch7csq4.roa (hash: uPiED/FamX8UNur9ecAQaLp7MXQZVhIJRf73CMOjMOY=)
2: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: k/enKW4qk3dYUasf8wYWAaLvcQ8cVJytRJ5jJpe82+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:79:ef:6c:c7:d8:b7:2f:3a:b0:54:7a:fa:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=5b835d3dccb05983eaf459ea2e06aec2c9ca2697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:42:f7:24:25:c6:4d:27:10:e3:4c:5e:62:
79:ae:09:10:49:04:2f:fa:03:20:e9:a6:15:3a:05:
59:65:5e:d0:f7:f5:26:84:4a:e0:dc:c3:68:b3:3d:
54:5f:65:7b:00:40:4d:fa:a0:82:ad:7c:a6:92:c3:
0c:78:f5:1a:e5:bf:13:4e:14:17:7c:8a:b8:33:d8:
f7:2a:b3:9e:9a:fd:ae:1c:e5:e8:38:26:51:2a:df:
a2:bf:11:7f:30:b1:39:1a:c7:60:6c:c2:1f:5a:90:
96:e5:9a:82:bd:d6:0f:6d:51:1f:3b:a2:6a:5a:16:
a6:ba:da:33:8d:be:ba:90:96:f6:38:3a:bf:6d:d7:
64:40:31:1d:af:b9:82:2d:f7:51:bb:df:50:a4:ad:
a8:44:81:a9:73:86:9d:1b:86:66:c9:00:cb:71:70:
48:27:db:80:cb:08:24:08:95:46:3b:c2:c6:29:5f:
08:43:7a:e2:8d:4c:6a:f0:11:61:f1:b5:20:79:5d:
d7:ed:ec:22:67:f7:03:88:bf:eb:af:9e:83:75:cc:
45:12:73:2d:41:b2:d0:9c:d2:aa:a8:c1:80:d7:c0:
eb:dd:b5:3f:9f:ca:83:97:42:2c:ac:b3:af:e0:45:
c0:9c:8c:65:ea:01:bf:72:46:de:e3:fb:aa:a0:f9:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:5D:3D:CC:B0:59:83:EA:F4:59:EA:2E:06:AE:C2:C9:CA:26:97
X509v3 Authority Key Identifier:
keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:53:7c:d8:f4:fd:8c:ed:2a:73:40:8e:8d:a6:f6:78:e5:63:
6f:a2:74:7e:c5:f8:03:85:70:e9:81:33:ae:35:a8:f5:f2:5a:
60:bb:60:ee:74:cf:26:12:7c:55:2a:85:d0:be:30:61:a4:ed:
60:10:ef:24:b8:f8:b3:7c:49:2d:b4:d7:91:b0:96:b0:c3:f3:
27:d0:37:e3:37:70:9f:12:7b:f7:ce:63:9c:de:47:c0:72:76:
35:47:6c:4d:52:b7:61:3f:3b:a0:8b:43:33:af:a0:3c:0e:52:
55:ae:07:02:67:98:1e:46:b8:05:27:8f:a9:0a:28:45:13:03:
55:58:9a:7d:fb:83:11:eb:d0:0e:ad:1f:61:ba:51:67:72:3a:
5c:e5:20:19:0e:70:a6:3f:93:9f:2a:ab:72:ed:48:c9:4c:49:
1b:20:b9:d5:f4:94:b6:44:1a:6a:1a:7f:11:e4:1e:99:68:af:
5d:59:9e:75:5f:49:ba:e6:9c:d4:c5:d1:5c:72:3a:f2:1f:de:
ae:6a:61:d2:9f:00:7b:6b:5a:3f:55:14:2c:2a:f0:ba:39:f4:
ce:f1:de:79:64:51:a1:01:7e:93:9e:34:72:db:b8:e1:84:1d:
56:e4:49:45:88:bd:fe:6e:17:82:9c:81:38:f9:7e:18:55:0d:
bb:02:8a:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3nvbMfYty86sFR6+mnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTM2NjNjNjRhNWRhOGRjYWY1YjNhY2ZkM2VlYWY4MzVi
NDFhNTMwHhcNMjUwMTMxMTYwMDE5WhcNMjUwMjAxMTYwMDE5WjAzMTEwLwYDVQQD
Eyg1YjgzNWQzZGNjYjA1OTgzZWFmNDU5ZWEyZTA2YWVjMmM5Y2EyNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuslC9yQlxk0nEONMXmJ5rgkQSQQv
+gMg6aYVOgVZZV7Q9/UmhErg3MNosz1UX2V7AEBN+qCCrXymksMMePUa5b8TThQX
fIq4M9j3KrOemv2uHOXoOCZRKt+ivxF/MLE5GsdgbMIfWpCW5ZqCvdYPbVEfO6Jq
Whamutozjb66kJb2ODq/bddkQDEdr7mCLfdRu99QpK2oRIGpc4adG4ZmyQDLcXBI
J9uAywgkCJVGO8LGKV8IQ3rijUxq8BFh8bUgeV3X7ewiZ/cDiL/rr56DdcxFEnMt
QbLQnNKqqMGA18Dr3bU/n8qDl0IsrLOv4EXAnIxl6gG/ckbe4/uqoPmPCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuDXT3MsFmD6vRZ6i4GrsLJyiaXMB8GA1UdIwQY
MBaAFHgTZjxkpdqNyvWzrP0+6vg1tBpTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJObVBHU2wybzNLOWJPc19UN3EtRFcwR2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NDUxZWYtMzJkMi00ZjUxLWIzYmQt
OWQxY2RhMjNlYzRmLzEvZUJObVBHU2wybzNLOWJPc19UN3EtRFcwR2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NDUxZWYtMzJkMi00ZjUxLWIzYmQtOWQxY2RhMjNlYzRm
LzEvZUJObVBHU2wybzNLOWJPc19UN3EtRFcwR2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFN82PT9
jO0qc0COjab2eOVjb6J0fsX4A4Vw6YEzrjWo9fJaYLtg7nTPJhJ8VSqF0L4wYaTt
YBDvJLj4s3xJLbTXkbCWsMPzJ9A34zdwnxJ7985jnN5HwHJ2NUdsTVK3YT87oItD
M6+gPA5SVa4HAmeYHka4BSePqQooRRMDVViaffuDEevQDq0fYbpRZ3I6XOUgGQ5w
pj+Tnyqrcu1IyUxJGyC51fSUtkQaahp/EeQemWivXVmedV9Juuac1MXRXHI68h/e
rmph0p8Ae2taP1UULCrwujn0zvHeeWRRoQF+k540ctu44YQdVuRJRYi9/m4XgpyB
OPl+GFUNuwKKeA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:20 2025 by rpki-client