Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File: eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier: n1lNwLF6zBX46RQftn9adaiJO5LHXh5RMitIK+a/BFk=
Subject key identifier: BA:5B:62:15:B0:55:5C:02:B7:FE:56:FB:A8:9C:73:49:6D:79:5F:6E
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial: 0194BCE06ECB9DC7F555780897472B3E2C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: MApxUSoikhwd35ufqcIvAArJcW5BdRdeU4zf2sZaaBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6e:cb:9d:c7:f5:55:78:08:97:47:2b:3e:2c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=ba5b6215b0555c02b7fe56fba89c73496d795f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:df:58:23:1e:bb:83:1b:bb:34:7a:3c:dd:
42:e0:23:70:56:e7:48:9a:75:32:3e:38:ee:30:f1:
63:6d:54:02:c5:4b:de:58:d0:51:f4:f9:c5:59:11:
ba:36:62:aa:54:78:90:f2:29:47:34:33:aa:ed:82:
06:42:bb:a3:48:a4:77:ce:93:f4:99:b5:65:38:7a:
7f:d8:c6:a9:53:33:14:7e:f7:cf:8b:57:4c:9e:af:
50:24:dd:2f:99:e4:64:bc:0d:04:94:2b:b5:42:04:
bb:e9:6d:51:8c:1f:51:95:49:61:3c:bc:f1:c5:9b:
23:5f:88:63:3d:07:c5:9b:79:e6:27:fe:29:3d:9e:
5b:86:09:ae:43:42:3f:cc:81:6d:cf:40:80:c9:da:
21:c1:91:00:cd:1f:22:a3:26:f2:39:7c:af:0d:f0:
86:25:cb:c1:ba:74:3c:3e:8f:d9:cd:3d:5b:57:d7:
b8:ae:3d:d2:14:e9:2b:1e:37:18:84:cf:de:71:85:
f5:1f:01:f4:14:25:a5:d3:1f:ff:29:c2:b4:51:cd:
e2:d0:60:67:eb:cd:b5:29:be:71:1f:22:f2:5e:b2:
c7:c9:fb:6b:09:45:6e:a2:96:ff:94:34:a5:aa:db:
f2:37:28:04:61:0a:25:73:9d:5c:ab:1d:7f:34:ec:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:62:15:B0:55:5C:02:B7:FE:56:FB:A8:9C:73:49:6D:79:5F:6E
X509v3 Authority Key Identifier:
keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:30:99:16:fa:8b:f1:dc:f5:14:43:88:c2:da:86:c3:eb:31:
bb:58:5e:d3:57:83:55:fc:4e:e4:9b:cf:a6:06:39:36:ca:e2:
f1:82:41:bc:9d:80:7b:42:83:d7:e9:bd:07:43:fd:2b:e5:0e:
65:46:5c:30:8f:39:a7:ce:00:ff:a5:56:9c:93:82:e2:d6:cb:
a5:27:eb:7f:a0:4c:8a:a5:38:2d:7b:98:c2:b1:27:29:7c:13:
6e:16:16:a8:b8:03:46:92:b0:fb:a7:73:62:58:01:2d:39:e1:
43:b3:d0:b6:61:0e:1d:71:e1:97:a2:06:46:63:1d:e8:6c:16:
62:ef:02:a7:6f:0c:eb:36:06:03:49:24:31:49:26:d5:b0:6d:
98:ff:58:b1:d9:91:17:03:9d:32:63:df:00:a9:ea:f8:bb:80:
3a:e7:a9:83:71:dd:7b:4d:d0:6d:0d:77:4c:a7:c0:f7:75:cc:
0e:77:b5:5e:73:03:8d:08:6d:5b:f6:5f:b9:89:9f:86:20:b7:
dd:68:0f:7b:24:b6:3b:d5:f9:64:b4:06:62:93:4b:10:4b:c0:
5e:42:7f:bb:5a:36:eb:b9:ad:b4:2f:ef:95:e3:5c:0c:05:51:
02:29:22:7e:90:0a:e3:e6:12:80:5a:ab:f8:c0:34:d2:37:eb:
60:fd:f7:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84G7Lncf1VXgIl0crPiyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NGY1NTFlOTdhMTMyNTQyZTNiMDU2ZTkwNWRlOGYzZGJh
MjRjOWMwHhcNMjUwMTMxMTUwMDEyWhcNMjUwMjAxMTUwMDEyWjAzMTEwLwYDVQQD
EyhiYTViNjIxNWIwNTU1YzAyYjdmZTU2ZmJhODljNzM0OTZkNzk1ZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP7fWCMeu4MbuzR6PN1C4CNwVudI
mnUyPjjuMPFjbVQCxUveWNBR9PnFWRG6NmKqVHiQ8ilHNDOq7YIGQrujSKR3zpP0
mbVlOHp/2MapUzMUfvfPi1dMnq9QJN0vmeRkvA0ElCu1QgS76W1RjB9RlUlhPLzx
xZsjX4hjPQfFm3nmJ/4pPZ5bhgmuQ0I/zIFtz0CAydohwZEAzR8ioybyOXyvDfCG
JcvBunQ8Po/ZzT1bV9e4rj3SFOkrHjcYhM/ecYX1HwH0FCWl0x//KcK0Uc3i0GBn
6821Kb5xHyLyXrLHyftrCUVuopb/lDSlqtvyNygEYQolc51cqx1/NOwoGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpbYhWwVVwCt/5W+6icc0lteV9uMB8GA1UdIwQY
MBaAFHlPVR6XoTJULjsFbpBd6PPbokycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMt
NDM2ODU4ODc0MzZjLzEvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMtNDM2ODU4ODc0MzZj
LzEvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDCZFvqL
8dz1FEOIwtqGw+sxu1he01eDVfxO5JvPpgY5Nsri8YJBvJ2Ae0KD1+m9B0P9K+UO
ZUZcMI85p84A/6VWnJOC4tbLpSfrf6BMiqU4LXuYwrEnKXwTbhYWqLgDRpKw+6dz
YlgBLTnhQ7PQtmEOHXHhl6IGRmMd6GwWYu8Cp28M6zYGA0kkMUkm1bBtmP9YsdmR
FwOdMmPfAKnq+LuAOuepg3Hde03QbQ13TKfA93XMDne1XnMDjQhtW/ZfuYmfhiC3
3WgPeyS2O9X5ZLQGYpNLEEvAXkJ/u1o267mttC/vleNcDAVRAikifpAK4+YSgFqr
+MA00jfrYP33FA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:30 2025 by rpki-client