Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
File: ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json)
Hash identifier: y9JN3uAb21wLQtfRMVmHHjeH48e/Q5xgkNMcQLMrw7g=
Subject key identifier: EE:C1:7E:EE:C2:B7:A9:60:1B:71:19:88:4E:01:44:32:33:D9:58:26
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial: 0194BD4E3E95FB26DBFC715ACD7C90C445FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
Manifest number: 041F
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 0WB7Bx7_enfl066TmQSfosTy_eE.roa (hash: 3RwaEA2cdgjXvhrk9+eNZlduveecPdwtMIhFIo5EmUE=)
2: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: IRUTHEeClYOuO0C3tnMVLmvzKoWY+zHylTdhCZwGC6M=)
3: fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa (hash: dQx3XShBA2ggohUWFd8E2u2bLxwMwVqrXUUReX+nyv0=)
4: oJELLABa0xvOzeDJ8-0ROcoGDzU.roa (hash: eMpca3L46CdM/yY9Tb5GPWOeeCVHM7SNfiUzaVfbfTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3e:95:fb:26:db:fc:71:5a:cd:7c:90:c4:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=eec17eeec2b7a9601b7119884e01443233d95826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:d8:23:3b:f7:fd:10:24:af:79:56:dd:17:
4d:4c:10:71:4d:b4:ca:11:59:23:16:c1:2a:3c:ae:
ec:be:5a:4a:19:77:95:1d:d6:85:aa:8c:32:cf:e9:
55:26:f3:a6:28:9c:0f:ef:2c:2b:87:bd:f0:57:2d:
de:c8:90:87:a4:66:f2:f2:27:db:34:a2:6c:d4:a4:
09:d3:f0:2b:c0:f0:7a:7d:77:e3:30:fd:ca:52:8e:
a3:d5:81:f1:3a:e7:f8:af:23:7b:c3:0a:8d:27:67:
94:f7:c4:52:fb:51:22:81:c0:22:39:75:b9:00:51:
75:84:66:a3:7c:65:79:66:b4:b1:33:34:1f:da:f1:
57:44:e5:86:de:3a:3a:23:25:0f:d7:eb:e4:90:0b:
5d:7d:da:c9:79:b1:e4:4a:d2:e8:52:44:c5:c3:d3:
a9:15:fc:5f:c7:56:2a:b8:75:54:75:0e:d6:3a:df:
8f:b0:b4:24:d5:d1:93:d2:a8:22:e4:83:9f:85:6e:
00:5c:7c:a7:56:0f:d5:a4:5b:21:a9:aa:d4:85:91:
d8:99:e9:53:f6:6b:c8:66:a2:5b:fa:d6:9d:40:54:
aa:44:dc:88:b4:27:96:44:4b:78:be:81:ea:b1:cd:
69:da:7a:aa:ea:50:36:30:f5:e8:70:15:04:77:66:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:7E:EE:C2:B7:A9:60:1B:71:19:88:4E:01:44:32:33:D9:58:26
X509v3 Authority Key Identifier:
keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:be:3e:f7:f5:9b:ed:f4:69:30:b1:25:a0:d2:fc:d2:6a:eb:
2c:d5:65:78:fa:e3:06:fc:09:38:67:cf:eb:ee:ae:30:d5:f3:
96:92:ba:47:bf:06:6a:11:ba:a5:02:27:01:ea:ae:a7:28:40:
ad:b0:ec:75:65:64:6c:12:9c:c2:1d:4c:f2:ac:35:d1:0f:e8:
88:de:fa:1e:3f:8c:18:01:c0:b6:d1:e4:01:de:b0:54:8f:77:
90:3c:5d:0e:96:90:05:57:9d:67:fb:dc:da:e1:45:8a:70:a6:
fd:6d:7d:5c:4a:c4:54:06:35:09:9b:72:5c:10:3e:59:a7:07:
aa:ee:6b:79:88:76:58:54:1f:4b:13:f4:b4:a9:99:22:59:43:
0e:b1:66:cd:97:07:e7:f8:39:4f:db:17:5f:91:c1:40:5b:5a:
be:4e:4f:3a:68:46:59:e9:ca:2e:91:65:13:95:ef:56:aa:f9:
14:22:af:b3:36:6b:11:bd:de:3e:cc:a9:99:2d:9e:ea:7e:99:
2a:c3:6f:31:17:4e:3e:4c:22:ad:b2:fe:3d:b7:00:e2:05:30:
d5:f9:a4:64:49:f3:98:7d:fd:2b:c9:bc:2a:a6:cd:c0:6d:27:
15:29:5f:27:82:1c:a7:aa:fa:83:c2:72:d2:15:d3:7f:65:a8:
97:9f:74:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tj6V+ybb/HFazXyQxEX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjgwYWQ3NDFlNzIzMjgwODVkNWZhNTc5N2E4NDUxZjVm
YjAyMzgwHhcNMjUwMTMxMTcwMDA5WhcNMjUwMjAxMTcwMDA5WjAzMTEwLwYDVQQD
EyhlZWMxN2VlZWMyYjdhOTYwMWI3MTE5ODg0ZTAxNDQzMjMzZDk1ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2/YIzv3/RAkr3lW3RdNTBBxTbTK
EVkjFsEqPK7svlpKGXeVHdaFqowyz+lVJvOmKJwP7ywrh73wVy3eyJCHpGby8ifb
NKJs1KQJ0/ArwPB6fXfjMP3KUo6j1YHxOuf4ryN7wwqNJ2eU98RS+1EigcAiOXW5
AFF1hGajfGV5ZrSxMzQf2vFXROWG3jo6IyUP1+vkkAtdfdrJebHkStLoUkTFw9Op
Ffxfx1YquHVUdQ7WOt+PsLQk1dGT0qgi5IOfhW4AXHynVg/VpFshqarUhZHYmelT
9mvIZqJb+tadQFSqRNyItCeWREt4voHqsc1p2nqq6lA2MPXocBUEd2YwXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7Bfu7Ct6lgG3EZiE4BRDIz2VgmMB8GA1UdIwQY
MBaAFBAoCtdB5yMoCF1fpXl6hFH1+wI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNnSzEwSG5JeWdJWFYtbGVYcUVVZlg3QWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hYmJiOWYtNGYxMC00ZTQ0LWFjYTMt
MDQyNzVhMjkxOWE3LzEvRUNnSzEwSG5JeWdJWFYtbGVYcUVVZlg3QWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hYmJiOWYtNGYxMC00ZTQ0LWFjYTMtMDQyNzVhMjkxOWE3
LzEvRUNnSzEwSG5JeWdJWFYtbGVYcUVVZlg3QWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsb4+9/Wb
7fRpMLEloNL80mrrLNVlePrjBvwJOGfP6+6uMNXzlpK6R78GahG6pQInAequpyhA
rbDsdWVkbBKcwh1M8qw10Q/oiN76Hj+MGAHAttHkAd6wVI93kDxdDpaQBVedZ/vc
2uFFinCm/W19XErEVAY1CZtyXBA+WacHqu5reYh2WFQfSxP0tKmZIllDDrFmzZcH
5/g5T9sXX5HBQFtavk5POmhGWenKLpFlE5XvVqr5FCKvszZrEb3ePsypmS2e6n6Z
KsNvMRdOPkwirbL+PbcA4gUw1fmkZEnzmH39K8m8KqbNwG0nFSlfJ4Icp6r6g8Jy
0hXTf2Wol590Yw==
-----END CERTIFICATE-----
Generated at Tue May 13 04:30:25 2025 by rpki-client