Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
File: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json)
Hash identifier: dEiVKmy4z3IC/dgBJ6mqEyVIEx37GnDrWSO2c/9Qvz4=
Subject key identifier: 90:DC:E1:C0:37:41:CC:47:39:BE:B7:5D:06:01:CF:89:DE:8E:84:A9
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial: 0194BC04F9A951EC347F335736B212252A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
Manifest number: 1021
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: 1VzR0EkTqQEsWsR8XxovrD+4cw3mUkY4valrzUNUOzo=)
2: xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa (hash: HUhxo6JRum8cUC4GCldE8jMW5HQn+DFBF6vESEvE0ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f9:a9:51:ec:34:7f:33:57:36:b2:12:25:2a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=90dce1c03741cc4739beb75d0601cf89de8e84a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:66:14:e1:e2:ef:5f:a2:c0:fe:5b:72:04:34:
e4:1b:89:8d:a1:45:9e:54:69:d0:10:ea:3b:9f:b3:
31:b8:e5:46:a2:71:35:7a:c0:b6:6d:45:20:47:cb:
c5:7c:c1:d8:7f:e8:9b:5b:bc:14:39:78:42:77:e5:
5f:f0:79:14:83:ba:b0:04:72:bf:a1:fb:9b:4b:c3:
43:2f:80:23:33:38:6b:47:42:c7:5d:11:3d:e5:26:
4c:40:5e:78:4a:ce:14:9b:b4:fd:62:c5:ac:41:64:
f9:3a:2f:b4:ce:6f:ba:1e:2a:a0:f2:fb:ff:53:40:
7b:ab:6d:23:9b:02:34:f1:f8:0c:3f:96:e0:2c:a6:
9a:75:4d:01:91:4f:6e:31:69:06:50:15:6c:ef:9f:
76:52:03:87:65:a2:ee:91:ab:a6:86:8a:1d:87:5d:
3a:e8:5d:b0:38:96:42:cb:79:d0:f9:b8:9e:cc:cc:
3b:90:f1:80:2a:aa:d9:ec:85:f5:12:76:6f:15:82:
d3:d3:cd:ac:02:9d:37:2f:b8:61:88:37:77:0a:89:
84:a6:48:c1:09:5a:fc:c2:b1:15:84:92:a8:18:df:
9f:be:a4:98:1e:40:44:d1:6d:e6:50:35:fd:47:85:
17:b3:30:49:c0:36:83:91:31:44:16:aa:01:81:9d:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:E1:C0:37:41:CC:47:39:BE:B7:5D:06:01:CF:89:DE:8E:84:A9
X509v3 Authority Key Identifier:
keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:67:4d:93:a7:28:c1:13:12:5c:6d:f3:eb:5c:df:b7:43:2b:
ef:31:3a:f2:2a:c1:3c:2e:50:b4:66:af:e3:d3:d1:5a:30:f7:
b9:52:2c:a4:4b:f3:b2:43:3b:8d:3c:bf:2e:80:ce:ba:6e:8a:
da:b3:c5:e0:21:53:7f:b9:fb:95:67:73:de:5d:e8:a8:9e:77:
cc:bf:c8:1d:ca:b1:4a:34:dc:da:64:58:18:38:98:b4:db:b2:
be:bc:d5:1b:62:82:a1:88:87:d9:f0:e7:8e:36:0a:d7:f6:a2:
33:76:2f:ec:3d:c8:01:19:b6:56:c6:e1:6c:c8:73:e6:7f:fe:
cb:76:74:39:e5:70:2c:2d:ae:fe:57:db:5b:20:11:d6:79:b9:
b7:cc:20:e7:33:0a:6f:34:76:df:e4:e2:c7:a7:b1:e1:2e:43:
be:d6:77:b3:a5:29:23:5f:83:74:3a:c3:e9:78:5a:d5:13:37:
f0:ab:22:9a:ed:37:f3:a3:7f:1f:75:a2:b2:ea:97:7b:1f:31:
38:a0:68:14:56:a7:73:5a:8a:64:e3:c4:f1:3b:75:9f:ba:01:
ca:24:64:d7:13:ba:e8:95:34:e4:f2:19:12:ec:72:21:3e:1c:
1d:09:cc:a8:2d:1e:a2:b3:e7:83:a6:b8:e3:1a:ef:0f:7d:c2:
33:b3:8b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPmpUew0fzNXNrISJSoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi
YTU5ZjUwHhcNMjUwMTMxMTEwMDMwWhcNMjUwMjAxMTEwMDMwWjAzMTEwLwYDVQQD
Eyg5MGRjZTFjMDM3NDFjYzQ3MzliZWI3NWQwNjAxY2Y4OWRlOGU4NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mYU4eLvX6LA/ltyBDTkG4mNoUWe
VGnQEOo7n7MxuOVGonE1esC2bUUgR8vFfMHYf+ibW7wUOXhCd+Vf8HkUg7qwBHK/
ofubS8NDL4AjMzhrR0LHXRE95SZMQF54Ss4Um7T9YsWsQWT5Oi+0zm+6Hiqg8vv/
U0B7q20jmwI08fgMP5bgLKaadU0BkU9uMWkGUBVs7592UgOHZaLukaumhoodh106
6F2wOJZCy3nQ+biezMw7kPGAKqrZ7IX1EnZvFYLT082sAp03L7hhiDd3ComEpkjB
CVr8wrEVhJKoGN+fvqSYHkBE0W3mUDX9R4UXszBJwDaDkTFEFqoBgZ0/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDc4cA3QcxHOb63XQYBz4nejoSpMB8GA1UdIwQY
MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt
YWMxYmY4MDU0NGNhLzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh
LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2dNk6co
wRMSXG3z61zft0Mr7zE68irBPC5QtGav49PRWjD3uVIspEvzskM7jTy/LoDOum6K
2rPF4CFTf7n7lWdz3l3oqJ53zL/IHcqxSjTc2mRYGDiYtNuyvrzVG2KCoYiH2fDn
jjYK1/aiM3Yv7D3IARm2VsbhbMhz5n/+y3Z0OeVwLC2u/lfbWyAR1nm5t8wg5zMK
bzR23+Tix6ex4S5DvtZ3s6UpI1+DdDrD6Xha1RM38Ksimu0386N/H3WisuqXex8x
OKBoFFanc1qKZOPE8Tt1n7oByiRk1xO66JU05PIZEuxyIT4cHQnMqC0eorPng6a4
4xrvD33CM7OLLA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:19 2025 by rpki-client