Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: D0r0aE4mylrxBmnRYQ/vyRCqSvcgL/d/C4MXoxwumyc=
Subject key identifier: 75:E4:D4:0D:43:82:CA:D9:7C:1F:F6:EE:05:6A:0B:79:37:A3:D1:56
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 0194BC0509C3365808AB0EFACC7FF38B6477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: RfLBHvOO+zdpTVocj6CUc9lOfeY+8yCl5+FwWw/URjk=)
2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:c3:36:58:08:ab:0e:fa:cc:7f:f3:8b:64:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=75e4d40d4382cad97c1ff6ee056a0b7937a3d156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:f7:0a:ef:4c:96:f3:f2:89:83:03:a5:54:
4d:01:b2:11:bf:8d:c4:8b:1d:47:d7:97:98:a1:05:
a1:4b:7a:1e:64:29:64:ad:16:87:bb:0b:1f:a1:fc:
b9:b5:4a:ec:80:20:3e:ab:c9:6d:6d:aa:02:96:74:
1e:b6:12:e3:01:b1:5b:73:16:3c:59:39:5b:2b:31:
b1:48:88:e6:07:e0:59:37:66:8e:eb:56:7e:63:f5:
8d:b6:5c:40:e1:cb:e0:f7:53:e8:9f:4f:ca:4f:3d:
fe:9e:1e:94:69:16:66:fa:2a:49:da:fc:09:d1:f0:
2d:44:04:cf:ec:66:77:ed:72:55:a1:9e:4d:21:49:
bc:51:bc:12:1d:13:19:16:c7:61:02:5b:2a:ab:ba:
49:97:a5:a6:69:c6:e1:62:97:99:4b:37:58:0f:6d:
7c:f5:41:53:be:e9:d6:71:b6:b5:55:55:b3:05:bc:
37:64:56:f2:23:cb:96:04:0f:eb:4e:a6:3d:16:2b:
e7:9c:ae:ec:77:da:e8:65:fb:b1:11:88:ae:79:07:
ff:39:63:2c:fe:d9:02:c4:94:13:b1:0a:a3:8b:2e:
22:bb:fe:c0:bc:fb:50:a8:3a:f2:39:fb:82:e9:3d:
b8:35:12:c9:d9:52:ee:39:fe:87:b5:24:14:ea:66:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E4:D4:0D:43:82:CA:D9:7C:1F:F6:EE:05:6A:0B:79:37:A3:D1:56
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:84:db:35:1a:db:39:a2:b3:ff:ea:63:38:1c:c9:8d:be:45:
48:d3:34:65:a8:19:5a:00:05:b6:aa:4a:9a:70:62:35:48:05:
46:6a:43:58:3f:7e:d4:97:2e:02:72:a5:5a:eb:21:5a:aa:24:
da:6e:28:70:9c:65:db:62:01:11:be:0f:5d:ff:d0:98:1f:53:
5a:53:e5:8f:7e:1c:2e:14:7b:42:26:05:b6:da:80:6f:f8:c9:
3f:ca:b4:6b:b8:2f:78:9f:a8:a2:4b:be:b2:60:8e:8a:36:c4:
0b:64:50:2b:81:07:5d:38:fc:db:33:e0:51:38:10:f9:52:75:
62:f6:b5:3d:14:1d:8a:6f:44:7a:32:92:86:0a:b1:2e:9c:3d:
75:c0:1f:5a:ab:5e:ef:3d:c5:14:f1:fb:d8:7b:24:c4:ac:56:
d0:de:9a:a7:7c:5c:45:a7:90:e9:d6:6d:82:a5:af:e0:66:70:
fc:fc:1c:c8:96:40:b2:79:78:b0:f6:ed:e5:96:58:64:41:65:
54:22:2c:a4:fc:56:38:73:92:43:7c:71:bb:1d:88:b0:ea:c0:
fc:4e:69:c3:3b:5a:92:e8:cb:c1:60:5f:8d:b9:0d:04:28:60:
6e:a5:93:80:42:3d:61:ab:54:99:68:c7:6d:55:be:f9:52:be:
03:d9:5c:de
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8BQnDNlgIqw76zH/zi2R3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTY1OWU3ZWVmNmQ3M2I2ODZlYjFkMjk1NmM3MWYzYmU1
YmJkNzcwHhcNMjUwMTMxMTEwMDM0WhcNMjUwMjAxMTEwMDM0WjAzMTEwLwYDVQQD
Eyg3NWU0ZDQwZDQzODJjYWQ5N2MxZmY2ZWUwNTZhMGI3OTM3YTNkMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhH3Cu9MlvPyiYMDpVRNAbIRv43E
ix1H15eYoQWhS3oeZClkrRaHuwsfofy5tUrsgCA+q8ltbaoClnQethLjAbFbcxY8
WTlbKzGxSIjmB+BZN2aO61Z+Y/WNtlxA4cvg91Pon0/KTz3+nh6UaRZm+ipJ2vwJ
0fAtRATP7GZ37XJVoZ5NIUm8UbwSHRMZFsdhAlsqq7pJl6WmacbhYpeZSzdYD218
9UFTvunWcba1VVWzBbw3ZFbyI8uWBA/rTqY9FivnnK7sd9roZfuxEYiueQf/OWMs
/tkCxJQTsQqjiy4iu/7AvPtQqDryOfuC6T24NRLJ2VLuOf6HtSQU6mb0hQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHXk1A1DgsrZfB/27gVqC3k3o9FWMB8GA1UdIwQY
MBaAFPnmWefu9tc7aG6x0pVscfO+W713MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lWlo1LTcyMXp0b2JySFNsV3h4ODc1YnZYYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1LTExODktNDM1MS1iZGU3
LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhTbFd4eDg3NWJ2WGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmL2ZiOGRiNS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0
MjEvMS8xLWVaWjUtNzIxenRvYnJIU2xXeHg4NzVidlhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoTb
NRrbOaKz/+pjOBzJjb5FSNM0ZagZWgAFtqpKmnBiNUgFRmpDWD9+1JcuAnKlWush
Wqok2m4ocJxl22IBEb4PXf/QmB9TWlPlj34cLhR7QiYFttqAb/jJP8q0a7gveJ+o
oku+smCOijbEC2RQK4EHXTj82zPgUTgQ+VJ1Yva1PRQdim9EejKShgqxLpw9dcAf
Wqte7z3FFPH72HskxKxW0N6ap3xcRaeQ6dZtgqWv4GZw/PwcyJZAsnl4sPbt5ZZY
ZEFlVCIspPxWOHOSQ3xxux2IsOrA/E5pwztakujLwWBfjbkNBChgbqWTgEI9YatU
mWjHbVW++VK+A9lc3g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:15 2025 by rpki-client