Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: vUd9yXzhznw3wnIiZovpZ8CjCqO8b9pwnep7z6qe8xI=
Subject key identifier: 13:D5:61:65:09:A5:F7:6E:D0:37:4A:78:02:B6:89:CB:3B:AB:88:46
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 0194BBCDDCDE4791B8007F74447DBC7A07BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: iaZEEwK/SloMPqXeoo195f9YKV6O4QXkr2At23vwSLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:de:47:91:b8:00:7f:74:44:7d:bc:7a:07:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=13d5616509a5f76ed0374a7802b689cb3bab8846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:98:07:6d:d2:8c:a1:5f:db:b0:a2:25:54:
0b:ab:07:50:b9:fc:1e:cc:c4:b6:85:79:11:22:d3:
98:ac:99:11:29:a6:93:09:b8:77:0c:a3:d4:90:42:
de:be:af:80:6d:f8:c9:ec:9c:a1:4f:f4:be:9d:54:
1b:5e:70:f2:ca:a6:32:f6:8e:dd:74:46:37:3e:36:
7a:e1:00:bf:cc:80:f6:9e:8c:3c:ab:96:94:b6:c4:
a8:51:eb:64:05:96:dd:ad:8b:63:5d:cd:5a:86:6a:
28:6b:ac:a3:84:7f:f6:5b:ab:e3:c9:48:f5:31:46:
d9:b3:90:f1:f2:6c:17:a1:69:7c:f4:a0:12:90:1a:
be:f9:c1:e0:61:a5:87:d4:1b:d3:41:9a:8c:97:b3:
11:07:76:6a:c5:97:65:c5:5e:74:7e:39:7d:62:b9:
5d:af:2b:b5:fd:4c:8a:a1:fa:b8:80:c8:56:06:f4:
ef:61:35:5a:b5:a4:c7:47:00:21:05:be:df:51:15:
c3:1e:28:56:e5:77:3e:cb:8e:0d:26:82:4d:d7:bb:
34:7f:3a:9a:ca:68:e5:d8:f2:13:d4:87:15:b6:f1:
48:ad:3c:c0:cb:50:99:d0:60:9c:11:8e:22:19:23:
51:a8:ec:98:9f:02:58:98:b5:b1:9d:cb:c5:6e:4e:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:61:65:09:A5:F7:6E:D0:37:4A:78:02:B6:89:CB:3B:AB:88:46
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:73:e8:c3:c0:72:18:73:92:b8:5b:69:b5:e7:ec:c5:37:80:
54:ea:05:bb:02:4d:31:03:20:1f:3e:9b:cd:e1:68:40:36:bd:
5d:80:fc:d4:8e:64:88:9b:07:00:ab:0c:cc:a7:06:53:da:22:
97:76:49:c0:c3:4d:04:e3:56:54:e5:16:a7:d8:e6:89:27:eb:
5d:43:68:6d:89:b4:3b:85:2e:2b:5b:f6:bd:1d:bc:74:b8:47:
dd:ba:66:75:20:3f:c1:01:c4:48:ac:50:e5:6f:3b:31:8d:a8:
2a:50:3a:28:39:d5:50:02:21:83:52:57:b6:37:5d:5c:f7:a2:
97:6f:7e:9a:20:45:ae:d5:6e:58:29:8d:d2:d2:5d:54:2c:16:
af:96:77:31:53:ba:d1:e1:f1:ea:53:a0:be:d8:57:ce:82:14:
9b:b9:c9:4a:05:b2:b7:8d:7a:bd:3a:d9:c2:0d:ce:b0:20:04:
68:47:ec:6f:b9:a3:d4:5e:31:43:da:98:55:d5:5e:00:48:37:
65:93:be:7f:97:82:8d:a9:a3:2f:f0:ba:eb:83:5d:60:7a:df:
82:4b:ca:ca:fe:57:4b:90:a4:1c:b6:dc:f8:b9:02:5d:97:72:
24:c2:83:70:79:c2:d0:97:16:cc:d1:81:c7:66:ed:32:40:d6:
ec:9e:5a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdzeR5G4AH90RH28ege8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl
MmE5MWYwHhcNMjUwMTMxMTAwMDE4WhcNMjUwMjAxMTAwMDE4WjAzMTEwLwYDVQQD
EygxM2Q1NjE2NTA5YTVmNzZlZDAzNzRhNzgwMmI2ODljYjNiYWI4ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke2YB23SjKFf27CiJVQLqwdQufwe
zMS2hXkRItOYrJkRKaaTCbh3DKPUkELevq+AbfjJ7JyhT/S+nVQbXnDyyqYy9o7d
dEY3PjZ64QC/zID2now8q5aUtsSoUetkBZbdrYtjXc1ahmooa6yjhH/2W6vjyUj1
MUbZs5Dx8mwXoWl89KASkBq++cHgYaWH1BvTQZqMl7MRB3ZqxZdlxV50fjl9Yrld
ryu1/UyKofq4gMhWBvTvYTVataTHRwAhBb7fURXDHihW5Xc+y44NJoJN17s0fzqa
ymjl2PIT1IcVtvFIrTzAy1CZ0GCcEY4iGSNRqOyYnwJYmLWxncvFbk7QwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPVYWUJpfdu0DdKeAK2ics7q4hGMB8GA1UdIwQY
MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt
NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm
LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHPow8By
GHOSuFtptefsxTeAVOoFuwJNMQMgHz6bzeFoQDa9XYD81I5kiJsHAKsMzKcGU9oi
l3ZJwMNNBONWVOUWp9jmiSfrXUNobYm0O4UuK1v2vR28dLhH3bpmdSA/wQHESKxQ
5W87MY2oKlA6KDnVUAIhg1JXtjddXPeil29+miBFrtVuWCmN0tJdVCwWr5Z3MVO6
0eHx6lOgvthXzoIUm7nJSgWyt416vTrZwg3OsCAEaEfsb7mj1F4xQ9qYVdVeAEg3
ZZO+f5eCjamjL/C664NdYHrfgkvKyv5XS5CkHLbc+LkCXZdyJMKDcHnC0JcWzNGB
x2btMkDW7J5aeQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:17 2025 by rpki-client