Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier: j3GfB484W39nqaOdfCEj8xHjiTV4iQrsJWR16jW3Kx8=
Subject key identifier: EC:35:D6:07:55:A5:09:33:A7:7B:A1:EB:38:86:87:D7:0E:87:CF:DA
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 0194BC72F743404581973BC7D3B6C07D651C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: MHSlaIHWYknxvgBPkDoeHgTDyNaO6xUvzD/3HfIVZJg=)
2: SevLX3l4TAijWhvCzFiJEtxi9zc.roa (hash: sBEIXGef/JFr7rPt1AMHS1m2tgKfrXwqEjoioS0QrFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f7:43:40:45:81:97:3b:c7:d3:b6:c0:7d:65:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=ec35d60755a50933a77ba1eb388687d70e87cfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:ca:7f:d6:d6:c7:24:26:98:0a:e6:ad:ab:
44:c8:f1:5e:c3:9b:af:34:10:cd:b8:b4:12:52:96:
73:97:a8:23:df:cb:93:b3:c7:87:c6:5d:74:f2:59:
f5:c7:e8:06:fc:09:ee:7d:4d:db:0c:6c:e4:90:7a:
b0:31:51:a4:22:29:98:a0:54:ff:40:bb:ab:28:54:
f8:29:40:7b:30:83:21:52:27:42:a8:0a:47:2d:86:
d6:07:34:35:fb:02:71:44:49:96:8a:de:64:8e:3b:
38:d8:5e:c1:9a:3c:50:1c:0d:c7:8b:f8:85:f1:68:
23:20:a3:b5:99:e5:03:26:fd:45:56:f5:f7:d7:ec:
9d:18:54:7c:5b:82:a0:cd:39:b6:3f:4e:97:85:36:
6f:68:3d:67:f3:92:c1:79:66:e8:95:1a:bf:f6:49:
03:fa:3c:a9:e0:6c:58:d7:64:e3:7e:0f:d6:72:46:
5a:a4:37:60:2c:0f:b4:b8:b3:82:bd:2d:1f:5f:ae:
67:ee:30:f7:15:ac:0f:25:59:83:d2:09:9d:0f:33:
e5:cd:9b:ee:53:29:b0:a0:c0:fc:57:4f:0d:9b:1d:
e0:58:25:8a:a4:32:8c:71:5f:21:1c:fc:34:6d:1e:
47:52:ce:38:ad:43:0a:c2:c0:03:37:10:d4:a3:5a:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:35:D6:07:55:A5:09:33:A7:7B:A1:EB:38:86:87:D7:0E:87:CF:DA
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:9e:49:2d:ae:66:46:b0:fe:f9:20:56:2e:19:5a:32:21:
d8:d7:59:8a:18:f3:f4:34:67:24:0c:c2:cd:b5:03:b4:10:64:
0a:dd:12:67:bd:3a:e3:3e:fd:d6:17:2e:2e:ad:2d:cd:5e:5b:
7c:82:8d:44:4a:30:bb:51:6e:65:99:f9:91:74:a8:a4:d1:e6:
f8:38:7f:b2:e0:30:7e:e7:91:da:1c:c2:57:58:bd:b5:92:77:
74:3f:99:8d:90:53:49:57:95:b0:a6:81:e8:c9:73:ef:55:d5:
fe:f4:96:1d:cd:99:b6:0f:e9:72:8b:d0:7a:fd:68:e5:80:d3:
2c:54:f8:af:2a:c2:7d:b6:de:e2:1d:b6:63:f4:4f:4d:48:e0:
da:bf:ca:ba:f0:72:cf:e6:2b:65:c9:88:e8:3c:b6:dd:fb:54:
f1:69:d5:b1:ed:fb:fb:8b:3b:9d:74:1a:ee:74:55:82:c8:13:
e2:72:0b:31:30:fb:cd:bf:32:45:fa:15:3a:0b:3a:08:43:3d:
03:6e:31:6a:53:56:ec:c8:47:3a:ce:44:4e:f4:01:0e:ae:5a:
f4:22:89:0b:75:95:4c:d1:88:25:cb:83:9e:ba:15:dd:1f:77:
06:b4:d2:c2:83:90:c0:33:f7:3c:02:96:f5:15:06:7d:49:f0:
57:71:a4:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvdDQEWBlzvH07bAfWUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz
NzU4YzAwHhcNMjUwMTMxMTMwMDM4WhcNMjUwMjAxMTMwMDM4WjAzMTEwLwYDVQQD
EyhlYzM1ZDYwNzU1YTUwOTMzYTc3YmExZWIzODg2ODdkNzBlODdjZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmefKf9bWxyQmmArmratEyPFew5uv
NBDNuLQSUpZzl6gj38uTs8eHxl108ln1x+gG/AnufU3bDGzkkHqwMVGkIimYoFT/
QLurKFT4KUB7MIMhUidCqApHLYbWBzQ1+wJxREmWit5kjjs42F7BmjxQHA3Hi/iF
8WgjIKO1meUDJv1FVvX31+ydGFR8W4KgzTm2P06XhTZvaD1n85LBeWbolRq/9kkD
+jyp4GxY12Tjfg/WckZapDdgLA+0uLOCvS0fX65n7jD3FawPJVmD0gmdDzPlzZvu
UymwoMD8V08Nmx3gWCWKpDKMcV8hHPw0bR5HUs44rUMKwsADNxDUo1pIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOw11gdVpQkzp3uh6ziGh9cOh8/aMB8GA1UdIwQY
MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt
MDBjZDVlYzAwZDExLzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx
LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb76eSS2u
Zkaw/vkgVi4ZWjIh2NdZihjz9DRnJAzCzbUDtBBkCt0SZ7064z791hcuLq0tzV5b
fIKNREowu1FuZZn5kXSopNHm+Dh/suAwfueR2hzCV1i9tZJ3dD+ZjZBTSVeVsKaB
6Mlz71XV/vSWHc2Ztg/pcovQev1o5YDTLFT4ryrCfbbe4h22Y/RPTUjg2r/KuvBy
z+YrZcmI6Dy23ftU8WnVse37+4s7nXQa7nRVgsgT4nILMTD7zb8yRfoVOgs6CEM9
A24xalNW7MhHOs5ETvQBDq5a9CKJC3WVTNGIJcuDnroV3R93BrTSwoOQwDP3PAKW
9RUGfUnwV3Gkhg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:18 2025 by rpki-client