Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: Gm+nj1+nOH8Fajqqxlv1e8/UNf8sjG5RVYWtNbLNsZ4=
Subject key identifier: E9:73:8B:E9:6B:91:4A:9E:50:3F:6B:B1:85:85:2C:88:65:61:3B:8D
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 0194BC3BD1EE4CB038198713ADEED79F52B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: tlXGYw30GZ91YBz96MiqE7751JASkCJboni98GSeteA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:ee:4c:b0:38:19:87:13:ad:ee:d7:9f:52:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=e9738be96b914a9e503f6bb185852c8865613b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:11:12:64:ba:e0:b3:d2:4f:72:1b:96:2b:
a7:fa:d3:98:09:83:09:be:9d:df:27:b0:a7:8e:17:
e5:7a:1e:14:aa:af:11:04:2d:97:87:90:53:06:8d:
7f:a4:00:64:72:e9:6c:d8:39:0e:96:47:0b:ba:ca:
7e:cc:58:7e:f0:06:03:35:7d:9d:29:b4:d9:c2:a9:
1b:a3:5c:56:b3:b7:36:1b:a4:87:6b:29:52:85:13:
35:e6:be:37:97:bb:e7:f0:24:12:da:d9:18:8c:7c:
5d:81:da:44:20:45:52:78:8e:37:91:38:47:a5:3a:
d8:2f:4f:59:39:1a:ce:93:2d:1c:6e:44:bd:fa:f5:
bf:16:1e:30:f7:83:f7:be:04:8f:7c:41:6c:7e:1e:
25:7a:0a:9f:dc:91:35:8f:d7:2c:7c:a5:8b:27:14:
39:14:36:6a:9d:78:d4:23:6d:52:16:60:72:0b:1c:
8e:41:72:32:a3:a4:75:00:4f:4d:84:af:e6:b6:77:
d7:c4:70:c6:b0:96:5b:cf:53:bc:76:e8:f0:ee:ad:
b6:e6:7e:d0:d6:57:a8:7f:8e:60:eb:4a:12:5b:2d:
85:e4:3c:01:21:1d:05:59:d8:a2:bf:81:51:76:71:
e1:14:16:cd:96:1a:e4:17:5d:0d:05:2a:b2:76:c6:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:8B:E9:6B:91:4A:9E:50:3F:6B:B1:85:85:2C:88:65:61:3B:8D
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:86:ca:0d:7c:d6:0d:d9:ce:5d:a0:e0:80:07:1c:f6:6a:
ec:39:b8:95:61:74:97:4d:97:1c:81:0a:04:09:6a:9a:e7:63:
3a:b6:a4:91:f3:d3:8c:6f:d0:58:dd:06:3c:8e:da:98:f1:29:
5e:f0:a4:c8:9b:57:24:c2:a9:d8:a1:cb:ce:6f:78:6f:ca:fc:
68:14:a3:30:7f:f0:0e:14:35:86:65:c0:46:d1:6c:33:ca:1b:
34:53:0c:38:94:a6:88:33:63:20:13:af:ed:e9:1e:7c:30:9a:
c4:0b:ba:f3:d3:ec:a5:28:3b:26:74:dc:10:f7:d0:45:9b:7d:
77:9a:ec:cd:c2:41:2e:bc:1c:bb:4b:b4:e8:f0:f1:c5:1d:98:
8e:fc:1a:68:95:5d:65:67:9c:dc:4f:f3:62:fe:90:85:c2:3d:
0e:30:37:c6:f0:d3:5c:bb:28:44:92:ac:8a:5f:59:0c:15:ab:
f1:ff:a6:43:fe:f7:86:21:a2:af:84:74:95:55:4c:23:8c:fa:
29:88:86:d8:6e:2e:35:91:50:d5:fe:0b:04:b4:a3:e4:14:79:
58:8b:fb:fe:7b:c1:54:9e:c9:de:e8:47:d0:2b:3f:eb:50:b4:
5e:cd:8a:9f:6b:7d:38:20:1f:06:24:87:a5:d6:fb:ae:e9:31:
35:ea:1d:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9HuTLA4GYcTre7Xn1K2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YzdlYTRkMzlmNWNiNWY0NTg2MGEwOWVhMzgzM2VmOGFk
ZDY4MjgwHhcNMjUwMTMxMTIwMDI0WhcNMjUwMjAxMTIwMDI0WjAzMTEwLwYDVQQD
EyhlOTczOGJlOTZiOTE0YTllNTAzZjZiYjE4NTg1MmM4ODY1NjEzYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LgREmS64LPST3Ibliun+tOYCYMJ
vp3fJ7Cnjhfleh4Uqq8RBC2Xh5BTBo1/pABkculs2DkOlkcLusp+zFh+8AYDNX2d
KbTZwqkbo1xWs7c2G6SHaylShRM15r43l7vn8CQS2tkYjHxdgdpEIEVSeI43kThH
pTrYL09ZORrOky0cbkS9+vW/Fh4w94P3vgSPfEFsfh4legqf3JE1j9csfKWLJxQ5
FDZqnXjUI21SFmByCxyOQXIyo6R1AE9NhK/mtnfXxHDGsJZbz1O8dujw7q225n7Q
1leof45g60oSWy2F5DwBIR0FWdiiv4FRdnHhFBbNlhrkF10NBSqydsbZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlzi+lrkUqeUD9rsYWFLIhlYTuNMB8GA1UdIwQY
MBaAFHnH6k059ctfRYYKCeo4M++K3WgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTIt
MjhiZjNkOTBiZDdiLzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTItMjhiZjNkOTBiZDdi
LzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTuGyg18
1g3Zzl2g4IAHHPZq7Dm4lWF0l02XHIEKBAlqmudjOrakkfPTjG/QWN0GPI7amPEp
XvCkyJtXJMKp2KHLzm94b8r8aBSjMH/wDhQ1hmXARtFsM8obNFMMOJSmiDNjIBOv
7ekefDCaxAu689PspSg7JnTcEPfQRZt9d5rszcJBLrwcu0u06PDxxR2YjvwaaJVd
ZWec3E/zYv6QhcI9DjA3xvDTXLsoRJKsil9ZDBWr8f+mQ/73hiGir4R0lVVMI4z6
KYiG2G4uNZFQ1f4LBLSj5BR5WIv7/nvBVJ7J3uhH0Cs/61C0Xs2Kn2t9OCAfBiSH
pdb7rukxNeodNw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:55 2025 by rpki-client