Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File: eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier: y7Y/UbvEg6kLlJcHVGn8+98I7IG2GsnzRE7CcfnZ6aM=
Subject key identifier: B9:64:81:EB:A9:58:BD:39:8D:DF:DD:15:12:59:4D:E3:C7:72:BA:05
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 0195E0B4314723CE2C203AE6C43BE39FC6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number: 0772
Signing time: Sat 29 Mar 2025 07:01:00 +0000
Manifest this update: Sat 29 Mar 2025 07:01:00 +0000
Manifest next update: Sun 30 Mar 2025 07:01:00 +0000
Files and hashes: 1: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: YVtqPVnDSDzcY/2EV1QqPchHrWH/UAdrKTu3UhbubWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:31:47:23:ce:2c:20:3a:e6:c4:3b:e3:9f:c6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Mar 29 07:01:00 2025 GMT
Not After : Mar 30 07:01:00 2025 GMT
Subject: CN=b96481eba958bd398ddfdd1512594de3c772ba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:7e:18:65:a0:85:8f:d8:24:8d:66:54:78:
70:48:10:ab:ea:90:72:e6:e6:ac:c6:71:ab:29:b7:
78:b5:7f:93:1e:5c:3f:e3:d2:fd:12:c7:a2:2a:2e:
8b:b7:b8:10:a1:4d:06:f3:b4:e8:e3:e8:12:45:c9:
84:db:f2:24:e1:e9:ae:3c:4d:8b:34:5e:b8:0e:0c:
f9:c4:a4:ed:42:08:5e:4b:17:fe:8d:0c:5c:55:0a:
9c:94:04:59:80:4e:5e:56:aa:f9:ec:e7:a2:41:f5:
e6:3b:53:03:0d:7e:a3:67:4f:b7:ac:b0:70:d9:5a:
3b:20:8b:28:45:e8:af:a7:3c:20:d1:c4:47:78:46:
f1:d8:07:9b:99:85:e3:c9:ae:6f:c3:4b:24:0a:e4:
8c:c8:3f:0a:27:4f:14:c5:f9:08:34:0e:0e:be:af:
f0:39:e7:08:29:2e:e2:d2:a0:c2:8d:5c:bd:3e:00:
8f:19:a6:e8:6a:5f:8b:ea:65:ec:5d:39:c8:3d:09:
c5:d5:dd:6f:0f:62:31:61:2f:61:94:00:33:21:4c:
2e:93:7d:33:41:63:12:2b:38:9d:fc:15:78:4a:68:
99:94:47:c0:ac:e8:d0:2b:6c:91:89:f0:0b:70:49:
5a:d8:b5:62:55:f6:72:28:1d:fb:be:ca:42:92:e5:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:64:81:EB:A9:58:BD:39:8D:DF:DD:15:12:59:4D:E3:C7:72:BA:05
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:46:38:93:db:8b:45:cb:cd:73:45:77:fc:f4:4a:91:1c:11:
db:96:ae:1b:86:50:11:1e:04:8e:ca:83:b8:f8:25:be:00:31:
0f:2c:1d:f4:1d:7d:4d:4e:ac:c3:6f:5c:c7:15:2f:63:d6:fd:
1e:28:21:30:73:9b:32:80:aa:02:eb:43:df:21:3c:a1:ac:97:
3f:e4:f1:d4:24:49:70:09:51:cc:8d:81:00:94:b6:df:b9:74:
bb:07:c5:14:3b:25:e0:66:51:c4:12:25:ab:42:1b:98:1f:d0:
f4:a6:99:df:e3:a6:99:be:0b:33:de:8a:02:a5:bd:97:dc:49:
e2:68:c0:1a:8d:ec:ab:f1:41:c4:c6:ee:44:36:e4:74:2b:2c:
04:f5:22:f7:17:2c:67:db:01:0c:5d:a2:a6:7a:90:77:3d:7a:
5a:22:1f:38:46:e9:74:db:ab:b3:3f:69:c7:da:45:6d:58:54:
45:ca:cf:de:bf:4e:8a:0b:99:1b:b4:cb:eb:85:1c:70:37:3d:
b7:f2:d9:92:1d:36:5e:4d:a5:0a:1d:ad:7b:11:13:b5:1f:ff:
89:ad:a6:47:77:9f:e8:e7:c2:72:74:cb:7f:ca:bc:3a:93:20:
16:ba:3c:72:d1:49:64:7c:62:bb:88:8b:4c:67:c1:40:4e:fb:
71:d5:33:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtDFHI84sIDrmxDvjn8bhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTI2NjlmODE5ZWJkOGRkMmViYmE5M2YyZGQyZDNlMWEy
N2MyMzEwHhcNMjUwMzI5MDcwMTAwWhcNMjUwMzMwMDcwMTAwWjAzMTEwLwYDVQQD
EyhiOTY0ODFlYmE5NThiZDM5OGRkZmRkMTUxMjU5NGRlM2M3NzJiYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzql+GGWghY/YJI1mVHhwSBCr6pBy
5uasxnGrKbd4tX+THlw/49L9EseiKi6Lt7gQoU0G87To4+gSRcmE2/Ik4emuPE2L
NF64Dgz5xKTtQgheSxf+jQxcVQqclARZgE5eVqr57OeiQfXmO1MDDX6jZ0+3rLBw
2Vo7IIsoReivpzwg0cRHeEbx2AebmYXjya5vw0skCuSMyD8KJ08UxfkINA4Ovq/w
OecIKS7i0qDCjVy9PgCPGaboal+L6mXsXTnIPQnF1d1vD2IxYS9hlAAzIUwuk30z
QWMSKzid/BV4SmiZlEfArOjQK2yRifALcEla2LViVfZyKB37vspCkuV79wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlkgeupWL05jd/dFRJZTePHcroFMB8GA1UdIwQY
MBaAFHiSZp+Bnr2N0uu6k/LdLT4aJ8IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMt
YjhhMjhjYmVmNGFkLzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMtYjhhMjhjYmVmNGFk
LzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkY4k9uL
RcvNc0V3/PRKkRwR25auG4ZQER4EjsqDuPglvgAxDywd9B19TU6sw29cxxUvY9b9
HighMHObMoCqAutD3yE8oayXP+Tx1CRJcAlRzI2BAJS237l0uwfFFDsl4GZRxBIl
q0IbmB/Q9KaZ3+Ommb4LM96KAqW9l9xJ4mjAGo3sq/FBxMbuRDbkdCssBPUi9xcs
Z9sBDF2ipnqQdz16WiIfOEbpdNursz9px9pFbVhURcrP3r9OiguZG7TL64UccDc9
t/LZkh02Xk2lCh2texETtR//ia2mR3ef6OfCcnTLf8q8OpMgFro8ctFJZHxiu4iL
TGfBQE77cdUzfg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:49 2025 by rpki-client