Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: 1FJXTghRpO7qAMyCWctSuwC9jp7z78o5D1doUlt9y60=
Subject key identifier: E8:EC:20:7E:13:63:54:86:8D:43:6F:EC:AA:A9:7F:B1:8B:98:13:AD
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 0194BC3C2743934BF55917F86EA49A0ABAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: gEPDRwjXqVFwu6n8zOXhbb0bJrgI8iBt3viSPXSTucw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:27:43:93:4b:f5:59:17:f8:6e:a4:9a:0a:ba:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=e8ec207e136354868d436fecaaa97fb18b9813ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:ad:80:c7:af:6c:55:f1:c9:b3:5e:86:d2:
e5:19:39:ef:d1:57:57:80:59:ca:b2:2c:44:91:be:
d3:64:78:aa:48:94:06:89:9a:dc:b5:d2:4d:a9:60:
44:7f:0b:18:3d:79:b1:79:63:58:b9:46:89:1f:4e:
c5:ca:81:8c:e2:f9:56:8f:21:2e:55:40:81:fd:5b:
ec:8b:8a:4a:cb:90:0b:ba:3d:08:88:3c:d8:b2:b4:
d5:b9:d7:d4:12:f4:fb:d4:30:6b:61:6c:c4:fd:fa:
7f:1c:a8:52:04:2f:1d:73:99:f1:ee:a4:2b:d7:51:
d7:2a:3e:8a:c0:31:30:8b:a2:4b:be:a5:50:62:e0:
22:20:89:9b:f0:76:ae:a6:92:90:35:7a:7d:11:86:
b2:df:17:a8:b2:bf:4b:f3:89:62:c2:93:08:86:3b:
5a:be:e5:81:89:25:84:4f:13:11:78:fa:13:ba:5b:
38:d0:ed:c5:0f:8b:b4:5c:83:43:80:6e:9e:0e:73:
69:fc:1a:ad:76:e4:21:18:7a:78:26:69:38:b2:e3:
73:53:a3:53:f1:7b:80:eb:07:fb:02:4b:28:a7:ae:
8a:e2:26:13:61:17:fb:cb:f3:d2:bb:ab:f6:ed:95:
2a:fe:ce:bb:d0:6f:df:31:15:c5:5f:31:e8:bc:26:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:20:7E:13:63:54:86:8D:43:6F:EC:AA:A9:7F:B1:8B:98:13:AD
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bc:d7:e1:db:06:ac:08:05:ee:e6:5d:7c:fc:af:37:9d:61:
fe:9c:90:88:16:8d:52:b6:5d:b0:4e:e6:52:38:c4:e1:08:9f:
d7:a4:24:e3:6c:8c:ad:4f:5f:d1:d3:41:c4:59:7e:18:e9:dd:
3a:15:ba:b1:ee:4d:e5:b6:d2:e4:4d:de:c5:91:8e:94:c0:0a:
52:69:f8:ca:21:8e:dc:6e:94:de:0c:2d:1b:69:c2:43:9e:6b:
64:0d:d9:4b:a2:fd:6e:fd:39:b7:95:b0:63:fe:d1:be:de:09:
bc:ca:74:f0:2d:9c:4d:14:b2:ce:0e:b9:8b:72:d0:27:c4:8d:
c7:9a:e2:ac:4c:37:db:16:77:18:a7:76:5a:8d:31:05:50:34:
d0:2d:62:d9:43:ef:ac:b2:31:9b:25:8d:ef:2d:a7:ea:3c:5d:
7f:90:81:c8:b6:08:96:7c:88:5d:8c:8f:15:b3:80:6d:5d:90:
ab:a5:8b:cc:28:56:fc:d0:f0:ac:25:e4:e2:cb:15:b3:41:0a:
63:b2:b7:84:d9:31:81:8a:31:c3:0c:6a:d2:4c:da:23:0d:05:
aa:63:4e:85:1c:69:b0:6a:d4:4b:6e:25:07:72:d1:e4:c7:3d:
5d:f4:42:d4:96:e5:c0:1b:90:94:2d:34:d4:64:c7:fb:42:6e:
c6:fe:5f:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCdDk0v1WRf4bqSaCrqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWU0NGMyMTIzNDI1MzYxOGIwZDdiMzZiOTBlM2NiNWM0
MGRlZDEwHhcNMjUwMTMxMTIwMDQ2WhcNMjUwMjAxMTIwMDQ2WjAzMTEwLwYDVQQD
EyhlOGVjMjA3ZTEzNjM1NDg2OGQ0MzZmZWNhYWE5N2ZiMThiOTgxM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30OtgMevbFXxybNehtLlGTnv0VdX
gFnKsixEkb7TZHiqSJQGiZrctdJNqWBEfwsYPXmxeWNYuUaJH07FyoGM4vlWjyEu
VUCB/Vvsi4pKy5ALuj0IiDzYsrTVudfUEvT71DBrYWzE/fp/HKhSBC8dc5nx7qQr
11HXKj6KwDEwi6JLvqVQYuAiIImb8HauppKQNXp9EYay3xeosr9L84liwpMIhjta
vuWBiSWETxMRePoTuls40O3FD4u0XINDgG6eDnNp/BqtduQhGHp4Jmk4suNzU6NT
8XuA6wf7Aksop66K4iYTYRf7y/PSu6v27ZUq/s670G/fMRXFXzHovCa4SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjsIH4TY1SGjUNv7Kqpf7GLmBOtMB8GA1UdIwQY
MBaAFGvuRMISNCU2GLDXs2uQ48tcQN7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWIt
NzY5YjNmYzI2NjRiLzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWItNzY5YjNmYzI2NjRi
LzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7zX4dsG
rAgF7uZdfPyvN51h/pyQiBaNUrZdsE7mUjjE4Qif16Qk42yMrU9f0dNBxFl+GOnd
OhW6se5N5bbS5E3exZGOlMAKUmn4yiGO3G6U3gwtG2nCQ55rZA3ZS6L9bv05t5Ww
Y/7Rvt4JvMp08C2cTRSyzg65i3LQJ8SNx5rirEw32xZ3GKd2Wo0xBVA00C1i2UPv
rLIxmyWN7y2n6jxdf5CByLYIlnyIXYyPFbOAbV2Qq6WLzChW/NDwrCXk4ssVs0EK
Y7K3hNkxgYoxwwxq0kzaIw0FqmNOhRxpsGrUS24lB3LR5Mc9XfRC1JblwBuQlC00
1GTH+0Juxv5fFA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:10 2025 by rpki-client