Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File: EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier: 4zO2/cKwq1kaot9jNku2RrGLpLCSAZlyabeR+1VmrRA=
Subject key identifier: 40:D1:40:E0:F7:76:0A:04:2A:08:45:C5:46:3F:C0:F6:5C:A4:A7:45
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 0194BD4E49687B13328862B946FFD4A5F428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number: 1448
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: A-CITLCzJtdw39wtm0dLTltUEFM.roa (hash: c5iWUzoFE3kjILTe2m5OWQi3zSByNEE2KpMzxgoNxeI=)
2: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: iHVYMxEFL1D6GCiyBm6/m9SVHq2K2vYdqPTT2LWMw9U=)
3: VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa (hash: qUqfQH6HkkXqxIuCFL1oijtckoAAoRaIonlYxeFElKw=)
4: f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa (hash: ZfWB0QSC1JhyWEDFyE7CZ6ZmAqPQnN6XecILZVAnstM=)
5: kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa (hash: SgO20AkeVjqIkes5Gz4s0ZXBoQPcPhpf8s/VjNKSJAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:49:68:7b:13:32:88:62:b9:46:ff:d4:a5:f4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=40d140e0f7760a042a0845c5463fc0f65ca4a745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:58:15:0c:ea:b1:7b:b9:74:47:61:63:c8:
8c:00:36:74:30:bb:bb:0d:0f:e4:ca:00:3a:ac:3e:
83:4e:91:39:a0:21:19:f3:d1:76:99:5a:56:dc:8b:
3b:d1:47:71:58:a2:75:21:77:c2:9c:d0:0e:05:1b:
65:1e:21:4c:c2:de:3e:f2:79:5a:9c:e0:dd:4f:89:
56:ba:97:f3:e3:51:6a:f7:ff:5d:2a:de:11:06:72:
59:df:be:bb:c1:77:54:ee:81:ef:2a:8e:c1:25:4c:
eb:5d:60:75:ce:fd:2c:9c:e3:f2:6f:2d:f9:0f:31:
0d:bb:42:f0:49:94:2e:aa:da:9d:47:6b:e1:9d:b7:
a0:fa:17:92:64:6f:bb:f7:c4:cd:ac:f9:06:6b:c9:
1c:dc:9d:31:ef:8a:b5:a7:60:8f:19:b9:3f:b0:3c:
71:5a:e9:9d:45:d7:1f:10:b9:8e:11:d2:6a:51:b9:
17:ed:db:3d:d0:3a:b3:6f:61:61:44:a6:98:ff:4e:
25:e5:17:9a:03:ac:9d:00:d9:12:82:ac:90:25:3e:
94:49:24:c7:20:0d:a9:1b:24:e3:e2:d0:c4:73:92:
7d:9c:60:ba:60:7f:67:03:0d:5b:97:b2:31:46:eb:
e3:fd:71:d6:82:08:e7:0d:eb:b6:d9:c5:42:67:6d:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D1:40:E0:F7:76:0A:04:2A:08:45:C5:46:3F:C0:F6:5C:A4:A7:45
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d8:42:65:4f:7f:0a:f8:8d:bd:d8:27:f7:4f:5c:d8:89:90:
41:ac:29:b0:60:f2:0c:69:59:60:8d:b2:c4:93:9b:1a:12:c2:
a7:21:4d:98:1b:68:04:61:5f:18:2b:1a:31:57:18:49:01:d6:
38:00:f3:10:bd:ea:e9:15:22:e5:af:b6:a0:7d:bc:61:35:b8:
8f:df:37:9d:ef:76:cd:26:25:a2:42:cc:ce:0e:a7:c3:52:0b:
b8:bd:75:d1:9f:c3:76:7b:49:00:b7:e9:05:69:9e:9d:be:ab:
8e:3f:e3:25:34:ae:bd:a6:39:d2:59:49:3d:58:b5:83:6b:1f:
89:7c:44:f0:57:12:4c:c2:49:e9:a2:9e:15:13:3a:75:9e:9a:
19:f5:d0:bb:35:db:21:bf:08:cb:6b:f9:1d:ea:79:d2:82:0c:
ce:1a:ca:a7:a3:4f:2a:53:61:08:9c:7b:5f:00:1f:04:0d:13:
fa:6f:74:21:45:26:b4:1c:a3:4e:3d:4c:e4:aa:e5:ec:df:94:
d4:42:08:90:91:9e:6c:81:c5:83:61:b4:3f:11:9b:4a:51:09:
d7:e8:93:13:fd:b9:84:20:38:3e:2c:11:55:1e:3a:e0:f2:2c:
1b:9c:f4:ad:2f:2f:a6:43:c6:ef:a9:6a:fa:b0:cd:87:24:79:
9a:29:b3:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TkloexMyiGK5Rv/UpfQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw
ZGU2NjEwHhcNMjUwMTMxMTcwMDExWhcNMjUwMjAxMTcwMDExWjAzMTEwLwYDVQQD
Eyg0MGQxNDBlMGY3NzYwYTA0MmEwODQ1YzU0NjNmYzBmNjVjYTRhNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAultYFQzqsXu5dEdhY8iMADZ0MLu7
DQ/kygA6rD6DTpE5oCEZ89F2mVpW3Is70UdxWKJ1IXfCnNAOBRtlHiFMwt4+8nla
nODdT4lWupfz41Fq9/9dKt4RBnJZ3767wXdU7oHvKo7BJUzrXWB1zv0snOPyby35
DzENu0LwSZQuqtqdR2vhnbeg+heSZG+798TNrPkGa8kc3J0x74q1p2CPGbk/sDxx
WumdRdcfELmOEdJqUbkX7ds90Dqzb2FhRKaY/04l5ReaA6ydANkSgqyQJT6USSTH
IA2pGyTj4tDEc5J9nGC6YH9nAw1bl7IxRuvj/XHWggjnDeu22cVCZ21L5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDRQOD3dgoEKghFxUY/wPZcpKdFMB8GA1UdIwQY
MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt
OWMxNzRlNTNlNGZlLzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl
LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNhCZU9/
CviNvdgn909c2ImQQawpsGDyDGlZYI2yxJObGhLCpyFNmBtoBGFfGCsaMVcYSQHW
OADzEL3q6RUi5a+2oH28YTW4j983ne92zSYlokLMzg6nw1ILuL110Z/DdntJALfp
BWmenb6rjj/jJTSuvaY50llJPVi1g2sfiXxE8FcSTMJJ6aKeFRM6dZ6aGfXQuzXb
Ib8Iy2v5Hep50oIMzhrKp6NPKlNhCJx7XwAfBA0T+m90IUUmtByjTj1M5Krl7N+U
1EIIkJGebIHFg2G0PxGbSlEJ1+iTE/25hCA4PiwRVR464PIsG5z0rS8vpkPG76lq
+rDNhyR5mimz9Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:11 2025 by rpki-client