Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier: TTm/cup7zWsqyQ/ruQcCtSxuOYxCoOrjaFdxk5+taOg=
Subject key identifier: 3B:56:9D:93:E0:12:EC:A4:BA:BB:DB:EE:E5:41:55:9D:EE:8E:3F:0E
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 0194BC3BD1E23AA3A5E1BEDD5115B09A553F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number: 0E21
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: sGxBw/ZqXuo21ZnjOl+o30xaUSKFgOW91E1+FbF95es=)
2: qvDSjgW1rEvWcrU4jpSi6rsDCpM.roa (hash: T8Hf/3k6CSkU6S1AK65rkEFSmvPdWLsEssJ2od+QI9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:e2:3a:a3:a5:e1:be:dd:51:15:b0:9a:55:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=3b569d93e012eca4babbdbeee541559dee8e3f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:65:01:f2:1f:32:ca:3e:be:da:84:e6:19:
18:e8:e6:b1:1d:76:0e:29:cf:71:af:11:19:55:04:
d5:96:0a:66:62:13:58:b1:2b:c4:21:a9:f6:86:93:
e3:98:8f:a8:9b:13:d2:60:22:ad:85:ec:5b:0d:80:
cf:d5:5c:02:6e:08:50:d7:a3:52:5b:41:3e:86:33:
e7:09:a9:c3:cb:4e:88:94:ac:73:03:80:e0:9d:72:
6f:7a:60:19:10:5d:44:e8:78:61:8d:a6:cd:56:9c:
5c:09:11:73:14:d2:5a:16:4c:31:14:2a:b5:0a:7f:
f0:33:c8:75:db:78:0b:a6:d5:ef:b4:06:ca:0d:43:
02:ab:59:9c:23:f5:c5:17:5a:7a:a6:67:e2:b0:9c:
df:79:08:22:ab:e2:ee:ab:05:87:3d:8f:07:79:3a:
05:dd:c2:e3:5d:a2:ca:d8:7f:42:21:09:2a:08:54:
34:d4:4a:f1:51:86:6a:04:52:c1:63:1f:d3:68:0b:
12:b4:c1:2c:24:eb:20:75:e9:cc:28:bb:5e:4a:82:
f2:8f:1c:2c:80:8e:a6:0e:d2:b6:5f:2b:48:57:83:
d9:c2:5d:a4:df:cb:b2:47:93:01:1e:63:df:a0:ae:
53:e8:48:41:cc:f3:45:14:e3:3d:0d:49:5c:37:22:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:56:9D:93:E0:12:EC:A4:BA:BB:DB:EE:E5:41:55:9D:EE:8E:3F:0E
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:e9:99:ca:df:e5:c8:44:a1:6e:35:63:ca:be:15:be:fd:
d0:ce:e9:20:1f:7a:d0:82:6f:b5:c8:6c:f6:20:d3:75:fe:04:
e1:50:da:52:96:f2:36:07:5e:ee:75:01:19:7e:63:83:7c:2c:
9b:3f:38:66:9b:b7:eb:a2:35:fe:f2:95:82:b2:ab:a5:d0:2d:
0f:34:2e:ce:a7:ef:48:38:70:91:6f:26:21:ec:5e:98:73:9d:
ca:0a:30:27:e5:78:66:9f:9f:76:1a:d8:44:25:4e:b2:28:04:
d1:9c:89:83:98:c3:7a:ea:90:df:4c:51:55:47:6a:df:35:3c:
e2:3b:ae:be:dc:a5:b7:e6:ea:8f:d0:9b:24:b3:17:d0:07:9b:
99:7b:f8:dd:90:d7:02:df:07:19:b7:26:5a:47:b5:a4:fa:3e:
43:9d:88:dd:86:68:34:24:96:56:48:cb:f2:e0:b8:00:11:0b:
08:6c:68:d8:b4:98:d4:91:39:4f:ab:bb:7b:80:06:d6:c2:91:
9f:78:fd:be:73:e2:a1:f6:43:f7:fc:e9:b9:d5:30:ad:0c:5a:
6c:84:82:d7:a0:29:cb:65:b1:b1:8b:aa:86:38:9e:f5:e3:5e:
02:8f:e1:8b:f1:81:2f:41:5e:82:b8:df:31:c7:8f:06:20:6e:
01:f9:50:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9HiOqOl4b7dURWwmlU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYzMxMzE5NzZhZWEyN2QxNzFjNmMyNjdhOThkM2YzODJh
NjFhMmEwHhcNMjUwMTMxMTIwMDI0WhcNMjUwMjAxMTIwMDI0WjAzMTEwLwYDVQQD
EygzYjU2OWQ5M2UwMTJlY2E0YmFiYmRiZWVlNTQxNTU5ZGVlOGUzZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwadlAfIfMso+vtqE5hkY6OaxHXYO
Kc9xrxEZVQTVlgpmYhNYsSvEIan2hpPjmI+omxPSYCKthexbDYDP1VwCbghQ16NS
W0E+hjPnCanDy06IlKxzA4DgnXJvemAZEF1E6HhhjabNVpxcCRFzFNJaFkwxFCq1
Cn/wM8h123gLptXvtAbKDUMCq1mcI/XFF1p6pmfisJzfeQgiq+LuqwWHPY8HeToF
3cLjXaLK2H9CIQkqCFQ01ErxUYZqBFLBYx/TaAsStMEsJOsgdenMKLteSoLyjxws
gI6mDtK2XytIV4PZwl2k38uyR5MBHmPfoK5T6EhBzPNFFOM9DUlcNyJmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtWnZPgEuykurvb7uVBVZ3ujj8OMB8GA1UdIwQY
MBaAFO7DExl2rqJ9FxxsJnqY0/OCphoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEt
NGNkM2U3MzIxNmYxLzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEtNGNkM2U3MzIxNmYx
LzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo27pmcrf
5chEoW41Y8q+Fb790M7pIB960IJvtchs9iDTdf4E4VDaUpbyNgde7nUBGX5jg3ws
mz84Zpu366I1/vKVgrKrpdAtDzQuzqfvSDhwkW8mIexemHOdygowJ+V4Zp+fdhrY
RCVOsigE0ZyJg5jDeuqQ30xRVUdq3zU84juuvtylt+bqj9CbJLMX0AebmXv43ZDX
At8HGbcmWke1pPo+Q52I3YZoNCSWVkjL8uC4ABELCGxo2LSY1JE5T6u7e4AG1sKR
n3j9vnPiofZD9/zpudUwrQxabISC16Apy2WxsYuqhjie9eNeAo/hi/GBL0Fegrjf
McePBiBuAflQIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:08 2025 by rpki-client