Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
File: e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft (raw, json)
Hash identifier: UE9QgrRWBVSwE1H0U0EbYMc3hI6NLK+9/1pWK7csysA=
Subject key identifier: B7:A6:24:0C:5C:2E:B9:34:9F:8D:61:43:60:DB:77:14:90:3D:25:E0
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 0194BD8558C001F31F4BC1CAC8A055A006EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
Manifest number: 11D9
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: P8fe72CVlfJsdBHCpvH0w1OycSc.roa (hash: 04OdqfXLVdeGIJBb6bouvUWZJ3GVs5AGJZQxTQ+fn3c=)
2: e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl (hash: 4CJgrmJ8zi4PCG60cuFC4Y2inB+sZnIRsbh5ycGVEOs=)
3: hYytgwsUvkz8YKRRhUAfJUBuZUY.roa (hash: HXl9mDiPSMeZATnRmHs2sYzYTKl8E5DBUIjjrVg17Ao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:c0:01:f3:1f:4b:c1:ca:c8:a0:55:a0:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=b7a6240c5c2eb9349f8d614360db7714903d25e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:90:a5:3b:46:8e:a3:5d:a3:c3:98:73:a0:
0f:f3:9e:9a:f4:f9:3f:88:af:74:5c:92:d5:48:4b:
f8:3f:42:6b:d2:21:92:75:05:ad:ef:69:76:f1:12:
c4:a1:a1:0f:8c:14:83:39:bc:1c:00:29:82:3f:fc:
9a:c9:d3:15:0f:29:c7:70:c4:bb:69:47:df:e7:f8:
38:31:3f:4c:75:2d:d5:59:9d:cc:5a:40:ab:6b:27:
03:21:18:40:75:56:6d:13:70:88:3d:f2:9a:26:4d:
9a:38:fa:a1:04:97:e5:89:fa:9d:91:e8:a5:95:0b:
75:a3:5a:1d:64:72:d1:fb:5c:dd:72:99:d6:a8:f2:
1e:7c:0d:77:32:81:92:59:3e:9f:be:ac:21:fc:fc:
3e:fb:b2:ca:e1:1e:56:87:76:fe:0a:a0:c8:47:74:
2d:de:6f:96:da:b9:60:f6:f6:16:4e:28:95:89:36:
c8:ac:02:95:90:ca:4c:7c:e1:71:79:3f:f4:82:b8:
c1:1a:2a:f3:66:4b:ad:21:3a:6b:ab:78:4a:3c:70:
16:d4:7f:c4:d8:40:23:ac:60:4a:a6:d4:c4:4b:56:
61:5a:6a:7a:49:89:93:18:94:62:9b:fd:da:55:cd:
c1:c0:b8:1e:e8:e5:f1:2a:d8:27:97:25:16:25:fa:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:24:0C:5C:2E:B9:34:9F:8D:61:43:60:DB:77:14:90:3D:25:E0
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:03:9f:7e:94:7c:f7:91:76:98:ad:b9:31:74:a2:d2:2e:ab:
c4:60:5d:54:ca:5b:a0:ba:ba:f4:1e:f5:ef:cb:ca:e8:09:53:
7a:ad:fa:f3:b7:93:0d:bc:27:18:2d:b9:3d:b9:ce:94:13:d1:
e8:b0:7b:56:81:37:02:a4:ce:ea:c7:b0:8e:21:8d:5b:2c:a6:
84:e9:65:47:3d:1a:aa:23:13:d1:79:7a:49:ef:ae:f1:3b:e3:
c4:d7:7e:e4:39:07:79:57:c4:82:26:64:e9:33:1c:01:8f:85:
61:9b:5e:60:19:0f:c5:a4:62:dd:79:ec:14:3f:81:62:77:ae:
2f:04:79:d9:3c:63:b9:94:b2:78:d2:c4:ed:07:a9:a3:37:03:
d4:e8:eb:66:9f:6a:7d:f6:b6:6b:5e:83:8f:e1:75:a9:bf:46:
bd:22:20:92:b2:4c:bb:04:ca:12:61:1c:ad:bc:21:61:5d:b7:
e9:67:77:b6:6b:e1:c5:4c:0d:da:62:84:fa:c0:d6:52:18:82:
1b:d7:0e:7c:a6:a9:07:7c:a6:aa:81:06:f2:8e:d9:82:60:96:
11:9d:17:39:96:06:8a:60:55:ee:66:ce:27:f6:74:76:38:9d:
c8:5d:39:f1:c5:bf:89:d8:70:ca:e3:28:eb:5c:87:e3:19:ec:
2b:a1:3e:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVjAAfMfS8HKyKBVoAbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTJiZTk4NDM4Yjk4ZWU2OGEwZDFiOGM0MTQ0NTIwYmQw
YTYyM2QwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
EyhiN2E2MjQwYzVjMmViOTM0OWY4ZDYxNDM2MGRiNzcxNDkwM2QyNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwESQpTtGjqNdo8OYc6AP856a9Pk/
iK90XJLVSEv4P0Jr0iGSdQWt72l28RLEoaEPjBSDObwcACmCP/yaydMVDynHcMS7
aUff5/g4MT9MdS3VWZ3MWkCraycDIRhAdVZtE3CIPfKaJk2aOPqhBJflifqdkeil
lQt1o1odZHLR+1zdcpnWqPIefA13MoGSWT6fvqwh/Pw++7LK4R5Wh3b+CqDIR3Qt
3m+W2rlg9vYWTiiViTbIrAKVkMpMfOFxeT/0grjBGirzZkutITprq3hKPHAW1H/E
2EAjrGBKptTES1ZhWmp6SYmTGJRim/3aVc3BwLge6OXxKtgnlyUWJfoe7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLemJAxcLrk0n41hQ2DbdxSQPSXgMB8GA1UdIwQY
MBaAFHuivphDi5juaKDRuMQURSC9CmI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYt
NDkzNWIzZjVjMjA5LzEvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYtNDkzNWIzZjVjMjA5
LzEvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQOffpR8
95F2mK25MXSi0i6rxGBdVMpboLq69B7178vK6AlTeq3687eTDbwnGC25PbnOlBPR
6LB7VoE3AqTO6sewjiGNWyymhOllRz0aqiMT0Xl6Se+u8TvjxNd+5DkHeVfEgiZk
6TMcAY+FYZteYBkPxaRi3XnsFD+BYneuLwR52TxjuZSyeNLE7QepozcD1OjrZp9q
ffa2a16Dj+F1qb9GvSIgkrJMuwTKEmEcrbwhYV236Wd3tmvhxUwN2mKE+sDWUhiC
G9cOfKapB3ymqoEG8o7ZgmCWEZ0XOZYGimBV7mbOJ/Z0djidyF058cW/idhwyuMo
61yH4xnsK6E+wA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:51 2025 by rpki-client