Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: LXvfp+FKZT2AHunAj5/2BPbugdTWmpukyhxVr03L7qo=
Subject key identifier: 22:CF:88:93:85:E5:45:ED:3B:63:8B:BE:95:74:8E:34:01:60:D5:7E
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 0194BCE0AE199F3C5995D8166CBEA87621D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0C1F
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: onrYOaOFNsMO6pquEqwGzvUdTOz1WR3VTXjOne5nS7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:19:9f:3c:59:95:d8:16:6c:be:a8:76:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=22cf889385e545ed3b638bbe95748e340160d57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:5e:dd:a8:26:2f:d1:2a:8a:02:06:a3:bb:
b2:b3:d4:f3:82:e1:6c:66:fd:b7:0c:62:a6:15:74:
02:1b:c5:73:81:9e:68:ed:f5:02:53:f2:69:92:b4:
9c:6d:89:39:ef:f8:1b:ca:be:5a:c7:d2:8e:cb:84:
20:e9:9d:92:b4:7b:17:e0:e2:8d:b1:13:c7:f5:0c:
6c:96:01:2d:e2:6f:01:cd:da:ef:2b:b5:28:07:73:
79:df:b2:dc:1d:8d:28:69:1d:3c:f1:d4:00:02:82:
8c:20:6a:a6:91:ad:5a:77:75:9e:48:18:91:e6:93:
65:19:4a:90:e4:b5:30:64:e5:7e:7c:13:f8:15:27:
83:cf:3b:cc:16:af:29:49:fa:0f:27:e9:ac:28:47:
12:ea:67:da:aa:3c:06:b6:91:cd:74:3b:43:71:cc:
fd:5c:7f:8a:39:b2:44:45:14:91:2d:01:17:41:d2:
df:2b:f1:52:37:2c:84:a4:c4:b3:92:15:bf:57:a1:
d7:09:cf:fc:ae:b8:08:e1:9c:67:11:be:76:15:eb:
5d:ae:9e:3a:2e:79:4c:67:14:cd:59:6c:94:a1:04:
6d:92:61:fb:06:bc:27:82:44:5c:09:9b:10:67:68:
cc:df:6f:c5:02:c0:11:04:5b:60:57:7f:e5:7a:8d:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CF:88:93:85:E5:45:ED:3B:63:8B:BE:95:74:8E:34:01:60:D5:7E
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:d3:a4:ac:16:46:77:f2:30:72:07:16:42:c0:a9:43:17:
23:cc:c5:f5:ba:0a:74:5b:fe:34:0c:f3:b1:fc:04:de:ed:9e:
ff:91:44:f9:e2:04:7b:24:0e:74:11:06:03:c5:bb:ab:95:c1:
dd:b7:c5:d1:fb:67:64:70:5e:77:6d:9b:5e:03:9a:7d:70:ff:
9e:1f:7d:d2:7c:ca:50:61:f6:0b:04:58:93:cd:b5:70:65:32:
4c:f6:97:2c:8e:17:30:28:46:83:a2:85:3c:91:07:3b:50:a0:
09:86:b5:c5:7e:88:f9:71:b7:0f:95:e0:8c:e9:0a:3d:9c:e4:
da:c6:99:cf:c9:c3:ec:b3:8c:22:29:02:b1:d0:6b:7e:03:6c:
ae:82:f7:3a:2b:91:98:8d:69:c7:ff:a2:42:08:74:57:85:a7:
65:41:16:f7:fd:d4:e8:ca:d0:d6:a9:58:0d:a3:e5:f7:52:8b:
c3:1c:13:20:fc:17:c0:c4:31:11:8f:ba:79:ef:3d:cc:e0:2b:
e6:96:63:32:b1:66:4f:c8:c2:38:12:92:21:03:7c:25:26:93:
a1:99:a0:d2:6b:6a:d5:bc:7b:6a:15:f2:ab:94:34:ab:84:79:
d4:4a:c1:7c:47:59:3c:49:13:9d:e3:45:b2:69:6f:6d:51:d7:
1b:da:9f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84K4ZnzxZldgWbL6odiHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZjJlMzViM2M1NTliNmQ4NDM2NjdjYWQ1ZGFjNjc0ZTAx
Yjk2YzMwHhcNMjUwMTMxMTUwMDI4WhcNMjUwMjAxMTUwMDI4WjAzMTEwLwYDVQQD
EygyMmNmODg5Mzg1ZTU0NWVkM2I2MzhiYmU5NTc0OGUzNDAxNjBkNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMxe3agmL9EqigIGo7uys9TzguFs
Zv23DGKmFXQCG8VzgZ5o7fUCU/JpkrScbYk57/gbyr5ax9KOy4Qg6Z2StHsX4OKN
sRPH9QxslgEt4m8BzdrvK7UoB3N537LcHY0oaR088dQAAoKMIGqmka1ad3WeSBiR
5pNlGUqQ5LUwZOV+fBP4FSeDzzvMFq8pSfoPJ+msKEcS6mfaqjwGtpHNdDtDccz9
XH+KObJERRSRLQEXQdLfK/FSNyyEpMSzkhW/V6HXCc/8rrgI4ZxnEb52Fetdrp46
LnlMZxTNWWyUoQRtkmH7BrwngkRcCZsQZ2jM32/FAsARBFtgV3/leo2s1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLPiJOF5UXtO2OLvpV0jjQBYNV+MB8GA1UdIwQY
MBaAFBHy41s8VZtthDZnytXaxnTgG5bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUt
MjUwYTllNjcwOGQwLzEvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUtMjUwYTllNjcwOGQw
LzEvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6rTpKwW
RnfyMHIHFkLAqUMXI8zF9boKdFv+NAzzsfwE3u2e/5FE+eIEeyQOdBEGA8W7q5XB
3bfF0ftnZHBed22bXgOafXD/nh990nzKUGH2CwRYk821cGUyTPaXLI4XMChGg6KF
PJEHO1CgCYa1xX6I+XG3D5XgjOkKPZzk2saZz8nD7LOMIikCsdBrfgNsroL3OiuR
mI1px/+iQgh0V4WnZUEW9/3U6MrQ1qlYDaPl91KLwxwTIPwXwMQxEY+6ee89zOAr
5pZjMrFmT8jCOBKSIQN8JSaToZmg0mtq1bx7ahXyq5Q0q4R51ErBfEdZPEkTneNF
smlvbVHXG9qfMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:15 2025 by rpki-client