Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File: 18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier: Lrs7i2TEv3T/+8fEazd4gAGptH41ZeEgslZauI3Oi48=
Subject key identifier: E7:B9:30:2D:C7:FE:33:63:BD:65:12:97:38:3C:BC:BF:22:06:A9:1E
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 0194BCA9AA87E0541BD3E32ABF95F1DD11DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number: 0A27
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: rsC2ow9Rv2uAqHrZtNrWXCFm5dvgBFjjXFcdSPSuEV0=)
2: Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa (hash: BzYAqVCWtu3EBRZpVM9KZ2KVYbyGK5c4dT3hbIbWT74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:87:e0:54:1b:d3:e3:2a:bf:95:f1:dd:11:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=e7b9302dc7fe3363bd651297383cbcbf2206a91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:d2:6d:cc:dd:2c:f2:a2:77:14:67:e1:48:
1c:3b:31:e0:17:cb:36:9b:fb:2d:51:b3:c8:1d:a6:
dd:69:90:85:6f:a6:f6:5e:5e:f4:57:2b:62:6b:fe:
44:2f:40:ff:1f:e8:e8:fd:03:f4:32:5c:3e:bc:bb:
c9:68:e6:3d:8a:f0:5e:cc:4a:fb:04:95:23:99:36:
97:04:dd:82:85:c9:4d:37:f6:06:95:fb:64:27:a5:
5a:12:98:8c:cc:97:32:30:67:61:b6:1a:78:ba:ab:
3b:cc:90:06:5d:e0:f1:6c:01:b0:43:8b:fa:6d:2d:
94:d7:8a:3c:40:d2:a6:23:c0:5b:5e:5e:43:a1:f0:
59:60:dd:6b:93:58:10:3a:6c:aa:a9:18:5f:51:b7:
ed:06:b7:d8:12:7b:88:d4:d6:4a:cb:0e:48:64:57:
44:1a:7a:a3:07:55:22:60:cd:5c:6b:aa:09:6a:09:
78:71:71:f4:46:d6:5c:6d:83:0c:8a:c3:86:4c:c7:
f6:8d:d2:47:e0:bf:58:09:22:e7:d8:aa:a8:a7:fd:
65:ee:bf:87:3d:87:e1:f8:1f:d1:73:0a:a8:a5:5d:
fc:3f:b0:56:58:4a:af:f2:55:6d:d2:82:60:6d:5a:
bc:26:6a:db:2d:b4:e4:45:0d:c1:99:45:ca:1b:ad:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B9:30:2D:C7:FE:33:63:BD:65:12:97:38:3C:BC:BF:22:06:A9:1E
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1a:16:cc:8f:03:ba:65:6e:d5:be:ce:b4:e6:fd:28:e8:6a:
dc:30:eb:1e:24:d1:53:f6:68:ce:f2:1f:7f:e2:ac:27:97:ae:
3c:87:e3:67:81:29:29:fa:8d:7a:1d:f7:90:0e:e2:89:eb:d4:
ab:96:f4:b4:20:ab:cf:6a:76:79:cb:5c:ef:74:d3:b9:f6:42:
2b:ba:2b:be:01:9c:73:58:e0:90:f7:14:13:ba:95:fb:62:1e:
f9:e3:dc:71:9b:e9:96:8e:3d:e7:ac:ad:81:c5:e9:0c:d7:b1:
a8:28:af:f0:3a:15:43:81:95:ec:d4:71:25:dc:08:03:f4:64:
e5:cf:de:0c:1f:a1:97:db:48:95:50:8d:aa:be:76:38:6b:90:
26:54:10:16:ce:07:6d:e3:8d:07:af:7c:32:0d:c4:4d:7e:2a:
cb:d2:c1:2c:3f:9a:bc:52:6a:d9:03:a9:4f:aa:45:03:04:11:
f8:12:f9:05:a6:6b:59:45:d4:42:29:73:a8:95:ac:0b:dd:05:
20:1e:04:56:7a:df:5b:76:e3:60:44:73:b4:1e:84:4a:7a:dc:
6c:48:0e:34:f3:8f:25:3b:9c:52:9e:95:c6:ee:ce:a1:42:96:
8f:95:81:b4:29:18:de:61:1c:2e:e4:75:1f:b5:da:43:b4:c6:
a5:7d:f6:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaqH4FQb0+Mqv5Xx3RHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzczM2U5ZjYxMzRmNzQ0OWM0MWE1ZWViZjU4M2NlMzVi
NTQyNjAwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EyhlN2I5MzAyZGM3ZmUzMzYzYmQ2NTEyOTczODNjYmNiZjIyMDZhOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ODSbczdLPKidxRn4UgcOzHgF8s2
m/stUbPIHabdaZCFb6b2Xl70Vytia/5EL0D/H+jo/QP0Mlw+vLvJaOY9ivBezEr7
BJUjmTaXBN2ChclNN/YGlftkJ6VaEpiMzJcyMGdhthp4uqs7zJAGXeDxbAGwQ4v6
bS2U14o8QNKmI8BbXl5DofBZYN1rk1gQOmyqqRhfUbftBrfYEnuI1NZKyw5IZFdE
GnqjB1UiYM1ca6oJagl4cXH0RtZcbYMMisOGTMf2jdJH4L9YCSLn2Kqop/1l7r+H
PYfh+B/RcwqopV38P7BWWEqv8lVt0oJgbVq8JmrbLbTkRQ3BmUXKG62yoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe5MC3H/jNjvWUSlzg8vL8iBqkeMB8GA1UdIwQY
MBaAFNfHM+n2E090ScQaXuv1g841tUJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMt
OWM5MDJjNjZlZTk5LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMtOWM5MDJjNjZlZTk5
LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBoWzI8D
umVu1b7OtOb9KOhq3DDrHiTRU/ZozvIff+KsJ5euPIfjZ4EpKfqNeh33kA7iievU
q5b0tCCrz2p2ectc73TTufZCK7orvgGcc1jgkPcUE7qV+2Ie+ePccZvplo4956yt
gcXpDNexqCiv8DoVQ4GV7NRxJdwIA/Rk5c/eDB+hl9tIlVCNqr52OGuQJlQQFs4H
beONB698Mg3ETX4qy9LBLD+avFJq2QOpT6pFAwQR+BL5BaZrWUXUQilzqJWsC90F
IB4EVnrfW3bjYERztB6ESnrcbEgONPOPJTucUp6Vxu7OoUKWj5WBtCkY3mEcLuR1
H7XaQ7TGpX32AA==
-----END CERTIFICATE-----
Generated at Fri May 9 07:39:33 2025 by rpki-client