Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: HeZp48T7Lgx/veKZ9/JSoNjzcc9ukyWp0pjzI20smCM=
Subject key identifier: 85:EE:DD:AE:FE:1F:BB:62:F3:AB:FE:37:88:CB:BD:61:3A:D8:66:DD
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 0194BCA9B8BC6D7EE503E87C5CC882270A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 0387
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: hfDIl9dIER2U6YV7t1KplpOvlF4I+/XcmnwOuLN4ldg=)
2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b8:bc:6d:7e:e5:03:e8:7c:5c:c8:82:27:0a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=85eeddaefe1fbb62f3abfe3788cbbd613ad866dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:9d:11:31:37:45:25:d8:08:5d:61:71:2c:
e4:e5:10:a1:b7:a2:12:8f:24:47:c8:17:32:4a:9d:
cb:55:c2:57:7b:9d:82:58:a7:69:68:b4:0d:00:44:
e3:f9:85:df:0f:37:30:22:88:3c:38:59:8a:ad:e8:
71:d2:71:40:08:49:98:49:2e:41:67:5e:c0:11:89:
8d:7f:9f:41:1d:14:a9:09:45:87:35:d7:d5:f3:f5:
f7:7f:ce:79:d6:71:17:e8:70:93:5c:ba:7f:38:0a:
95:41:72:0f:c8:c3:d6:50:f1:e1:41:3d:17:0b:9a:
2e:fe:10:64:12:35:bd:91:03:7e:27:ed:39:6c:6f:
10:6d:2e:8d:57:dc:09:a7:de:72:be:4d:37:a7:55:
b8:e7:f3:17:f8:6d:17:c8:ea:23:fb:5b:e7:27:55:
f9:3c:57:54:f9:89:40:c6:75:25:f3:bb:52:94:87:
90:a3:c5:3c:02:10:38:56:96:a7:2a:3e:08:8a:f8:
b5:ba:b5:3e:7b:02:20:79:7e:ce:c4:1e:42:4d:8b:
58:fc:9a:50:f2:97:1a:00:37:d2:bb:df:a8:d9:ea:
cb:00:6f:eb:be:e7:7f:aa:55:bd:c1:c0:b7:ec:a0:
3b:f2:32:de:63:d9:06:15:78:c1:26:59:14:20:37:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EE:DD:AE:FE:1F:BB:62:F3:AB:FE:37:88:CB:BD:61:3A:D8:66:DD
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a6:60:ca:45:5c:ac:c9:74:2a:17:7a:8e:47:0f:1f:b6:dd:
65:ec:14:d8:b1:2b:d7:ba:1d:62:a3:50:ae:db:bc:ab:2b:fc:
2d:0f:2a:a9:12:fe:3c:24:95:e2:31:df:da:e2:fb:94:c1:36:
6e:4c:f7:62:be:62:c2:15:12:4f:a9:76:3b:c2:da:91:30:ff:
e2:94:dd:ba:df:b2:9c:69:4f:ec:4d:42:83:ac:85:36:3c:ee:
c0:56:84:95:bd:7f:4c:0b:0f:50:59:95:f4:69:a1:16:83:a7:
e8:8f:a5:d7:f4:c2:12:14:08:a0:ab:42:07:b5:6d:b1:41:26:
6f:2f:9e:72:5e:06:2d:55:4a:d3:a0:af:3f:cb:45:5a:81:e5:
53:17:c2:80:64:c0:6b:dd:8a:22:df:5d:65:ff:34:76:b3:c9:
7a:e2:49:88:13:1b:52:23:a0:08:31:16:d4:70:81:98:92:78:
93:51:e5:90:14:33:ae:ca:8b:52:ad:b4:be:bd:60:4f:43:89:
8d:cf:2c:97:bf:19:79:98:9b:a6:a2:07:d6:66:37:f3:fe:a5:
58:cb:b8:24:89:18:c9:ae:d1:69:e4:6f:ad:81:2a:61:6f:03:
94:59:ac:9e:dd:c2:61:73:1f:91:04:ac:1f:f7:fc:26:6b:c3:
f0:1c:bc:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbi8bX7lA+h8XMiCJwoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmE4ZWMwM2VlYzNiY2ZjMzNjZjkwZjFmNGY4ZTdlOTAy
MzRlNjkwHhcNMjUwMTMxMTQwMDI2WhcNMjUwMjAxMTQwMDI2WjAzMTEwLwYDVQQD
Eyg4NWVlZGRhZWZlMWZiYjYyZjNhYmZlMzc4OGNiYmQ2MTNhZDg2NmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BmdETE3RSXYCF1hcSzk5RCht6IS
jyRHyBcySp3LVcJXe52CWKdpaLQNAETj+YXfDzcwIog8OFmKrehx0nFACEmYSS5B
Z17AEYmNf59BHRSpCUWHNdfV8/X3f8551nEX6HCTXLp/OAqVQXIPyMPWUPHhQT0X
C5ou/hBkEjW9kQN+J+05bG8QbS6NV9wJp95yvk03p1W45/MX+G0XyOoj+1vnJ1X5
PFdU+YlAxnUl87tSlIeQo8U8AhA4VpanKj4Iivi1urU+ewIgeX7OxB5CTYtY/JpQ
8pcaADfSu9+o2erLAG/rvud/qlW9wcC37KA78jLeY9kGFXjBJlkUIDefNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXu3a7+H7ti86v+N4jLvWE62GbdMB8GA1UdIwQY
MBaAFO8qjsA+7DvPwzz5Dx9Pjn6QI05pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUt
MDVjMDY3OTZlOTM4LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUtMDVjMDY3OTZlOTM4
LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKZgykVc
rMl0Khd6jkcPH7bdZewU2LEr17odYqNQrtu8qyv8LQ8qqRL+PCSV4jHf2uL7lME2
bkz3Yr5iwhUST6l2O8LakTD/4pTdut+ynGlP7E1Cg6yFNjzuwFaElb1/TAsPUFmV
9GmhFoOn6I+l1/TCEhQIoKtCB7VtsUEmby+ecl4GLVVK06CvP8tFWoHlUxfCgGTA
a92KIt9dZf80drPJeuJJiBMbUiOgCDEW1HCBmJJ4k1HlkBQzrsqLUq20vr1gT0OJ
jc8sl78ZeZibpqIH1mY38/6lWMu4JIkYya7RaeRvrYEqYW8DlFmsnt3CYXMfkQSs
H/f8JmvD8By8Iw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:47 2025 by rpki-client