Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: zKNRN+m2KOZkIHZC4dXyRvEnnB7GJk/8/E/Xn5+WSas=
Subject key identifier: 4D:9F:83:18:04:09:C3:0B:CD:90:E2:2B:A5:01:99:C5:8A:F9:69:B1
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 0194BC3BF81ECD8CB5A22B8B332C8B7E4461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0951
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: 6URuBj4GlULpB2nQGDmn6mcpkaB4orF6ms929e04lf0=)
3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f8:1e:cd:8c:b5:a2:2b:8b:33:2c:8b:7e:44:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=4d9f83180409c30bcd90e22ba50199c58af969b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:2f:15:db:2c:ef:2c:3a:36:5e:b1:01:bd:
5e:44:6e:dc:4b:fb:cb:d6:82:9d:71:bc:fe:a3:7c:
9a:3a:dd:46:0c:ac:a4:82:68:17:38:71:29:9a:23:
c1:10:e1:63:4c:ba:ba:23:c8:94:38:dd:f1:5b:19:
d4:2e:86:eb:06:98:42:bb:13:8c:9e:56:58:36:de:
25:0a:67:b4:76:1d:b8:33:ea:5e:de:4e:fc:4b:47:
95:e6:43:ae:72:83:1c:20:23:fd:92:46:71:29:4a:
1c:c1:b6:db:ab:6d:02:74:f2:bc:15:51:63:f9:38:
97:30:16:26:91:a0:9e:05:26:57:cd:f5:9d:29:0c:
fb:8c:47:eb:bf:9e:e7:af:07:95:de:31:1d:fe:86:
3b:89:20:cb:89:24:6e:b6:de:bf:b9:1f:77:93:3a:
03:0a:54:1e:0c:f4:09:4f:ff:af:f0:89:30:25:0b:
e1:09:e2:eb:e6:83:8c:33:24:63:fb:26:28:51:cf:
b9:27:18:f0:d7:08:29:f8:11:62:4b:ed:38:dd:1c:
e5:64:7b:a5:47:ef:b0:e6:d3:fa:7e:f8:1c:d4:fa:
36:b3:63:e6:35:9d:ab:b5:e9:95:f3:ee:77:b6:c8:
23:3a:27:21:df:7a:a7:3e:2e:25:18:72:96:b8:91:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:83:18:04:09:C3:0B:CD:90:E2:2B:A5:01:99:C5:8A:F9:69:B1
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9c:68:bb:91:89:ae:22:04:d1:4e:4e:aa:52:67:ad:4a:ab:
40:4d:de:62:19:18:62:78:4f:20:85:23:1e:2c:be:bb:f1:39:
83:c7:72:72:a7:a5:80:e3:6d:73:bc:37:fe:65:fc:f7:c9:24:
f7:28:a9:b6:a7:e4:f8:8b:74:4c:83:52:fe:b7:6f:18:b4:61:
01:f9:85:a7:c8:71:fd:e5:0e:19:07:c1:e3:42:ec:86:ec:6a:
5e:b0:20:28:cb:44:82:0e:94:35:0e:f7:1e:da:d2:8f:0a:4f:
7a:c3:ae:e4:95:89:d8:ac:ac:b9:fd:22:03:e5:1e:cf:f7:39:
2a:d8:fa:ec:db:ed:a5:ff:49:b1:ee:a4:ec:18:05:71:82:30:
d3:8e:94:b6:0a:76:1b:2d:9d:18:3a:21:31:39:8b:2a:e2:76:
67:e8:27:e7:2f:cc:a4:dc:21:16:47:56:0d:ec:16:3f:ac:79:
61:fd:5f:37:c7:21:8d:01:50:b9:11:a5:6c:c2:fa:45:d7:c8:
17:62:e9:79:aa:80:ba:57:24:a5:6d:70:e5:36:30:b6:34:70:
76:f7:e4:7b:d1:6d:0b:b7:be:38:da:51:32:2d:d0:53:c7:90:
5f:c8:b9:78:1b:44:a6:88:05:f6:c3:6f:bf:f1:1c:27:c5:f0:
ef:e7:47:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/gezYy1oiuLMyyLfkRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODg2ZTMzOTcxMDE0ZjBlMzVmYWU2ZWUzNTVhOTVlZTUz
ZjEzOTcwHhcNMjUwMTMxMTIwMDM0WhcNMjUwMjAxMTIwMDM0WjAzMTEwLwYDVQQD
Eyg0ZDlmODMxODA0MDljMzBiY2Q5MGUyMmJhNTAxOTljNThhZjk2OWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyAvFdss7yw6Nl6xAb1eRG7cS/vL
1oKdcbz+o3yaOt1GDKykgmgXOHEpmiPBEOFjTLq6I8iUON3xWxnULobrBphCuxOM
nlZYNt4lCme0dh24M+pe3k78S0eV5kOucoMcICP9kkZxKUocwbbbq20CdPK8FVFj
+TiXMBYmkaCeBSZXzfWdKQz7jEfrv57nrweV3jEd/oY7iSDLiSRutt6/uR93kzoD
ClQeDPQJT/+v8IkwJQvhCeLr5oOMMyRj+yYoUc+5Jxjw1wgp+BFiS+043RzlZHul
R++w5tP6fvgc1Po2s2PmNZ2rtemV8+53tsgjOich33qnPi4lGHKWuJHkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2fgxgECcMLzZDiK6UBmcWK+WmxMB8GA1UdIwQY
MBaAFHuIbjOXEBTw41+ubuNVqV7lPxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEt
M2QwZGI4ZWI0ZTEzLzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEtM2QwZGI4ZWI0ZTEz
LzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJxou5GJ
riIE0U5OqlJnrUqrQE3eYhkYYnhPIIUjHiy+u/E5g8dycqelgONtc7w3/mX898kk
9yiptqfk+It0TINS/rdvGLRhAfmFp8hx/eUOGQfB40LshuxqXrAgKMtEgg6UNQ73
HtrSjwpPesOu5JWJ2Kysuf0iA+Uez/c5Ktj67Nvtpf9Jse6k7BgFcYIw046Utgp2
Gy2dGDohMTmLKuJ2Z+gn5y/MpNwhFkdWDewWP6x5Yf1fN8chjQFQuRGlbML6RdfI
F2LpeaqAulckpW1w5TYwtjRwdvfke9FtC7e+ONpRMi3QU8eQX8i5eBtEpogF9sNv
v/EcJ8Xw7+dHFQ==
-----END CERTIFICATE-----
Generated at Thu May 1 06:34:43 2025 by rpki-client