Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: ZFiksjYCa8sEQYFVr+wyF8bXpxEknwEPMutsm4KzE0Y=
Subject key identifier: AE:18:AB:24:31:D6:A6:6C:0E:12:44:E6:DD:40:4C:13:A4:20:F6:E9
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 0194BD176EFE5A6A0DCB63292B4777595F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 11DE
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: 9zdvdCrinvrsTtGIeB/hST4pN1Tz6DCAR1zUqF/EmnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:fe:5a:6a:0d:cb:63:29:2b:47:77:59:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=ae18ab2431d6a66c0e1244e6dd404c13a420f6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:0b:d4:cb:46:d0:a2:60:84:0a:57:ec:e3:
47:42:b2:72:38:e8:1e:44:9e:8d:f0:4a:fe:8f:9e:
5f:15:3d:4d:22:98:8a:4e:b8:e7:7a:68:71:1e:11:
da:2c:f2:a9:cd:9b:ee:d1:1c:db:4f:c4:ce:88:f4:
b6:4f:b3:f7:69:b7:95:56:52:6c:fb:40:0a:5a:d1:
7f:8a:07:03:fa:76:b0:e6:57:dc:dc:6a:79:58:cd:
ea:b2:5a:56:dc:09:b9:18:c5:36:ef:19:33:c0:63:
dd:2b:9d:df:9e:9d:b3:38:71:ec:83:2c:ea:08:c5:
22:d3:86:fd:a8:01:2a:d9:79:f7:b5:19:b5:42:18:
f4:3b:bd:d0:8a:11:b0:01:66:fc:74:6b:41:e5:83:
80:0e:b4:79:a3:cf:f4:60:8c:fa:03:98:68:1b:fc:
0f:9f:36:4c:c3:10:41:bb:21:a9:d6:4b:57:63:8d:
40:c9:fa:0d:2f:be:c6:71:13:92:e4:ec:53:94:b4:
fb:5f:25:d4:29:cc:83:df:6a:d7:d9:e2:58:cc:a6:
e4:dd:73:6f:4a:1e:a9:4d:e6:d8:89:0d:f4:19:16:
79:b2:1e:34:be:df:27:7a:e3:7e:a1:78:7b:26:99:
7c:eb:32:c6:2c:59:51:07:08:88:59:b2:db:34:5d:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:AB:24:31:D6:A6:6C:0E:12:44:E6:DD:40:4C:13:A4:20:F6:E9
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:2d:b4:0f:5e:1d:65:35:46:cd:fa:43:d1:63:ba:ae:49:
b0:0c:8c:b0:85:c9:cf:b7:0a:bf:53:fc:b9:55:32:bf:37:f0:
48:73:53:7b:35:bd:97:c2:92:bd:d4:49:1d:da:4c:77:42:6f:
30:d6:1f:48:8b:e0:ef:25:3a:88:05:58:01:95:77:4b:cf:27:
63:8f:89:60:c6:df:91:70:a6:d0:7f:67:bf:71:73:c5:04:c2:
d8:af:d8:68:7b:7c:f1:ac:90:61:0c:fd:de:f6:6d:e5:55:39:
86:c7:f6:c3:7c:34:1d:28:ee:b1:8b:83:2c:b6:2b:fa:88:33:
e4:54:2a:c9:6b:3e:b7:fc:cf:9a:80:a4:a1:69:9a:90:c1:d8:
25:2c:db:21:84:08:10:0e:8e:31:e0:bc:70:a3:dd:ec:87:ec:
e9:a3:1c:87:a5:0c:e1:e1:6d:71:bf:63:75:3f:00:95:39:3b:
4a:fb:31:dc:22:bf:53:90:40:a6:19:c5:5c:ae:6d:e7:c6:ca:
2d:07:95:04:85:78:c2:1f:e2:4a:51:7c:53:22:5e:62:3f:99:
f4:50:79:16:c6:91:52:f6:b6:ab:24:e6:48:e9:cb:e6:dd:68:
85:80:d1:71:56:a3:36:a7:9c:29:77:04:09:3c:fc:37:53:53:
ad:8e:10:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F27+WmoNy2MpK0d3WV9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk
M2M4YTYwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
EyhhZTE4YWIyNDMxZDZhNjZjMGUxMjQ0ZTZkZDQwNGMxM2E0MjBmNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcoL1MtG0KJghApX7ONHQrJyOOge
RJ6N8Er+j55fFT1NIpiKTrjnemhxHhHaLPKpzZvu0RzbT8TOiPS2T7P3abeVVlJs
+0AKWtF/igcD+naw5lfc3Gp5WM3qslpW3Am5GMU27xkzwGPdK53fnp2zOHHsgyzq
CMUi04b9qAEq2Xn3tRm1Qhj0O73QihGwAWb8dGtB5YOADrR5o8/0YIz6A5hoG/wP
nzZMwxBBuyGp1ktXY41AyfoNL77GcROS5OxTlLT7XyXUKcyD32rX2eJYzKbk3XNv
Sh6pTebYiQ30GRZ5sh40vt8neuN+oXh7Jpl86zLGLFlRBwiIWbLbNF1+/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4YqyQx1qZsDhJE5t1ATBOkIPbpMB8GA1UdIwQY
MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt
MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh
LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPkttA9e
HWU1Rs36Q9Fjuq5JsAyMsIXJz7cKv1P8uVUyvzfwSHNTezW9l8KSvdRJHdpMd0Jv
MNYfSIvg7yU6iAVYAZV3S88nY4+JYMbfkXCm0H9nv3FzxQTC2K/YaHt88ayQYQz9
3vZt5VU5hsf2w3w0HSjusYuDLLYr+ogz5FQqyWs+t/zPmoCkoWmakMHYJSzbIYQI
EA6OMeC8cKPd7Ifs6aMch6UM4eFtcb9jdT8AlTk7Svsx3CK/U5BAphnFXK5t58bK
LQeVBIV4wh/iSlF8UyJeYj+Z9FB5FsaRUva2qyTmSOnL5t1ohYDRcVajNqecKXcE
CTz8N1NTrY4Q9A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:10 2025 by rpki-client