Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File: ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier: W4tL+GJ1yueMUT+XQYZulLEYbJMwND4XqIwSQgNJRo0=
Subject key identifier: 72:06:62:05:A4:20:C4:09:00:24:F3:D3:96:55:9A:72:6A:73:B4:2B
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 0194BD8587DFDC30A8133EB737CC63D73ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number: 0B88
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: UvvVIoBvUG5_jxdhtW2WfQIxFDE.roa (hash: wE8yIMDdETy+IhUlqCWoU56yeiWPmr5aS7jnynBmtsk=)
2: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: zO9Yd5mGfL9fJXDr165aGxKUypC9h6dYtfVsAR7vidg=)
3: nArRHp-4C_xfVc5I0xzODMyX0Wc.roa (hash: unbAaPNeb8ss923AiSBNv55C1f+CW+UAKQwmAnYXVMU=)
4: ykzqitomWOX9VDgPXh0lfRNIPGs.roa (hash: sexKwZGXJqgH8EP0OUhLDrGvQUeJF4VTHV0LtWwcjpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:87:df:dc:30:a8:13:3e:b7:37:cc:63:d7:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=72066205a420c4090024f3d396559a726a73b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:e3:3f:7e:b4:a7:ed:36:01:d4:96:5c:4e:
ed:ec:17:8b:fa:7e:3e:64:c1:60:c7:c4:c0:9d:f7:
d8:76:f3:0f:9d:11:59:5a:d4:66:ae:f6:51:3e:dc:
aa:93:2b:15:c2:11:c3:21:57:11:5e:21:85:71:a7:
86:9f:d2:67:a1:70:20:a8:ef:0a:0d:7b:7c:26:e2:
4a:f8:f8:ba:26:f8:66:74:94:ac:2e:90:a2:55:24:
7e:80:54:9b:ad:7c:ae:80:63:e7:a8:44:a2:4f:18:
9c:9b:ea:f4:43:e9:3d:bc:bf:07:d1:e2:54:2c:3d:
3e:a4:22:58:9c:b4:65:05:c6:b8:3f:8a:9a:96:a6:
39:fa:fb:ed:eb:9d:da:85:4e:8a:1a:13:13:75:dd:
35:7b:fe:88:8f:2b:dc:e4:65:36:2f:01:ee:d8:6f:
d3:34:e6:91:e3:67:a4:21:2d:52:04:c0:aa:71:54:
c5:aa:9f:69:ef:3a:5f:79:95:0d:95:23:01:b4:83:
34:18:20:af:f7:35:ca:62:a4:a5:5d:96:60:c2:53:
4b:30:b9:93:4f:63:a4:5b:9d:c2:53:77:5c:f9:66:
a2:f9:49:3b:07:e8:27:8c:a1:00:b6:2b:25:f1:27:
fa:96:a0:29:26:25:93:01:f4:5c:97:dd:d4:07:06:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:06:62:05:A4:20:C4:09:00:24:F3:D3:96:55:9A:72:6A:73:B4:2B
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f6:31:9c:e6:b8:8f:0c:67:57:31:aa:d0:ef:70:31:5b:71:
63:30:5d:e1:b7:34:0f:79:a4:01:e2:c2:d6:57:01:36:cf:53:
38:6f:af:49:75:5a:d5:a5:8f:7d:f0:e5:68:68:31:04:ff:9c:
d6:75:1b:06:64:72:2f:9d:02:69:ec:a9:32:74:9a:af:dc:76:
f1:dd:7f:74:bb:a2:6f:4e:76:99:3e:c7:26:f2:51:26:a3:8d:
d5:ad:67:89:8c:4f:70:5e:d2:f5:9a:6f:ef:fc:87:8d:e4:ae:
8c:be:5d:51:bf:b5:d9:3a:e5:b3:80:4f:6e:0b:95:42:76:ea:
02:b6:2e:1d:6a:b9:24:11:ae:cf:ca:0c:37:3d:ee:1e:e6:a5:
06:a6:ac:de:15:a2:f2:e3:3d:91:93:e3:2f:66:1c:b9:d7:e2:
f4:d4:00:c0:84:61:9a:c7:e5:ee:63:f5:7a:c6:fe:d6:a8:4c:
20:96:f8:19:46:a4:56:46:ad:a6:0a:59:25:d0:30:7c:f2:44:
4b:d1:1a:db:ed:d0:b0:7d:b2:3b:d7:57:10:3a:6e:b8:1b:28:
3d:64:b1:e7:2f:ea:59:13:6f:b7:7e:f8:f5:d0:66:2c:d0:94:
c9:6a:93:5f:af:e5:fa:ed:23:e3:62:61:2a:95:f8:2a:33:aa:
98:4b:80:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYff3DCoEz63N8xj1z7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmIwOTlhYTQzMDgxYWM4Mzk1ZWUwYjkwY2NmMWE4ODQ0
ZjhkNjQwHhcNMjUwMTMxMTgwMDMyWhcNMjUwMjAxMTgwMDMyWjAzMTEwLwYDVQQD
Eyg3MjA2NjIwNWE0MjBjNDA5MDAyNGYzZDM5NjU1OWE3MjZhNzNiNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBTjP360p+02AdSWXE7t7BeL+n4+
ZMFgx8TAnffYdvMPnRFZWtRmrvZRPtyqkysVwhHDIVcRXiGFcaeGn9JnoXAgqO8K
DXt8JuJK+Pi6JvhmdJSsLpCiVSR+gFSbrXyugGPnqESiTxicm+r0Q+k9vL8H0eJU
LD0+pCJYnLRlBca4P4qalqY5+vvt653ahU6KGhMTdd01e/6Ijyvc5GU2LwHu2G/T
NOaR42ekIS1SBMCqcVTFqp9p7zpfeZUNlSMBtIM0GCCv9zXKYqSlXZZgwlNLMLmT
T2OkW53CU3dc+Wai+Uk7B+gnjKEAtisl8Sf6lqApJiWTAfRcl93UBwbJswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIGYgWkIMQJACTz05ZVmnJqc7QrMB8GA1UdIwQY
MBaAFHj7CZqkMIGsg5XuC5DM8aiET41kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMt
MmQ4YThkOTY2OWY4LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMtMmQ4YThkOTY2OWY4
LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePYxnOa4
jwxnVzGq0O9wMVtxYzBd4bc0D3mkAeLC1lcBNs9TOG+vSXVa1aWPffDlaGgxBP+c
1nUbBmRyL50CaeypMnSar9x28d1/dLuib052mT7HJvJRJqON1a1niYxPcF7S9Zpv
7/yHjeSujL5dUb+12Trls4BPbguVQnbqArYuHWq5JBGuz8oMNz3uHualBqas3hWi
8uM9kZPjL2Ycudfi9NQAwIRhmsfl7mP1esb+1qhMIJb4GUakVkatpgpZJdAwfPJE
S9Ea2+3QsH2yO9dXEDpuuBsoPWSx5y/qWRNvt3749dBmLNCUyWqTX6/l+u0j42Jh
KpX4KjOqmEuAFA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:43 2025 by rpki-client