Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File: elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier: B/v4QY8gk1rbGLBaW17X64SRzbEup8dj77JIABqyHWk=
Subject key identifier: 04:35:E9:13:C4:76:32:E9:3C:D7:21:37:DD:C1:67:1E:A0:9D:1B:5C
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer: /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial: 0194BCA9A85B98303BF0442A19AD70A5FFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: /Hm5CSB7IckvIEQ+qLCafmQ4KMmlOvKErG8dSN1o9Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:5b:98:30:3b:f0:44:2a:19:ad:70:a5:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=0435e913c47632e93cd72137ddc1671ea09d1b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:2a:bd:c1:4a:fd:dc:db:ac:3d:c1:c2:7f:
b0:85:8b:86:35:61:a0:c1:b5:0b:99:19:da:b5:1f:
e1:88:09:ae:e3:bc:4c:9b:13:93:f7:7f:3e:7b:a3:
14:8e:09:b3:bd:50:32:5c:5c:6c:d1:c6:d4:ba:32:
35:df:06:d7:64:14:34:1e:98:53:c1:6f:f2:6c:2f:
4f:ea:e0:7b:e0:81:9a:3b:af:df:23:22:8b:80:c3:
79:83:ae:5e:37:39:c0:d9:86:dc:01:36:50:82:c9:
57:41:a5:b6:37:38:92:97:60:20:93:0e:58:6f:78:
91:81:2d:86:5f:18:99:21:54:80:b3:6a:50:6c:e1:
c6:2a:89:e5:d3:13:76:b1:72:e3:2e:46:95:b6:b4:
e6:44:db:22:8d:82:b8:90:52:0e:89:e8:c7:e3:50:
6f:f9:0a:1e:10:e2:d2:f7:e6:d3:b6:6c:65:71:eb:
a9:0d:93:f0:b0:12:a3:b9:75:12:e4:2b:38:6c:b1:
99:ca:8c:be:14:fa:69:0d:4e:5e:3b:13:bf:92:a8:
7b:6e:e8:b4:44:29:2c:8b:88:ef:45:dc:70:cd:90:
bf:fc:8d:31:b8:8c:bd:70:d0:39:ea:e4:84:25:cc:
5e:6b:0c:aa:c6:34:3b:9e:8d:d2:85:ec:9c:a8:8e:
dc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:35:E9:13:C4:76:32:E9:3C:D7:21:37:DD:C1:67:1E:A0:9D:1B:5C
X509v3 Authority Key Identifier:
keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:22:45:5a:c0:75:37:ab:24:d6:88:c2:c4:f9:d6:14:e9:26:
3c:36:f2:ff:6a:be:ad:be:e9:0c:27:99:11:9b:a2:7a:92:0c:
2a:97:2c:4a:bc:c2:c6:5a:4b:b2:56:3c:f5:27:c3:2d:7e:99:
7b:52:fb:b0:36:c2:74:50:bf:c1:30:7a:a2:c7:4b:23:65:5f:
7c:a5:43:4e:72:6f:c6:e4:6e:bb:90:c2:20:e8:f3:5d:1a:76:
97:c8:ad:bd:a9:d5:77:d8:7a:05:04:84:6d:4d:37:e9:4a:02:
c2:be:1b:4e:73:3b:48:85:55:da:52:ad:19:b6:0f:db:06:c6:
48:4d:8d:00:29:47:f5:56:b2:5d:aa:56:1a:5c:88:20:2c:5c:
96:4e:d3:2e:4b:ba:85:dc:31:f6:3b:6d:24:66:25:32:1a:bd:
3f:c1:bb:62:38:ef:81:00:7c:13:ad:b7:23:32:3e:8c:e5:59:
51:96:a4:4f:fa:e9:7f:44:37:52:47:7a:13:f1:45:34:05:e7:
29:0e:d0:a6:4c:0a:01:df:99:ec:bf:b4:56:aa:07:3a:23:fb:
e1:3f:d7:93:ec:89:e6:bb:76:65:81:bf:4a:b5:be:54:3e:bc:
26:0f:95:6f:ce:aa:e8:d0:ec:4d:46:bc:10:75:81:ef:b3:34:
c7:65:0b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qahbmDA78EQqGa1wpf/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNTU2YzE5YTQ1NTZmMzZmNzYwMDAwNmQ4ZWFjZDFmYTNm
NDM5ZjIwHhcNMjUwMTMxMTQwMDIyWhcNMjUwMjAxMTQwMDIyWjAzMTEwLwYDVQQD
EygwNDM1ZTkxM2M0NzYzMmU5M2NkNzIxMzdkZGMxNjcxZWEwOWQxYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw04qvcFK/dzbrD3Bwn+whYuGNWGg
wbULmRnatR/hiAmu47xMmxOT938+e6MUjgmzvVAyXFxs0cbUujI13wbXZBQ0HphT
wW/ybC9P6uB74IGaO6/fIyKLgMN5g65eNznA2YbcATZQgslXQaW2NziSl2Agkw5Y
b3iRgS2GXxiZIVSAs2pQbOHGKonl0xN2sXLjLkaVtrTmRNsijYK4kFIOiejH41Bv
+QoeEOLS9+bTtmxlceupDZPwsBKjuXUS5Cs4bLGZyoy+FPppDU5eOxO/kqh7bui0
RCksi4jvRdxwzZC//I0xuIy9cNA56uSEJcxeawyqxjQ7no3SheycqI7cuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ16RPEdjLpPNchN93BZx6gnRtcMB8GA1UdIwQY
MBaAFHpVbBmkVW8292AABtjqzR+j9DnyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NDIwNDYtM2Y1Zi00ZjRlLTkzMGMt
ZTNkMGEwYWNlMzk4LzEvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NDIwNDYtM2Y1Zi00ZjRlLTkzMGMtZTNkMGEwYWNlMzk4
LzEvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCJFWsB1
N6sk1ojCxPnWFOkmPDby/2q+rb7pDCeZEZuiepIMKpcsSrzCxlpLslY89SfDLX6Z
e1L7sDbCdFC/wTB6osdLI2VffKVDTnJvxuRuu5DCIOjzXRp2l8itvanVd9h6BQSE
bU036UoCwr4bTnM7SIVV2lKtGbYP2wbGSE2NAClH9VayXapWGlyIICxclk7TLku6
hdwx9jttJGYlMhq9P8G7YjjvgQB8E623IzI+jOVZUZakT/rpf0Q3Ukd6E/FFNAXn
KQ7QpkwKAd+Z7L+0VqoHOiP74T/Xk+yJ5rt2ZYG/SrW+VD68Jg+Vb86q6NDsTUa8
EHWB77M0x2ULtw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:03:12 2025 by rpki-client