
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: fH9Re9G5xAxDtadYrFeP8w75es/QCueOiOUItre42LI=
Subject key identifier: 94:9B:E8:1C:79:8E:0B:AC:82:53:98:96:44:0C:65:97:69:BC:2F:F8
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 0194BC3BFA3B7E763625113E2E899C7B1F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: lhSnQaKv9M20GHeXV0JO0Vv/7neHSX2KHjHG0sYtcr0=)
2: W4XahjIUcn2mEvtXXAsHwpbRivY.roa (hash: 2OOpdjz9UpDKv+dUsZMaEoPO0IiMCjqOpoDoPFdecug=)
3: z46k-i-bjDUO4Ol48wcdFv3fJS8.roa (hash: sn1w3xRnzI7Jkm3KXN6s7I0s9xcKRoJb9fQHsE63d9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fa:3b:7e:76:36:25:11:3e:2e:89:9c:7b:1f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=949be81c798e0bac82539896440c659769bc2ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:53:29:3c:ba:3e:cf:bf:25:f9:96:01:b2:
d9:40:f9:4f:85:02:1c:cf:e0:71:3d:cf:5c:00:99:
b4:8b:a0:ca:31:0c:d4:fb:ae:02:66:7e:7b:f4:45:
f6:44:2b:45:26:85:9f:49:d9:c4:58:95:85:16:fa:
6a:b7:e8:2c:84:2f:6d:93:79:30:7a:0d:14:5e:12:
d4:a1:ba:cb:b2:ac:43:cd:45:74:f9:c4:78:d7:bb:
66:02:25:0c:be:ea:ed:76:db:d5:12:81:b6:46:81:
51:56:dd:60:f7:97:3b:5b:d4:c6:29:4c:a4:a5:74:
4e:bd:e5:a4:34:64:4d:08:8b:66:8a:8e:1c:d3:8c:
b6:6a:30:fb:34:1c:e1:33:53:44:33:1f:c5:ca:77:
f8:10:30:a1:d6:20:a0:62:dc:81:f2:e9:b4:a2:e5:
94:80:0c:bf:0a:7f:3e:21:9d:f9:50:03:d4:3a:35:
74:fd:73:50:3d:0e:25:be:78:00:57:70:67:6e:d9:
9c:73:28:0a:19:38:7f:74:67:9a:b4:aa:61:d9:92:
39:d8:a2:ab:58:30:3d:41:4c:98:26:ce:16:12:32:
24:4d:2c:9f:90:96:09:af:ea:c4:19:6b:5e:c0:52:
c3:51:45:8f:5f:7f:c9:18:8c:42:54:e2:e6:2c:8f:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:E8:1C:79:8E:0B:AC:82:53:98:96:44:0C:65:97:69:BC:2F:F8
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d9:46:4f:cb:d2:cd:4b:c7:3f:42:03:e5:ed:fc:fc:a6:62:
56:1d:a0:a0:ce:12:f0:0d:9e:b7:4b:02:6d:dc:f6:da:aa:86:
d6:1a:12:85:27:20:78:0b:29:ec:31:0f:3d:77:df:fd:5f:a7:
67:0e:a0:3d:8e:32:09:0a:b9:1a:20:53:72:87:c4:cb:1f:cc:
b0:ba:46:cf:30:11:1e:72:ca:3a:d7:61:af:d2:cc:74:e0:c5:
c3:ff:52:49:37:66:ed:6e:fa:94:d5:dd:6a:70:f0:17:2c:eb:
f6:18:3d:93:13:97:1d:07:97:ad:77:c4:0e:08:47:99:39:b3:
38:cd:f1:2a:fc:1c:7e:97:f4:50:b4:6a:b0:47:1e:dc:20:e4:
e8:c3:a6:cf:13:8a:3d:9f:bb:bc:74:a8:b3:3c:d3:5d:70:01:
a1:6c:6c:7e:88:1d:81:95:99:75:c8:fa:69:af:8b:85:70:f6:
4a:b8:9f:44:06:7f:ed:b3:dd:61:0e:ce:1f:9f:c6:bf:06:f5:
f0:69:94:8d:ec:8b:23:45:60:ee:79:2c:3b:f3:9e:80:0c:9c:
5c:35:d2:2c:77:b6:45:f2:6d:bc:87:c7:73:c3:5b:37:ba:9e:
85:03:ed:f0:29:9c:37:9d:66:f6:b1:3c:38:c4:90:2b:af:d6:
51:38:3f:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/o7fnY2JRE+Lomcex9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTg0ZmI2NTAzYTc2MDY1N2Y5MDI3MGUyNzZhM2ZjYjUw
YjhlOGYwHhcNMjUwMTMxMTIwMDM0WhcNMjUwMjAxMTIwMDM0WjAzMTEwLwYDVQQD
Eyg5NDliZTgxYzc5OGUwYmFjODI1Mzk4OTY0NDBjNjU5NzY5YmMyZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlZTKTy6Ps+/JfmWAbLZQPlPhQIc
z+BxPc9cAJm0i6DKMQzU+64CZn579EX2RCtFJoWfSdnEWJWFFvpqt+gshC9tk3kw
eg0UXhLUobrLsqxDzUV0+cR417tmAiUMvurtdtvVEoG2RoFRVt1g95c7W9TGKUyk
pXROveWkNGRNCItmio4c04y2ajD7NBzhM1NEMx/Fynf4EDCh1iCgYtyB8um0ouWU
gAy/Cn8+IZ35UAPUOjV0/XNQPQ4lvngAV3BnbtmccygKGTh/dGeatKph2ZI52KKr
WDA9QUyYJs4WEjIkTSyfkJYJr+rEGWtewFLDUUWPX3/JGIxCVOLmLI9y6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSb6Bx5jgusglOYlkQMZZdpvC/4MB8GA1UdIwQY
MBaAFBEYT7ZQOnYGV/kCcOJ2o/y1C46PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUt
MTk2ZDY2NmQyYjJiLzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUtMTk2ZDY2NmQyYjJi
LzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNlGT8vS
zUvHP0ID5e38/KZiVh2goM4S8A2et0sCbdz22qqG1hoShScgeAsp7DEPPXff/V+n
Zw6gPY4yCQq5GiBTcofEyx/MsLpGzzARHnLKOtdhr9LMdODFw/9SSTdm7W76lNXd
anDwFyzr9hg9kxOXHQeXrXfEDghHmTmzOM3xKvwcfpf0ULRqsEce3CDk6MOmzxOK
PZ+7vHSoszzTXXABoWxsfogdgZWZdcj6aa+LhXD2SrifRAZ/7bPdYQ7OH5/Gvwb1
8GmUjeyLI0Vg7nksO/OegAycXDXSLHe2RfJtvIfHc8NbN7qehQPt8CmcN51m9rE8
OMSQK6/WUTg/0w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:57:06 2025 by rpki-client