Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: 9uNESgxbOZpKkz9mo92MKkULRq7mUeQmHzfdSgc1cco=
Subject key identifier: EA:B6:10:6E:21:CC:BD:18:72:F3:9E:69:19:06:0F:8E:F0:99:CD:6C
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 0194BD859E5281E5F0CBEAD93F6F373E497F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 135A
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: lXiUxW+jMbHUwTk/UiEr66q/S5JmQPTVMVEm0A1bS+M=)
2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:52:81:e5:f0:cb:ea:d9:3f:6f:37:3e:49:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=eab6106e21ccbd1872f39e6919060f8ef099cd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:63:d3:df:2e:3a:ba:f5:72:72:6c:40:14:
b7:2a:fd:ba:5a:c3:96:ce:33:02:fc:aa:3d:eb:91:
92:f7:37:cc:39:9b:45:43:72:3b:04:5d:7b:ba:09:
61:75:0d:0c:dd:0d:33:83:2b:af:a8:f7:26:b4:28:
c7:cd:3c:98:68:28:b9:07:1f:c8:0a:78:9d:16:06:
12:41:d0:5d:7e:4a:5a:91:83:9b:05:54:df:ec:54:
5b:bb:68:d7:0c:7c:29:ed:11:92:88:49:e3:36:a9:
d2:85:82:d1:13:cb:05:84:fa:d3:d4:8c:b9:29:02:
09:4a:0c:f5:a2:4d:c8:84:32:26:6e:a7:38:cb:8e:
50:53:f7:4d:94:21:a2:2f:0f:af:6b:6a:0a:9f:af:
47:0e:4b:f4:cb:47:e8:ee:4e:47:dc:f6:d9:ee:e7:
0f:5d:f1:a5:fe:be:a3:fe:bc:b5:fa:d2:3b:6a:59:
35:2c:85:2c:76:b2:13:c2:5c:c9:75:5d:54:b3:37:
fe:4e:5a:46:18:38:4a:6b:21:cb:b6:d4:77:67:fd:
77:26:df:dd:bf:2d:97:17:9b:6f:ac:2b:3e:00:3c:
73:e2:98:c3:02:34:84:7b:42:c9:c5:2e:53:55:51:
6c:1f:3d:b7:08:0e:2a:79:83:9c:ab:6a:5b:7a:b0:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B6:10:6E:21:CC:BD:18:72:F3:9E:69:19:06:0F:8E:F0:99:CD:6C
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:28:54:d4:a9:0e:91:36:42:09:4b:02:1d:90:66:28:f4:16:
64:7d:81:f2:1d:82:78:1e:11:71:f9:81:e8:11:a5:4f:28:2e:
0a:1c:30:a7:c0:b8:20:9f:f6:86:89:dc:27:7e:da:32:0b:35:
f3:61:55:77:42:b6:ba:3c:91:cf:d0:2c:77:ed:5a:c8:f2:2f:
fa:d3:57:ca:ef:e9:38:63:d2:e8:76:a9:49:81:73:0e:78:93:
d3:b1:8d:41:fc:3e:db:88:55:a3:55:50:ea:4e:aa:1d:4f:c9:
f6:75:06:1f:a3:1b:16:88:37:6a:79:f2:08:84:24:f5:a2:82:
45:f2:7f:4a:6a:90:6f:35:40:16:9d:26:c9:06:e8:bf:17:16:
b1:77:c9:a1:a6:ff:cd:51:5d:6a:25:f0:11:77:c4:20:3f:2f:
3a:2f:ee:f3:92:06:8e:4a:ce:95:68:9b:9a:5b:78:be:6a:1e:
35:f9:97:7b:49:ea:31:7f:ed:72:a6:30:f5:2a:17:20:89:80:
3f:39:13:c2:22:92:fd:e1:e1:80:0a:b3:9e:e1:99:32:f2:af:
18:1d:96:61:1f:5d:8d:6e:02:4c:06:3f:c1:f9:c6:0c:6c:53:
03:c1:0a:f5:fb:60:01:aa:2f:9f:b0:bc:3e:f2:ae:da:63:a9:
a9:9a:04:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZ5SgeXwy+rZP283Pkl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzg2NTg3YWQ0NzIwNWE4MTEyOGU1NzhjOTBjYWVlMWU0
ODgyOGIwHhcNMjUwMTMxMTgwMDM4WhcNMjUwMjAxMTgwMDM4WjAzMTEwLwYDVQQD
EyhlYWI2MTA2ZTIxY2NiZDE4NzJmMzllNjkxOTA2MGY4ZWYwOTljZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk9j098uOrr1cnJsQBS3Kv26WsOW
zjMC/Ko965GS9zfMOZtFQ3I7BF17uglhdQ0M3Q0zgyuvqPcmtCjHzTyYaCi5Bx/I
CnidFgYSQdBdfkpakYObBVTf7FRbu2jXDHwp7RGSiEnjNqnShYLRE8sFhPrT1Iy5
KQIJSgz1ok3IhDImbqc4y45QU/dNlCGiLw+va2oKn69HDkv0y0fo7k5H3PbZ7ucP
XfGl/r6j/ry1+tI7alk1LIUsdrITwlzJdV1Uszf+TlpGGDhKayHLttR3Z/13Jt/d
vy2XF5tvrCs+ADxz4pjDAjSEe0LJxS5TVVFsHz23CA4qeYOcq2pberBZjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq2EG4hzL0YcvOeaRkGD47wmc1sMB8GA1UdIwQY
MBaAFON4ZYetRyBagRKOV4yQyu4eSIKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMt
MDdjYzQ2ZTYzYjUwLzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMtMDdjYzQ2ZTYzYjUw
LzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyhU1KkO
kTZCCUsCHZBmKPQWZH2B8h2CeB4RcfmB6BGlTyguChwwp8C4IJ/2honcJ37aMgs1
82FVd0K2ujyRz9Asd+1ayPIv+tNXyu/pOGPS6HapSYFzDniT07GNQfw+24hVo1VQ
6k6qHU/J9nUGH6MbFog3annyCIQk9aKCRfJ/SmqQbzVAFp0myQbovxcWsXfJoab/
zVFdaiXwEXfEID8vOi/u85IGjkrOlWibmlt4vmoeNfmXe0nqMX/tcqYw9SoXIImA
PzkTwiKS/eHhgAqznuGZMvKvGB2WYR9djW4CTAY/wfnGDGxTA8EK9ftgAaovn7C8
PvKu2mOpqZoEnw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:50 2025 by rpki-client