Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier: /qf/zzNww2NpAn836phgdbNlkyv7seqAppkuyVo0Xdc=
Subject key identifier: 84:A0:D4:E5:DF:8A:85:E4:81:D5:DE:80:F6:23:C9:EE:6F:3F:92:A6
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial: 0194BCA9968563B89B279B889E74DC8C10E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number: 0C2F
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: N+S3RZiBNxvUXAD0waMqVtJeJj2BmHKppQHrLybDw50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:96:85:63:b8:9b:27:9b:88:9e:74:dc:8c:10:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=84a0d4e5df8a85e481d5de80f623c9ee6f3f92a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:9e:26:bb:9a:da:18:b0:f7:59:69:7d:23:
ce:a4:47:20:e8:f9:47:51:84:e3:0e:be:6a:cd:6a:
f2:7b:af:df:02:48:a7:6b:29:7e:5d:56:94:b6:06:
3e:20:7b:a4:2b:7d:a4:69:22:fa:ae:0f:22:43:01:
86:36:84:5a:1b:46:bb:04:98:b1:29:fc:74:dd:0a:
4e:5a:cf:f9:62:5c:f4:b3:16:bd:14:41:45:40:ae:
98:2c:3b:51:3d:79:b3:4b:b2:ff:27:b3:5d:52:e4:
d1:25:ab:c1:ab:de:0a:10:23:91:6c:9f:25:52:61:
25:4f:40:0a:1d:3e:6f:93:c9:70:1c:1d:2e:b0:55:
07:b8:24:ad:93:7e:90:d6:a7:a6:d9:8b:0b:e1:c9:
ec:76:1e:e2:6f:28:c9:91:2b:2b:d2:26:e6:b5:bb:
a2:d9:8f:9b:ce:35:5e:39:89:35:c9:92:ef:90:c7:
b7:12:51:f5:2d:68:43:db:0c:92:95:eb:c6:bb:27:
26:1a:7b:8a:2d:fd:ff:c1:0c:bb:74:82:7c:f3:aa:
c1:02:ac:4a:e5:e8:5c:6d:91:9c:91:54:8d:2a:58:
87:d8:e8:0b:75:8b:cc:41:2f:3e:4c:4d:8d:d3:a6:
c3:a4:9b:32:b4:67:ae:ad:8b:bb:1d:87:5d:34:42:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A0:D4:E5:DF:8A:85:E4:81:D5:DE:80:F6:23:C9:EE:6F:3F:92:A6
X509v3 Authority Key Identifier:
keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:19:b9:1b:59:9e:1e:b9:ff:73:da:ec:ca:c2:91:ac:55:
6e:dd:ac:43:82:23:f2:d3:01:2b:c0:1f:f2:99:24:4d:6b:81:
6b:6e:bb:78:ce:13:72:94:63:01:07:20:76:50:1d:5d:b9:71:
a7:f0:df:17:11:47:e5:bb:aa:4f:2a:ba:07:26:a4:8e:fd:f3:
0e:36:7c:52:8c:e3:e9:76:1a:e2:42:81:82:02:0a:97:1c:26:
19:0a:3e:4c:6b:e8:a4:a5:4d:b5:b8:f4:57:f3:1c:9a:5b:c7:
69:75:a1:fa:c9:6d:09:85:3b:fe:40:82:19:64:86:06:ce:f4:
d9:92:5f:68:d7:76:d0:48:14:f0:79:90:8c:c8:1b:34:3d:b5:
b2:72:00:08:49:b8:eb:65:a9:f7:1c:c7:44:4e:d4:a6:16:ca:
8b:37:1b:dc:64:fc:5e:66:23:5a:cd:20:27:7b:74:b2:48:bd:
44:d7:79:89:16:c4:17:f5:4f:9b:5c:ee:a5:51:00:14:a9:40:
a3:f5:67:b7:74:d4:70:d8:d5:ad:7a:3a:0f:2e:e3:11:65:fb:
34:1e:57:62:5b:5f:6e:fa:ab:fb:a4:d8:f6:8d:a5:2b:21:90:
37:64:dc:94:33:2e:f3:64:18:20:6e:83:50:69:43:df:34:a1:
3f:6a:d6:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZaFY7ibJ5uInnTcjBDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZTdlODc4NDM2NmI0NzFhNmE0ZTBjODA4MGY4ZjEwZGFl
NjZhNTAwHhcNMjUwMTMxMTQwMDE4WhcNMjUwMjAxMTQwMDE4WjAzMTEwLwYDVQQD
Eyg4NGEwZDRlNWRmOGE4NWU0ODFkNWRlODBmNjIzYzllZTZmM2Y5MmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojGeJrua2hiw91lpfSPOpEcg6PlH
UYTjDr5qzWrye6/fAkinayl+XVaUtgY+IHukK32kaSL6rg8iQwGGNoRaG0a7BJix
Kfx03QpOWs/5Ylz0sxa9FEFFQK6YLDtRPXmzS7L/J7NdUuTRJavBq94KECORbJ8l
UmElT0AKHT5vk8lwHB0usFUHuCStk36Q1qem2YsL4cnsdh7ibyjJkSsr0ibmtbui
2Y+bzjVeOYk1yZLvkMe3ElH1LWhD2wySlevGuycmGnuKLf3/wQy7dIJ886rBAqxK
5ehcbZGckVSNKliH2OgLdYvMQS8+TE2N06bDpJsytGeurYu7HYddNEJLfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISg1OXfioXkgdXegPYjye5vP5KmMB8GA1UdIwQY
MBaAFPXn6HhDZrRxpqTgyAgPjxDa5mpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2Nzct
MGQyNzA0NjJiN2Q3LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2NzctMGQyNzA0NjJiN2Q3
LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO4ZuRtZ
nh65/3Pa7MrCkaxVbt2sQ4Ij8tMBK8Af8pkkTWuBa267eM4TcpRjAQcgdlAdXblx
p/DfFxFH5buqTyq6Byakjv3zDjZ8Uozj6XYa4kKBggIKlxwmGQo+TGvopKVNtbj0
V/McmlvHaXWh+sltCYU7/kCCGWSGBs702ZJfaNd20EgU8HmQjMgbND21snIACEm4
62Wp9xzHRE7UphbKizcb3GT8XmYjWs0gJ3t0ski9RNd5iRbEF/VPm1zupVEAFKlA
o/Vnt3TUcNjVrXo6Dy7jEWX7NB5XYltfbvqr+6TY9o2lKyGQN2TclDMu82QYIG6D
UGlD3zShP2rWvw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:43 2025 by rpki-client