Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: vYja5kHQuJNoQAF14EIYCfgUCj04seQH6Z4+r90QZRI=
Subject key identifier: F3:AB:66:03:57:1B:52:8D:51:40:3D:6F:7E:1A:E6:78:E6:C8:0B:94
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 0194BC3BF1630EEE46D82E35B6A9E53BD23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 046E
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: Dy7XMTcBCu0AXU+/DxcUOFL5eW7rRf+FQpCeJkdTmgQ=)
2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:63:0e:ee:46:d8:2e:35:b6:a9:e5:3b:d2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=f3ab6603571b528d51403d6f7e1ae678e6c80b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:c8:e1:8b:79:d0:27:ef:79:ed:58:7c:3e:
c2:18:aa:3d:43:d0:f4:a7:8b:6a:13:02:6c:ce:10:
34:a2:34:6a:32:18:d3:5b:34:7c:af:56:af:08:dc:
97:11:c2:7b:a6:59:e8:e5:16:5b:33:ed:4a:8d:ed:
88:70:29:c1:b7:c7:c6:df:2d:77:19:4c:6b:4d:02:
c6:8c:b8:bf:b7:56:79:1e:26:6e:0f:f2:b6:51:53:
b1:ac:4e:dc:72:02:2e:b5:5c:14:35:99:d3:9a:e0:
84:6b:70:0b:24:9c:52:a5:4a:02:08:67:99:b3:af:
86:e8:79:78:ba:5d:9b:b6:db:35:29:f3:41:87:d4:
13:33:13:c7:cf:e2:56:0c:8c:37:a6:a8:26:c5:5d:
4d:a6:fd:a9:ad:04:b3:bc:ab:c4:cc:6a:3e:e3:0b:
3e:dd:54:27:43:e9:69:82:34:94:9d:48:b1:e4:97:
a2:8a:a8:43:2f:19:ed:a9:26:23:58:f4:8d:68:ed:
e2:9a:6c:ec:16:0f:56:8c:b8:be:c1:62:69:08:66:
91:d7:c6:05:77:7c:4f:c6:fd:3c:9d:16:f5:40:17:
67:a2:d5:13:0e:d4:f1:30:3a:e3:7c:ce:2d:98:20:
0d:4e:5e:51:31:57:cc:24:e4:b5:c9:06:b0:84:de:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:66:03:57:1B:52:8D:51:40:3D:6F:7E:1A:E6:78:E6:C8:0B:94
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b9:35:a6:0f:5f:38:08:dc:94:df:7a:d2:75:af:1f:f0:af:
36:a0:56:f8:ed:f4:4c:b2:55:65:4c:2c:58:3d:d9:98:22:39:
0c:9f:83:f3:e2:0e:f3:e4:a3:41:ff:26:2c:a0:61:ee:27:d5:
6f:d6:7f:a0:c3:00:f6:37:30:d9:0f:33:8e:10:66:e9:ab:6b:
7d:40:3e:0d:0c:35:2e:4f:53:47:69:ed:51:ae:4d:e4:b8:50:
f4:f5:d0:8e:b7:0c:26:d2:82:f8:8f:00:f7:34:b3:f9:87:22:
c8:4b:6d:01:f8:8b:43:64:2a:f2:11:fc:ac:ad:93:36:52:22:
a9:25:c1:08:e3:3c:b7:cb:00:98:07:5f:4c:2d:59:01:90:83:
ab:b0:f1:7b:df:3b:74:1d:ab:4b:8d:99:53:7b:bb:de:2a:c1:
3f:37:4a:d5:c8:12:08:cb:ac:48:e0:ec:5d:dd:85:34:78:8e:
02:6c:b3:63:33:81:fb:6a:9e:5d:ba:02:38:f4:01:45:da:03:
5f:a8:47:10:f7:32:87:0e:ed:ee:a4:f5:66:69:b1:1a:50:0d:
18:30:00:ee:e0:fa:96:e0:bb:1e:79:a0:fb:36:8f:9d:8f:26:
d3:10:4e:a2:fd:f5:a2:88:51:13:23:34:a4:51:62:38:44:74:
ce:52:20:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/FjDu5G2C41tqnlO9I/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTMzNTk4YmIxMDU0MjExNDY4MWVhODZhMzVkZjE2OTgz
MWNmMDMwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
EyhmM2FiNjYwMzU3MWI1MjhkNTE0MDNkNmY3ZTFhZTY3OGU2YzgwYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj7I4Yt50Cfvee1YfD7CGKo9Q9D0
p4tqEwJszhA0ojRqMhjTWzR8r1avCNyXEcJ7plno5RZbM+1Kje2IcCnBt8fG3y13
GUxrTQLGjLi/t1Z5HiZuD/K2UVOxrE7ccgIutVwUNZnTmuCEa3ALJJxSpUoCCGeZ
s6+G6Hl4ul2btts1KfNBh9QTMxPHz+JWDIw3pqgmxV1Npv2prQSzvKvEzGo+4ws+
3VQnQ+lpgjSUnUix5JeiiqhDLxntqSYjWPSNaO3immzsFg9WjLi+wWJpCGaR18YF
d3xPxv08nRb1QBdnotUTDtTxMDrjfM4tmCANTl5RMVfMJOS1yQawhN77DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOrZgNXG1KNUUA9b34a5njmyAuUMB8GA1UdIwQY
MBaAFO8TNZi7EFQhFGgeqGo13xaYMc8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYt
ZjRjN2E3OTI1OTc1LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYtZjRjN2E3OTI1OTc1
LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbk1pg9f
OAjclN960nWvH/CvNqBW+O30TLJVZUwsWD3ZmCI5DJ+D8+IO8+SjQf8mLKBh7ifV
b9Z/oMMA9jcw2Q8zjhBm6atrfUA+DQw1Lk9TR2ntUa5N5LhQ9PXQjrcMJtKC+I8A
9zSz+YciyEttAfiLQ2Qq8hH8rK2TNlIiqSXBCOM8t8sAmAdfTC1ZAZCDq7Dxe987
dB2rS42ZU3u73irBPzdK1cgSCMusSODsXd2FNHiOAmyzYzOB+2qeXboCOPQBRdoD
X6hHEPcyhw7t7qT1ZmmxGlANGDAA7uD6luC7Hnmg+zaPnY8m0xBOov31oohREyM0
pFFiOER0zlIgXA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:06 2025 by rpki-client