Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: d/DOPccBtBIxNd53lF7orUN/WxxUU7vkdqn8jlv5vPY=
Subject key identifier: B9:E9:B7:56:20:B9:43:24:B5:52:58:D9:AB:97:16:10:25:CD:EA:EC
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 0194BC3C50ED50CF4C3C9F12128C672D0906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: n7jjTnN8/WaTrclErBiwAQhInCSDFJTGZeRCG6DgGiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:ed:50:cf:4c:3c:9f:12:12:8c:67:2d:09:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=b9e9b75620b94324b55258d9ab97161025cdeaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:67:4b:f2:c1:ff:a5:66:b1:ac:58:7d:ea:
8a:ad:35:59:34:c9:1c:16:79:fb:19:1d:13:7b:79:
3c:71:50:55:19:87:2e:d8:cc:46:b6:14:4c:3f:63:
49:a7:28:ec:32:72:e7:d5:c8:8f:6b:43:d3:c8:93:
79:57:9f:cd:b5:0a:58:c3:bd:42:8e:70:9d:2d:81:
1a:66:9a:50:0c:1b:6d:1c:8e:02:66:dd:3c:1b:31:
31:eb:b5:68:e5:e5:69:bf:4b:b4:dd:ea:4f:1a:e7:
03:40:7f:91:ca:46:d3:64:3b:56:e5:e4:f6:f0:93:
89:83:2c:28:58:66:c4:69:ff:32:cc:c3:9f:bb:65:
78:6b:26:ff:e9:6f:f8:ec:2c:5c:1f:a6:ae:a0:b8:
64:e4:c0:7a:3b:06:9b:89:b1:0b:f5:44:5e:a2:d7:
54:0a:af:dc:30:5f:43:b0:39:eb:56:71:f8:43:3f:
21:01:14:80:3a:94:81:d6:0f:d5:74:8d:73:ec:36:
1a:1a:f2:ec:d0:76:28:08:44:7b:ce:31:16:25:d3:
63:6e:8a:f8:3a:ff:7a:35:12:d3:5d:43:62:a0:be:
03:f3:06:35:7c:a6:fc:0b:c0:b8:69:b3:f5:8b:90:
c5:00:d6:5b:4a:c9:f4:1f:c7:af:21:b0:e0:68:67:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E9:B7:56:20:B9:43:24:B5:52:58:D9:AB:97:16:10:25:CD:EA:EC
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c8:3d:30:1d:a9:f3:7b:1f:75:29:26:91:ad:27:96:3d:bd:
a1:32:63:b2:9e:2a:75:1d:67:4c:ec:ad:5a:d7:c9:51:d6:07:
75:03:e7:45:0f:d0:cf:e2:99:3f:dc:17:8f:55:14:96:0d:31:
ee:d3:26:cd:ca:b0:30:e2:44:55:17:11:aa:9e:4b:12:3c:61:
da:36:54:60:74:fb:c6:fd:c4:65:d5:ad:e0:45:dc:60:ec:04:
aa:7d:55:4f:f9:d5:d7:53:ac:3f:6d:70:a7:66:34:c5:1a:31:
c9:bb:d1:8b:aa:4b:78:31:fa:bf:1a:02:e2:2e:1a:25:e9:57:
f1:77:90:5b:36:28:9d:ab:90:60:ea:3e:f9:e3:c8:fc:75:b8:
9b:1d:31:0c:4f:02:4a:74:10:e0:fb:ac:aa:bc:7a:c8:05:f5:
c8:38:23:20:ea:fc:b7:9f:06:32:9b:0e:25:0e:36:09:95:e7:
f2:9f:c5:0e:fb:0b:83:20:e2:88:19:52:6b:9a:94:da:7a:33:
67:f0:1e:61:8b:67:25:75:00:c8:8c:04:90:72:55:5a:a9:91:
2c:be:0b:47:7c:53:d9:9e:b8:a6:71:01:b3:a5:db:c9:6e:bd:
54:f6:ac:66:2b:49:5b:1a:91:9e:12:41:b0:a4:a7:5b:b7:7f:
4a:b0:4b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFDtUM9MPJ8SEoxnLQkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDY5MmVjMzBmMzdkZjdkY2I1ZTQ3YWQzNDZhZWJkZWI3
MWZjMzAwHhcNMjUwMTMxMTIwMDU2WhcNMjUwMjAxMTIwMDU2WjAzMTEwLwYDVQQD
EyhiOWU5Yjc1NjIwYjk0MzI0YjU1MjU4ZDlhYjk3MTYxMDI1Y2RlYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi9nS/LB/6VmsaxYfeqKrTVZNMkc
Fnn7GR0Te3k8cVBVGYcu2MxGthRMP2NJpyjsMnLn1ciPa0PTyJN5V5/NtQpYw71C
jnCdLYEaZppQDBttHI4CZt08GzEx67Vo5eVpv0u03epPGucDQH+RykbTZDtW5eT2
8JOJgywoWGbEaf8yzMOfu2V4ayb/6W/47CxcH6auoLhk5MB6OwabibEL9UReotdU
Cq/cMF9DsDnrVnH4Qz8hARSAOpSB1g/VdI1z7DYaGvLs0HYoCER7zjEWJdNjbor4
Ov96NRLTXUNioL4D8wY1fKb8C8C4abP1i5DFANZbSsn0H8evIbDgaGds0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnpt1YguUMktVJY2auXFhAlzersMB8GA1UdIwQY
MBaAFAhGkuww83333LXketNGrr3rcfwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjIt
MTEzMzc0YzQ4NzYzLzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjItMTEzMzc0YzQ4NzYz
LzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsg9MB2p
83sfdSkmka0nlj29oTJjsp4qdR1nTOytWtfJUdYHdQPnRQ/Qz+KZP9wXj1UUlg0x
7tMmzcqwMOJEVRcRqp5LEjxh2jZUYHT7xv3EZdWt4EXcYOwEqn1VT/nV11OsP21w
p2Y0xRoxybvRi6pLeDH6vxoC4i4aJelX8XeQWzYonauQYOo++ePI/HW4mx0xDE8C
SnQQ4Pusqrx6yAX1yDgjIOr8t58GMpsOJQ42CZXn8p/FDvsLgyDiiBlSa5qU2noz
Z/AeYYtnJXUAyIwEkHJVWqmRLL4LR3xT2Z64pnEBs6XbyW69VPasZitJWxqRnhJB
sKSnW7d/SrBLRg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:55 2025 by rpki-client