Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: 85obnIchhhIWITGppGZ/4JGsvumJUCRImfVt2nZuxWo=
Subject key identifier: FA:28:CA:28:7B:0B:07:06:C9:69:4F:A2:8E:AF:37:65:C4:91:BE:1E
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 0194BCE05E20B849BAB75802F3E5A0714901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: kFj1FXHOjSoinL5rJ7Rvgfwvn6y3ijdtoa42cFFSlnU=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5e:20:b8:49:ba:b7:58:02:f3:e5:a0:71:49:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=fa28ca287b0b0706c9694fa28eaf3765c491be1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:74:ba:01:47:5d:40:00:5a:34:e0:88:df:
b2:a3:35:9b:37:b9:45:57:c2:36:69:ad:6c:d0:b9:
ec:e7:48:8c:65:88:28:b9:5c:9a:bb:63:c5:31:34:
ae:8a:38:9e:fc:a6:20:dd:d9:3b:0e:16:00:9c:6e:
b0:28:6d:8a:bc:7f:1f:62:e5:0b:4a:87:87:eb:4e:
ed:bf:ed:e3:69:49:da:d7:b1:cc:78:0d:52:ef:95:
c3:0f:a6:78:2e:26:65:73:ca:6d:5f:ef:82:4a:ca:
5f:ac:6e:5c:6a:15:60:d8:2c:d1:5c:25:ff:dd:6e:
e8:b1:8d:a6:17:43:b8:18:10:40:76:9f:9e:3a:fb:
87:d4:23:33:ec:94:e8:1f:24:3e:84:cb:34:a9:d9:
e6:4c:6f:03:0c:d8:75:07:65:0e:d2:9d:d9:2f:db:
ee:7d:ad:da:84:be:ac:c6:65:aa:15:c7:ff:81:0e:
e9:7f:17:c7:71:a0:f2:58:cb:19:6e:8a:66:43:61:
e9:2f:61:e1:82:03:45:54:f2:9e:2a:f3:db:11:f0:
8d:a5:b0:b1:c3:60:b3:ee:18:dc:3c:72:36:1c:ad:
68:97:28:e2:fe:88:f3:93:c0:a3:b0:36:49:8c:21:
b7:21:72:10:ca:f3:41:48:b2:a8:1a:6b:60:fe:1d:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:CA:28:7B:0B:07:06:C9:69:4F:A2:8E:AF:37:65:C4:91:BE:1E
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:06:e3:95:90:ef:dc:74:39:ce:7b:94:bb:8b:b8:ae:13:51:
3d:bd:ff:b2:dc:bc:be:27:51:80:52:f4:81:8b:af:c7:b7:28:
a9:23:f3:c1:89:a4:10:5e:4c:2e:10:2b:cd:eb:58:35:b4:3a:
f7:94:cc:97:07:84:aa:e0:f2:91:af:87:a4:f4:98:61:95:a2:
61:01:ff:66:13:0b:60:79:65:9c:e3:91:2e:2b:d7:47:33:61:
7c:af:7e:c9:67:72:14:66:9b:38:e0:2c:8a:14:7a:c6:27:f8:
4d:93:d2:df:d7:f0:40:da:63:35:c1:e7:27:f6:e3:93:03:ae:
76:41:26:08:52:46:47:68:05:c3:92:be:14:98:1c:d4:ea:15:
b3:92:ac:91:ab:7b:12:8f:70:25:7c:21:d0:44:e0:8b:ab:98:
4e:78:5d:67:98:84:51:c6:82:c9:a1:e7:15:dd:7d:82:9b:ba:
68:67:1b:4e:37:e0:93:d7:6f:70:06:cc:2b:62:93:35:65:46:
92:2b:ad:de:a4:2c:45:3e:04:4a:b1:ed:57:2e:9b:0a:d5:2f:
09:27:1d:dc:82:8e:ad:21:91:83:fb:da:69:90:a9:7d:2b:c6:
a7:91:b3:f1:c1:0a:33:64:06:58:e8:28:0d:ea:9b:44:73:56:
da:e1:46:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84F4guEm6t1gC8+WgcUkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0
NTVhNTYwHhcNMjUwMTMxMTUwMDA4WhcNMjUwMjAxMTUwMDA4WjAzMTEwLwYDVQQD
EyhmYTI4Y2EyODdiMGIwNzA2Yzk2OTRmYTI4ZWFmMzc2NWM0OTFiZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRt0ugFHXUAAWjTgiN+yozWbN7lF
V8I2aa1s0Lns50iMZYgouVyau2PFMTSuijie/KYg3dk7DhYAnG6wKG2KvH8fYuUL
SoeH607tv+3jaUna17HMeA1S75XDD6Z4LiZlc8ptX++CSspfrG5cahVg2CzRXCX/
3W7osY2mF0O4GBBAdp+eOvuH1CMz7JToHyQ+hMs0qdnmTG8DDNh1B2UO0p3ZL9vu
fa3ahL6sxmWqFcf/gQ7pfxfHcaDyWMsZbopmQ2HpL2HhggNFVPKeKvPbEfCNpbCx
w2Cz7hjcPHI2HK1olyji/ojzk8CjsDZJjCG3IXIQyvNBSLKoGmtg/h34tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPooyih7CwcGyWlPoo6vN2XEkb4eMB8GA1UdIwQY
MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et
MjY4Y2VkODQzNWI1LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1
LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAbjlZDv
3HQ5znuUu4u4rhNRPb3/sty8vidRgFL0gYuvx7coqSPzwYmkEF5MLhArzetYNbQ6
95TMlweEquDyka+HpPSYYZWiYQH/ZhMLYHllnOORLivXRzNhfK9+yWdyFGabOOAs
ihR6xif4TZPS39fwQNpjNcHnJ/bjkwOudkEmCFJGR2gFw5K+FJgc1OoVs5Kskat7
Eo9wJXwh0ETgi6uYTnhdZ5iEUcaCyaHnFd19gpu6aGcbTjfgk9dvcAbMK2KTNWVG
kiut3qQsRT4ESrHtVy6bCtUvCScd3IKOrSGRg/vaaZCpfSvGp5Gz8cEKM2QGWOgo
DeqbRHNW2uFGCw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:04 2025 by rpki-client