Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: LBsLPwbhT9EwL8cj6gpJU2YI9xCo9N3GzSyGPqK793E=
Subject key identifier: 67:C8:C5:B3:8E:FF:BD:EE:21:CD:98:42:96:02:BB:98:58:C4:85:A3
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 0194BC732363C5883D4CE5F0DF58E77275D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 11F4
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: 95+MLWdaGsTwrKt8tGFBXef9+TB9fkMIPoDxthGtL0s=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:23:63:c5:88:3d:4c:e5:f0:df:58:e7:72:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=67c8c5b38effbdee21cd98429602bb9858c485a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:97:7b:21:52:31:00:32:23:46:cc:05:d9:
9e:a2:44:43:ae:5e:9f:83:62:3e:c0:c5:9f:77:1e:
03:17:91:1b:71:e3:77:f9:77:ae:3a:20:f2:01:8f:
b6:c2:c6:05:6e:ac:23:00:d8:4a:f6:ac:7b:72:37:
d3:69:b2:de:60:1a:84:09:23:c9:11:ca:ef:0c:f8:
b7:e0:18:06:f6:2e:39:bd:28:da:7b:36:ee:7f:6b:
83:ac:07:5f:21:72:0c:fe:5f:90:04:d3:82:d2:2c:
7a:12:6c:b8:fd:55:f3:28:29:90:b7:4b:e2:7e:e9:
db:5b:1c:23:12:c2:05:5a:6e:1f:4e:07:04:e3:81:
6e:df:f5:14:c1:25:0d:bf:01:80:21:d5:86:2c:49:
86:31:26:96:67:4b:a2:29:00:e8:16:1f:a5:99:23:
55:c9:4b:4d:ce:44:18:92:1a:49:ca:80:03:c6:f6:
a2:ed:37:ca:6b:93:92:d5:93:c8:99:ee:47:f2:1f:
ca:d9:85:74:68:ae:2a:c4:64:7c:47:5b:79:52:9d:
f7:59:54:21:f4:32:ed:af:35:a0:b2:02:aa:60:28:
c4:5e:77:04:b4:cf:ba:1d:72:07:fd:c6:89:99:2c:
01:c5:1e:52:fc:1d:52:ed:e7:59:f5:43:c6:ab:49:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:C5:B3:8E:FF:BD:EE:21:CD:98:42:96:02:BB:98:58:C4:85:A3
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6f:f6:43:3e:16:25:f3:7d:a9:9f:f8:1c:54:66:04:b2:ee:
d7:d6:1f:1d:0f:1a:72:ef:b2:52:c4:38:c6:b8:97:7f:5c:89:
63:ac:95:76:30:2b:06:c7:24:4c:fd:fd:03:1b:23:e4:f2:bb:
e3:a1:ff:6b:1c:6b:b6:3a:84:af:08:18:6b:cb:5d:73:80:1c:
1d:2c:76:b4:61:df:76:be:f6:fa:a6:a5:22:f8:c9:f4:d3:a9:
11:4b:02:1b:7a:99:0b:d9:1f:b0:20:91:fd:7b:20:c5:ea:47:
0a:d3:18:14:99:e3:41:be:db:22:6d:9e:43:bb:e5:b1:f8:f1:
2c:ef:8c:94:b2:a0:88:19:75:68:3e:b3:9c:39:29:c2:9e:c7:
3c:f9:12:ad:28:8c:d1:64:1f:87:34:eb:07:0f:a5:02:11:7d:
8a:64:58:a6:f1:e8:d5:a7:36:ee:97:da:06:e2:35:d1:80:87:
66:91:ad:7a:08:8d:3a:49:df:24:db:6b:5d:7e:e3:96:48:a3:
c4:4d:19:ef:43:51:0d:28:df:37:b8:d7:4f:81:68:a5:6e:01:
fc:02:80:80:e9:12:a4:24:b6:76:62:62:03:eb:4c:dc:19:0b:
51:7f:ec:36:7f:4e:83:4e:2b:08:df:1f:b3:ec:6f:a1:cc:74:
b3:dd:2b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyNjxYg9TOXw31jncnXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMmU4MjFkODhkZTdhMDExMzQxNzA0MjAyMzQ2ZjdjMmJi
OWViY2YwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
Eyg2N2M4YzViMzhlZmZiZGVlMjFjZDk4NDI5NjAyYmI5ODU4YzQ4NWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDmXeyFSMQAyI0bMBdmeokRDrl6f
g2I+wMWfdx4DF5EbceN3+XeuOiDyAY+2wsYFbqwjANhK9qx7cjfTabLeYBqECSPJ
EcrvDPi34BgG9i45vSjaezbuf2uDrAdfIXIM/l+QBNOC0ix6Emy4/VXzKCmQt0vi
funbWxwjEsIFWm4fTgcE44Fu3/UUwSUNvwGAIdWGLEmGMSaWZ0uiKQDoFh+lmSNV
yUtNzkQYkhpJyoADxvai7TfKa5OS1ZPIme5H8h/K2YV0aK4qxGR8R1t5Up33WVQh
9DLtrzWgsgKqYCjEXncEtM+6HXIH/caJmSwBxR5S/B1S7edZ9UPGq0m3uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfIxbOO/73uIc2YQpYCu5hYxIWjMB8GA1UdIwQY
MBaAFOwugh2I3noBE0FwQgI0b3wruevPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjkt
ZGZhMGI4MDUyNjE0LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjktZGZhMGI4MDUyNjE0
LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2/2Qz4W
JfN9qZ/4HFRmBLLu19YfHQ8acu+yUsQ4xriXf1yJY6yVdjArBsckTP39Axsj5PK7
46H/axxrtjqErwgYa8tdc4AcHSx2tGHfdr72+qalIvjJ9NOpEUsCG3qZC9kfsCCR
/XsgxepHCtMYFJnjQb7bIm2eQ7vlsfjxLO+MlLKgiBl1aD6znDkpwp7HPPkSrSiM
0WQfhzTrBw+lAhF9imRYpvHo1ac27pfaBuI10YCHZpGtegiNOknfJNtrXX7jlkij
xE0Z70NRDSjfN7jXT4FopW4B/AKAgOkSpCS2dmJiA+tM3BkLUX/sNn9Og04rCN8f
s+xvocx0s90rrA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:28 2025 by rpki-client