Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: 3Eu1wO5XRkmHiqzHOhKs6H+NQKK/CRiqMjPb2HvVNa0=
Subject key identifier: 19:DB:0F:27:4E:CA:35:3E:08:0D:C4:B6:28:6F:B4:01:F8:71:05:92
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 0194BCAA512BD08B4572C59CA6F2F6F496CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:01:05 +0000
Manifest this update: Fri 31 Jan 2025 14:01:05 +0000
Manifest next update: Sat 01 Feb 2025 14:01:05 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: XfedGG8ItUXQzthNPsiGdDUeTqy6bCDzX+X8sHe2ArE=)
2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:51:2b:d0:8b:45:72:c5:9c:a6:f2:f6:f4:96:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Jan 31 14:01:05 2025 GMT
Not After : Feb 1 14:01:05 2025 GMT
Subject: CN=19db0f274eca353e080dc4b6286fb401f8710592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:43:1c:c6:fd:15:d3:e5:45:e9:ea:d2:2d:
e7:df:74:a0:66:c9:00:2d:79:57:92:8e:8c:e6:16:
84:e3:66:cc:fa:93:ba:52:be:48:04:2c:82:b7:ef:
e7:fe:2d:3b:82:42:7a:8e:1c:cc:1d:7c:17:ca:cf:
0a:9f:5d:d2:b2:1c:3c:71:54:ed:4e:44:3d:a7:65:
b3:12:11:ad:e8:1c:34:a1:e2:cf:af:85:51:65:3a:
ae:67:81:84:53:68:65:3b:fe:ee:b6:26:6b:72:55:
45:74:37:e6:78:bb:24:53:00:a1:9c:b9:14:cb:07:
5d:94:48:99:d4:09:84:61:33:23:c1:78:68:99:48:
3a:f0:32:c5:13:88:55:f6:b7:be:3e:32:0e:51:f1:
80:5a:6e:00:46:b0:02:75:b0:79:b6:3e:c3:fd:9f:
21:80:db:31:95:71:0b:33:f8:34:44:5a:04:d5:1f:
7e:9c:6b:4e:1e:c5:a5:b2:ba:21:e6:b4:af:64:54:
8b:c3:01:a9:b3:91:3b:e6:63:8e:06:fb:13:c6:d7:
03:0a:78:a8:ce:90:ed:15:f6:cc:f0:d9:d6:31:c5:
09:4e:ad:a9:ec:8d:17:9d:3d:5e:8d:1f:07:60:d0:
cb:b6:db:bf:17:01:d5:ce:3b:33:2b:1e:83:e6:87:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:0F:27:4E:CA:35:3E:08:0D:C4:B6:28:6F:B4:01:F8:71:05:92
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c3:be:d1:fe:29:7c:24:39:3f:ba:5d:86:0b:1c:89:51:75:
6b:3c:3f:ff:65:4c:40:2f:b4:58:db:63:af:45:11:ce:c8:23:
e1:ae:0a:7f:0d:ef:ef:13:24:d6:26:8e:6d:6f:54:73:ec:bb:
14:0e:45:93:6a:dd:a6:da:43:bd:8a:02:aa:55:de:4c:c3:8c:
4e:de:54:8f:e0:03:ba:c9:6e:9d:65:74:7a:6c:92:96:40:b0:
78:1c:52:d7:44:83:96:d9:c4:53:b1:a9:09:48:f4:30:5c:41:
06:d2:33:09:e9:f2:bd:2e:bd:28:ae:ee:43:e2:6d:4a:70:23:
f9:c8:01:56:65:5f:02:fe:e0:7b:b0:55:e5:b9:ce:37:5f:a2:
78:1b:0e:04:c9:30:63:71:d8:ed:f6:41:a3:8a:82:3b:86:09:
62:a4:63:a8:16:13:0b:d9:db:bc:5e:1c:b4:56:4b:cb:0a:ae:
08:32:a3:9d:91:cc:51:b4:7e:aa:58:a6:0c:a7:f4:62:7f:5c:
cd:f7:b2:a7:96:87:41:68:f4:a3:a6:27:b4:b1:b0:36:02:30:
fa:68:0e:62:b6:f1:95:d3:b7:9a:17:c3:86:f6:05:a8:12:e5:
09:e4:5f:02:d7:ae:e3:39:de:95:92:ef:1e:f1:f7:77:83:a5:
57:93:03:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qlEr0ItFcsWcpvL29JbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy
ZTkwODYwHhcNMjUwMTMxMTQwMTA1WhcNMjUwMjAxMTQwMTA1WjAzMTEwLwYDVQQD
EygxOWRiMGYyNzRlY2EzNTNlMDgwZGM0YjYyODZmYjQwMWY4NzEwNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rlDHMb9FdPlRenq0i3n33SgZskA
LXlXko6M5haE42bM+pO6Ur5IBCyCt+/n/i07gkJ6jhzMHXwXys8Kn13Sshw8cVTt
TkQ9p2WzEhGt6Bw0oeLPr4VRZTquZ4GEU2hlO/7utiZrclVFdDfmeLskUwChnLkU
ywddlEiZ1AmEYTMjwXhomUg68DLFE4hV9re+PjIOUfGAWm4ARrACdbB5tj7D/Z8h
gNsxlXELM/g0RFoE1R9+nGtOHsWlsroh5rSvZFSLwwGps5E75mOOBvsTxtcDCnio
zpDtFfbM8NnWMcUJTq2p7I0XnT1ejR8HYNDLttu/FwHVzjszKx6D5oet+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnbDydOyjU+CA3EtihvtAH4cQWSMB8GA1UdIwQY
MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt
MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0
LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8O+0f4p
fCQ5P7pdhgsciVF1azw//2VMQC+0WNtjr0URzsgj4a4Kfw3v7xMk1iaObW9Uc+y7
FA5Fk2rdptpDvYoCqlXeTMOMTt5Uj+ADuslunWV0emySlkCweBxS10SDltnEU7Gp
CUj0MFxBBtIzCenyvS69KK7uQ+JtSnAj+cgBVmVfAv7ge7BV5bnON1+ieBsOBMkw
Y3HY7fZBo4qCO4YJYqRjqBYTC9nbvF4ctFZLywquCDKjnZHMUbR+qlimDKf0Yn9c
zfeyp5aHQWj0o6YntLGwNgIw+mgOYrbxldO3mhfDhvYFqBLlCeRfAteu4znelZLv
HvH3d4OlV5MDlg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:27 2025 by rpki-client