Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
File: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json)
Hash identifier: TkCzyMN2ZJnn9VDMDWNojQpV/J/2FKv9/M25OiJL0KU=
Subject key identifier: 85:68:4D:A3:90:0D:AA:72:C6:F1:7B:BF:B8:49:D0:5C:F5:50:12:3B
Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
Certificate issuer: /CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Certificate serial: 0194BBCEA7CF5083470D750059B9DAA57525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa (hash: 3xaBBKosMJSpzXSuRQMz4T/JTkCvN7b+xo0iaMV0UsA=)
2: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: 4ZM3tiNXHzAPyEWPOda0wMPytHNtcg71C+RScERynsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a7:cf:50:83:47:0d:75:00:59:b9:da:a5:75:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=85684da3900daa72c6f17bbfb849d05cf550123b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:a5:92:99:94:4e:a0:f1:08:2d:47:5f:40:
f6:a7:9e:19:92:3e:45:ec:00:6a:8b:6f:75:c3:a2:
fe:0b:e6:54:bb:4e:44:9d:40:1b:8b:6c:28:8f:8a:
25:3c:35:8b:8e:cc:0f:66:6c:43:3d:c8:88:b4:bf:
20:1d:a6:ab:67:72:82:4b:45:58:80:49:2a:cb:65:
34:5d:c2:3e:fd:39:21:81:d8:14:76:5d:b4:fe:84:
4d:57:da:6b:1e:50:89:10:e8:fc:20:02:ad:a2:30:
3d:f7:1e:4f:0a:e1:fb:f6:25:24:79:00:f0:91:8d:
a3:a3:9a:93:24:d8:71:e8:db:99:4d:0d:91:e6:89:
bb:a0:5a:d9:ec:87:1b:22:15:34:06:d7:df:ef:8e:
41:db:0d:42:80:16:7f:25:83:cf:e3:42:8c:1f:9c:
54:e9:12:cf:a9:f2:34:b1:a5:81:66:71:09:bb:cf:
7c:fd:b0:f5:07:cd:ca:4e:14:c6:6c:a6:b5:df:7a:
18:de:2d:a6:2e:77:9e:2f:d0:f9:b0:a1:94:6e:de:
36:e1:a4:1d:02:ac:dd:82:dd:3b:0e:3b:ed:59:57:
aa:43:43:94:de:a5:ea:6d:6f:31:ae:65:4f:6a:d2:
4c:1f:3d:5b:e8:53:64:36:11:70:95:7a:35:09:45:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:4D:A3:90:0D:AA:72:C6:F1:7B:BF:B8:49:D0:5C:F5:50:12:3B
X509v3 Authority Key Identifier:
keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:03:ff:7d:4e:8c:a4:ce:4c:8f:e5:9d:96:e1:78:36:2d:02:
7e:5b:17:ce:fd:1d:5d:8e:2a:18:14:fd:08:c7:e8:dc:62:90:
ae:80:1a:df:bf:71:b3:01:a2:3d:d0:8e:e6:c8:22:05:af:0f:
5c:32:8a:49:bb:16:2a:bd:a6:42:d9:74:94:93:b5:4c:23:f9:
22:33:bb:d6:d8:7c:ec:28:78:ab:98:f8:7e:f6:9e:42:b1:f7:
c5:16:0c:4a:e4:3c:d7:81:4d:69:14:89:a7:a9:01:23:0e:65:
fc:57:34:9c:ff:d0:79:36:b8:e0:c2:89:f2:f8:56:76:68:ce:
34:49:13:79:63:8b:5c:b6:7c:63:e4:d4:e1:f4:93:3e:93:3b:
21:82:1c:d2:b9:6d:9d:00:cf:75:a8:2f:f8:31:9e:74:94:b4:
04:db:19:3f:cb:55:c9:bf:00:1e:9c:d6:0b:35:43:51:e7:b1:
5c:74:72:75:4d:a6:cd:50:9a:66:cd:cc:6a:e0:96:d1:3a:bf:
8d:5e:b0:4e:3a:a5:6a:73:9b:97:78:cf:ec:86:ca:f7:a2:1d:
8b:2b:4f:bf:06:04:b6:e5:5c:d0:23:e8:56:7f:d0:ef:ed:28:
23:1b:1d:0d:ed:99:97:c2:9e:c7:74:27:56:93:de:e6:69:f8:
96:d0:51:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqfPUINHDXUAWbnapXUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODE5MmU5Zjc0MGU4ZDIzODA1OWUyOGEwYTAzNzA4MzA4
MWI3ZDIwHhcNMjUwMTMxMTAwMTEwWhcNMjUwMjAxMTAwMTEwWjAzMTEwLwYDVQQD
Eyg4NTY4NGRhMzkwMGRhYTcyYzZmMTdiYmZiODQ5ZDA1Y2Y1NTAxMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LKlkpmUTqDxCC1HX0D2p54Zkj5F
7ABqi291w6L+C+ZUu05EnUAbi2woj4olPDWLjswPZmxDPciItL8gHaarZ3KCS0VY
gEkqy2U0XcI+/TkhgdgUdl20/oRNV9prHlCJEOj8IAKtojA99x5PCuH79iUkeQDw
kY2jo5qTJNhx6NuZTQ2R5om7oFrZ7IcbIhU0Btff745B2w1CgBZ/JYPP40KMH5xU
6RLPqfI0saWBZnEJu898/bD1B83KThTGbKa133oY3i2mLneeL9D5sKGUbt424aQd
Aqzdgt07DjvtWVeqQ0OU3qXqbW8xrmVPatJMHz1b6FNkNhFwlXo1CUUvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVoTaOQDapyxvF7v7hJ0Fz1UBI7MB8GA1UdIwQY
MBaAFHqBkun3QOjSOAWeKKCgNwgwgbfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQt
YzBlMzNiYmY1MjM4LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQtYzBlMzNiYmY1MjM4
LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgP/fU6M
pM5Mj+WdluF4Ni0CflsXzv0dXY4qGBT9CMfo3GKQroAa379xswGiPdCO5sgiBa8P
XDKKSbsWKr2mQtl0lJO1TCP5IjO71th87Ch4q5j4fvaeQrH3xRYMSuQ814FNaRSJ
p6kBIw5l/Fc0nP/QeTa44MKJ8vhWdmjONEkTeWOLXLZ8Y+TU4fSTPpM7IYIc0rlt
nQDPdagv+DGedJS0BNsZP8tVyb8AHpzWCzVDUeexXHRydU2mzVCaZs3MauCW0Tq/
jV6wTjqlanObl3jP7IbK96IdiytPvwYEtuVc0CPoVn/Q7+0oIxsdDe2Zl8Kex3Qn
VpPe5mn4ltBRcg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:32 2025 by rpki-client