Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: rYfKMBxV+Ihwmhikgg3zLa4o+RptYRqJsz7wE/hXBGk=
Subject key identifier: DC:A2:80:EC:28:30:CD:CB:B8:8B:0F:1E:76:0A:FD:D8:1E:83:F4:C1
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 0194BD858AEB9443F075DFB37423F7CAFD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: FXRehVwdyYj3SUFB3lgftTthRNk2JynWy/0XCtyd8DQ=)
5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8a:eb:94:43:f0:75:df:b3:74:23:f7:ca:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=dca280ec2830cdcbb88b0f1e760afdd81e83f4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:b2:ba:5e:d1:51:75:f9:d3:16:14:51:39:
d9:f6:91:fe:43:ea:fe:e3:06:7c:ed:45:09:cd:95:
a8:58:62:62:ea:50:2e:4d:dc:9b:b9:76:ff:c4:2e:
57:95:85:d1:bc:e5:12:97:b5:7d:38:fa:1f:35:18:
d5:d2:ad:fc:ea:e3:0f:09:a4:d8:d8:57:f1:94:fc:
78:22:d3:89:a5:d3:8c:f2:dd:b9:3a:c4:d4:03:85:
49:b9:73:8a:69:4f:b7:63:70:da:db:86:84:92:e5:
2a:49:36:76:55:53:14:62:7e:5f:17:18:56:f0:d8:
a0:90:9e:39:36:9e:e6:ba:f3:b1:e1:76:48:81:ad:
ee:1c:d6:2e:3e:6d:a7:38:b6:f9:fa:00:19:6f:ea:
c0:c5:3c:22:3d:98:8e:9f:4b:7d:e4:45:3b:53:7f:
8d:f2:4c:6c:7f:fb:67:83:af:03:48:8c:54:6e:60:
fa:68:54:81:58:43:2a:72:ca:bb:71:14:78:a4:2c:
cd:7c:27:8b:4e:c9:43:33:57:93:d8:fb:85:ca:9f:
f9:01:58:df:dd:0d:22:91:91:5e:de:78:ba:bc:7b:
2b:0d:a3:53:53:08:eb:f2:06:7c:16:88:45:f7:4d:
62:d6:cd:90:b7:55:cb:0d:cf:af:c0:9d:37:33:62:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A2:80:EC:28:30:CD:CB:B8:8B:0F:1E:76:0A:FD:D8:1E:83:F4:C1
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:68:b2:57:7c:86:88:e1:0c:79:cb:32:8b:4b:ba:48:f1:09:
55:ff:f6:80:65:92:b1:5e:4d:bc:f2:34:d0:b9:ad:40:54:e7:
b1:60:8b:5d:0b:9a:c6:91:aa:e5:bc:8e:35:2c:88:94:51:e6:
21:0b:ee:ab:be:e7:cc:ac:5e:96:a2:b8:0d:22:ce:10:82:92:
bb:6e:a0:6f:a8:5a:7f:15:1b:19:49:60:b9:da:ae:48:44:cc:
26:56:3c:81:91:b5:61:de:c3:56:14:f5:7b:d2:b1:b4:ca:5d:
e1:b0:3d:7e:6f:19:8d:10:c4:ac:84:78:16:70:09:0a:9e:57:
56:ea:30:32:63:4e:06:24:20:c5:0a:47:7c:19:41:43:03:6b:
26:86:4b:86:4a:ad:1e:a2:2a:8b:92:e0:97:1f:23:7b:10:2a:
36:3e:a2:94:ea:1d:b9:ed:d0:b5:77:20:c5:63:5c:4c:3d:e7:
be:f8:de:3c:84:4e:25:7b:c7:77:66:7e:39:d9:2e:b3:ef:70:
46:7e:34:09:60:cb:2c:c6:45:b1:ce:02:09:8c:c4:7b:e1:52:
2a:21:02:00:9a:3f:0d:4b:2e:32:85:bd:08:3e:e5:c6:fc:7e:
b5:ba:80:d0:9f:9c:b3:47:97:0e:ff:8f:56:c4:12:91:21:1b:
d6:23:f6:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYrrlEPwdd+zdCP3yv2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3
Mjg3YzcwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
EyhkY2EyODBlYzI4MzBjZGNiYjg4YjBmMWU3NjBhZmRkODFlODNmNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7myul7RUXX50xYUUTnZ9pH+Q+r+
4wZ87UUJzZWoWGJi6lAuTdybuXb/xC5XlYXRvOUSl7V9OPofNRjV0q386uMPCaTY
2FfxlPx4ItOJpdOM8t25OsTUA4VJuXOKaU+3Y3Da24aEkuUqSTZ2VVMUYn5fFxhW
8NigkJ45Np7muvOx4XZIga3uHNYuPm2nOLb5+gAZb+rAxTwiPZiOn0t95EU7U3+N
8kxsf/tng68DSIxUbmD6aFSBWEMqcsq7cRR4pCzNfCeLTslDM1eT2PuFyp/5AVjf
3Q0ikZFe3ni6vHsrDaNTUwjr8gZ8FohF901i1s2Qt1XLDc+vwJ03M2IbNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyigOwoMM3LuIsPHnYK/dgeg/TBMB8GA1UdIwQY
MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt
MzE5OTlmM2FkZDM2LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2
LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2iyV3yG
iOEMecsyi0u6SPEJVf/2gGWSsV5NvPI00LmtQFTnsWCLXQuaxpGq5byONSyIlFHm
IQvuq77nzKxelqK4DSLOEIKSu26gb6hafxUbGUlgudquSETMJlY8gZG1Yd7DVhT1
e9KxtMpd4bA9fm8ZjRDErIR4FnAJCp5XVuowMmNOBiQgxQpHfBlBQwNrJoZLhkqt
HqIqi5Lglx8jexAqNj6ilOodue3QtXcgxWNcTD3nvvjePIROJXvHd2Z+Odkus+9w
Rn40CWDLLMZFsc4CCYzEe+FSKiECAJo/DUsuMoW9CD7lxvx+tbqA0J+cs0eXDv+P
VsQSkSEb1iP2gA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:38 2025 by rpki-client