Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: Mz2F4GlrDpzo2i4iedjC5rGpXBHgoX7/m63JuJdSaYE=
Subject key identifier: 92:72:EF:5F:55:B9:5E:CC:2A:05:B4:06:1F:46:57:47:3A:1C:E6:8C
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 0195E0B4AA3B38555A302C07B4C6133D733F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 79
Signing time: Sat 29 Mar 2025 07:01:31 +0000
Manifest this update: Sat 29 Mar 2025 07:01:31 +0000
Manifest next update: Sun 30 Mar 2025 07:01:31 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: j8tyjT7nElppeXLAIXv4Qm+O/SRzJf1fZmR24MeEXuE=)
2: MWfGbekGdiIlL_QnOkQ9r-npSTo.roa (hash: NlhTGNa3FSPX/6OYQDRDJHu85zHjDwDvfSYqtIACw6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:aa:3b:38:55:5a:30:2c:07:b4:c6:13:3d:73:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Mar 29 07:01:31 2025 GMT
Not After : Mar 30 07:01:31 2025 GMT
Subject: CN=9272ef5f55b95ecc2a05b4061f4657473a1ce68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:36:bd:10:07:d7:0d:70:0c:5b:b0:7d:dc:c4:
3a:f5:ba:86:80:1a:09:2f:07:3b:dd:c3:59:73:54:
d2:1f:3d:3e:30:e7:34:90:9c:cd:49:af:c7:6f:22:
cd:7f:39:b7:80:df:1d:8c:86:b3:f0:c2:89:55:fd:
20:44:db:81:94:d3:9e:00:2b:6c:83:29:d3:37:d4:
48:87:4e:a4:61:97:44:f0:39:fd:e7:73:99:73:81:
d6:7d:0d:5e:ff:e0:76:a0:2f:2c:8e:72:dc:78:26:
de:d6:5a:dc:60:ed:d1:a9:e3:ad:a9:3b:58:07:e6:
af:d8:fe:dc:d2:f2:c1:34:95:4d:a8:ae:63:0d:4c:
80:8b:b7:23:ad:35:4d:bc:23:b6:fe:9c:7c:c8:7b:
bc:ac:0f:0f:ec:e3:d6:28:32:cd:f9:9b:48:c0:a7:
e5:5d:67:05:42:25:2d:55:eb:b2:7c:74:b0:99:dd:
25:56:99:de:ee:1e:aa:c2:31:17:b5:7e:ae:2e:1d:
af:07:31:41:28:3c:e7:2f:0c:98:6d:14:6a:1c:6c:
ce:35:69:65:b0:9c:a5:5e:5e:27:b1:a9:cc:73:18:
cd:09:46:59:44:9b:06:7d:ab:8a:fc:7d:a1:51:29:
3d:2f:36:14:32:28:3b:66:9a:f9:c7:01:1b:26:53:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:72:EF:5F:55:B9:5E:CC:2A:05:B4:06:1F:46:57:47:3A:1C:E6:8C
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:65:12:5c:e4:ac:b1:ad:4f:fc:27:fe:99:bd:b8:a7:00:
19:6d:07:7d:c6:b2:dc:b2:83:a5:de:85:0d:50:36:ac:33:ac:
8a:c0:71:e9:35:b8:d7:82:65:dd:95:5d:4b:34:f5:85:ef:d9:
79:89:57:f5:8f:5b:55:ff:d3:15:48:76:b8:75:e9:25:44:44:
af:16:90:c1:8f:b2:45:d4:f4:1f:a6:cd:b6:89:1e:b7:fc:47:
aa:35:67:78:c2:1d:34:30:38:8f:d4:73:22:b1:b8:50:36:f6:
34:21:2e:79:80:52:f1:1b:8e:73:62:fd:b1:52:55:35:6a:eb:
f6:d8:9b:e5:ca:15:35:14:eb:7e:06:b5:d4:a2:01:11:79:bf:
55:f5:e9:3a:e9:6d:7c:18:30:c7:7c:b8:5f:e2:3e:29:7d:a8:
ac:56:8e:d3:a1:88:bd:0a:13:3f:31:bd:52:2c:9f:65:20:b6:
d6:10:b3:5d:1d:95:9a:a7:3c:9f:e8:cb:f9:c3:ec:e9:6d:6b:
1d:b5:9a:49:36:62:ec:20:b2:91:76:fa:5e:dd:2d:4f:49:2d:
cb:9f:c6:b8:dd:1c:1c:bc:c4:ba:e8:d7:50:4b:a1:fa:a9:0e:
a9:46:3f:2e:1f:72:8b:9b:32:cd:f6:4f:42:fb:3d:39:29:f0:
91:76:63:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtKo7OFVaMCwHtMYTPXM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1
ZDNjM2QwHhcNMjUwMzI5MDcwMTMxWhcNMjUwMzMwMDcwMTMxWjAzMTEwLwYDVQQD
Eyg5MjcyZWY1ZjU1Yjk1ZWNjMmEwNWI0MDYxZjQ2NTc0NzNhMWNlNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ta9EAfXDXAMW7B93MQ69bqGgBoJ
Lwc73cNZc1TSHz0+MOc0kJzNSa/HbyLNfzm3gN8djIaz8MKJVf0gRNuBlNOeACts
gynTN9RIh06kYZdE8Dn953OZc4HWfQ1e/+B2oC8sjnLceCbe1lrcYO3RqeOtqTtY
B+av2P7c0vLBNJVNqK5jDUyAi7cjrTVNvCO2/px8yHu8rA8P7OPWKDLN+ZtIwKfl
XWcFQiUtVeuyfHSwmd0lVpne7h6qwjEXtX6uLh2vBzFBKDznLwyYbRRqHGzONWll
sJylXl4nsanMcxjNCUZZRJsGfauK/H2hUSk9LzYUMig7Zpr5xwEbJlOBzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJy719VuV7MKgW0Bh9GV0c6HOaMMB8GA1UdIwQY
MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt
MzdiZmNiODBmNjE4LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4
LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHftlElzk
rLGtT/wn/pm9uKcAGW0Hfcay3LKDpd6FDVA2rDOsisBx6TW414Jl3ZVdSzT1he/Z
eYlX9Y9bVf/TFUh2uHXpJURErxaQwY+yRdT0H6bNtoket/xHqjVneMIdNDA4j9Rz
IrG4UDb2NCEueYBS8RuOc2L9sVJVNWrr9tib5coVNRTrfga11KIBEXm/VfXpOult
fBgwx3y4X+I+KX2orFaO06GIvQoTPzG9UiyfZSC21hCzXR2Vmqc8n+jL+cPs6W1r
HbWaSTZi7CCykXb6Xt0tT0kty5/GuN0cHLzEuujXUEuh+qkOqUY/Lh9yi5syzfZP
Qvs9OSnwkXZjOw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:30 2025 by rpki-client