Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: xiix8+Yn+ma0Isdt/bePegE5hnGGv2MxsT5EZ6lP6Cs=
Subject key identifier: EA:98:3A:83:53:8F:91:7B:70:3C:C3:94:0C:97:3E:9A:7B:4C:9A:35
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 0194BC04F2F0BBEE43C21CC4175C7492A988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 0393
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: C34tazcwNVlNSOFrV60y2M-X8qQ.roa (hash: b9R8fiAJDWhh3NSy/h3YHxxWL9I8BBsmTu4q52FZ+Mo=)
2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: lHKX2vg7/fn8j/J7Tt0rozsFpjHKNPKqi396meOVOW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:f0:bb:ee:43:c2:1c:c4:17:5c:74:92:a9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=ea983a83538f917b703cc3940c973e9a7b4c9a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:dd:e7:19:ba:b4:6c:8b:a6:4c:23:bc:f8:
6c:58:ea:46:16:ed:59:ec:15:fa:ac:eb:15:e0:55:
93:3e:93:fd:d7:b8:da:0a:2a:ea:5b:a7:fc:da:5e:
1b:be:61:2f:26:4e:a2:bc:63:b3:46:3b:1d:ac:b6:
f7:c6:0a:86:75:d0:80:3d:52:b9:8e:e8:2d:2b:01:
02:fd:81:25:68:1b:51:8b:f6:f0:1f:9c:c7:3b:a7:
68:57:09:74:1e:f7:3a:3a:05:16:6c:6c:d0:34:26:
61:ef:fb:cf:78:ea:b3:d4:aa:30:f2:59:29:89:34:
79:57:ed:f6:68:16:d5:2d:e4:76:fb:bf:71:73:27:
8e:68:cb:57:98:dd:00:43:5d:2d:78:44:f8:53:8c:
83:ed:23:3d:55:c4:ed:23:f6:76:3b:c3:e8:05:87:
f3:9b:48:f4:4a:88:e1:d5:b3:f1:e2:84:09:75:2e:
ab:9b:65:7c:84:34:66:d4:4b:23:7a:ef:0f:fc:68:
cc:71:80:a4:4b:61:88:bc:1c:2b:dd:47:e3:f1:ec:
fe:24:8c:22:51:ea:21:6d:b9:d4:ba:f7:e9:bd:18:
fc:4a:70:ac:31:be:e0:ef:27:e4:b9:91:52:16:9b:
1f:2d:14:25:00:c8:29:f5:0c:80:9d:71:55:05:77:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:98:3A:83:53:8F:91:7B:70:3C:C3:94:0C:97:3E:9A:7B:4C:9A:35
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2e:dc:0c:18:ec:ac:99:d9:53:8f:d7:2e:62:f3:f4:75:e2:
4b:05:3b:1a:1c:56:8b:1b:d8:40:88:7d:94:6e:a0:b7:69:e8:
1b:cf:e0:2d:17:9c:ff:92:28:84:70:66:35:7c:93:12:10:8b:
cd:21:28:cd:69:5d:2d:a7:5d:c2:ff:2a:4b:79:6b:95:be:2c:
93:d5:21:56:ba:17:a3:08:b4:7d:c0:b6:41:56:a6:9d:17:8c:
7d:30:6c:26:8a:04:36:8d:98:ea:e0:8f:6e:95:33:2f:48:53:
c9:13:a6:07:6d:4d:ae:da:e3:ac:7d:24:a7:77:56:d0:10:2c:
9a:08:c5:75:52:20:18:80:23:8a:58:b3:cd:66:7e:6f:ee:40:
c6:9b:23:ef:d0:9e:ee:6c:3b:86:c3:33:49:61:cc:58:65:b3:
b0:b0:c7:b9:77:71:35:d5:2b:23:78:03:f2:79:af:5c:06:9a:
74:c5:63:cc:e0:fd:2c:ef:27:b9:1d:0c:5a:40:8f:7f:4b:db:
5a:38:3e:ad:9d:f9:f5:d9:10:fb:3c:04:da:0b:71:4c:c5:d5:
a2:54:70:b5:43:3f:b1:91:71:cb:89:f2:9b:5f:2f:4c:e8:55:
e5:00:82:27:c5:88:50:9b:8b:46:ea:91:0b:d3:42:2e:73:6a:
12:0e:a1:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPLwu+5DwhzEF1x0kqmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQxZWRjMGNjNjk3NzQyY2Y0NzM2NGJiMWQxMWI4ZmY4
MDhlYWUwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
EyhlYTk4M2E4MzUzOGY5MTdiNzAzY2MzOTQwYzk3M2U5YTdiNGM5YTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbPd5xm6tGyLpkwjvPhsWOpGFu1Z
7BX6rOsV4FWTPpP917jaCirqW6f82l4bvmEvJk6ivGOzRjsdrLb3xgqGddCAPVK5
jugtKwEC/YElaBtRi/bwH5zHO6doVwl0Hvc6OgUWbGzQNCZh7/vPeOqz1Kow8lkp
iTR5V+32aBbVLeR2+79xcyeOaMtXmN0AQ10teET4U4yD7SM9VcTtI/Z2O8PoBYfz
m0j0Sojh1bPx4oQJdS6rm2V8hDRm1Esjeu8P/GjMcYCkS2GIvBwr3Ufj8ez+JIwi
UeohbbnUuvfpvRj8SnCsMb7g7yfkuZFSFpsfLRQlAMgp9QyAnXFVBXddOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqYOoNTj5F7cDzDlAyXPpp7TJo1MB8GA1UdIwQY
MBaAFA4tHtwMxpd0LPRzZLsdEbj/gI6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQt
NWY4MTY3MDI0OTY4LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQtNWY4MTY3MDI0OTY4
LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy7cDBjs
rJnZU4/XLmLz9HXiSwU7GhxWixvYQIh9lG6gt2noG8/gLRec/5IohHBmNXyTEhCL
zSEozWldLaddwv8qS3lrlb4sk9UhVroXowi0fcC2QVamnReMfTBsJooENo2Y6uCP
bpUzL0hTyROmB21NrtrjrH0kp3dW0BAsmgjFdVIgGIAjilizzWZ+b+5Axpsj79Ce
7mw7hsMzSWHMWGWzsLDHuXdxNdUrI3gD8nmvXAaadMVjzOD9LO8nuR0MWkCPf0vb
Wjg+rZ359dkQ+zwE2gtxTMXVolRwtUM/sZFxy4nym18vTOhV5QCCJ8WIUJuLRuqR
C9NCLnNqEg6hfw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:59 2025 by rpki-client