Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/98c304-1fce-4f15-a41a-51e8f2dfa0cc/1/EPKd2EeLV95e6tbnnfleZABhku0.mft
File: EPKd2EeLV95e6tbnnfleZABhku0.mft (raw, json)
Hash identifier: Pst/Mh0YUHGE7KiCcREO3ali9lmDcd0ngBsFoQ06rs4=
Subject key identifier: 95:99:48:37:7E:33:03:8C:C6:B0:5A:CF:45:38:DF:8E:F5:90:66:92
Authority key identifier: 10:F2:9D:D8:47:8B:57:DE:5E:EA:D6:E7:9D:F9:5E:64:00:61:92:ED
Certificate issuer: /CN=10f29dd8478b57de5eead6e79df95e64006192ed
Certificate serial: 03C31E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPKd2EeLV95e6tbnnfleZABhku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/98c304-1fce-4f15-a41a-51e8f2dfa0cc/1/EPKd2EeLV95e6tbnnfleZABhku0.mft
Manifest number: 04D2
Signing time: Sun 27 Mar 2022 21:43:09 +0000
Manifest this update: Sun 27 Mar 2022 21:43:09 +0000
Manifest next update: Mon 28 Mar 2022 21:43:09 +0000
Files and hashes: 1: EPKd2EeLV95e6tbnnfleZABhku0.crl (hash: beRL5BtWPud25fIKG84xlmp3P33ZUjDbD/8huNLrC1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63118884 (0x3c31e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f29dd8478b57de5eead6e79df95e64006192ed
Validity
Not Before: Mar 27 21:43:09 2022 GMT
Not After : Mar 28 21:43:09 2022 GMT
Subject: CN=959948377e33038cc6b05acf4538df8ef5906692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:92:74:c8:8d:27:7b:7d:62:97:a7:69:b3:
b3:c0:f3:e2:e2:d0:e8:e5:66:ee:7c:6f:90:f5:c1:
11:5a:fe:e7:7f:ac:e3:8c:ec:ab:60:da:05:b7:30:
28:0c:3b:d5:2a:e3:e1:fc:52:26:40:52:ec:14:22:
b5:bc:0e:8b:df:b3:98:a9:61:3d:ac:e5:2c:98:2f:
5f:61:af:00:93:57:98:27:7c:ef:3b:7a:b5:66:0b:
92:df:81:dc:d2:96:a4:a2:da:30:0e:df:e9:18:6f:
38:50:46:30:3c:e0:f6:5f:4b:2a:e9:10:fe:c3:8b:
d3:bf:ae:e4:21:1f:3b:c4:e8:3a:77:5e:c9:88:88:
8c:0a:38:7a:c5:99:2f:77:ae:41:8c:e2:bf:8a:ea:
8a:ca:d1:96:eb:7e:d2:1b:45:ea:71:f9:dc:c2:c5:
45:98:6d:eb:07:14:bc:1c:97:29:bb:87:00:72:e2:
32:a2:a1:fd:2d:cc:c0:7b:79:22:c5:e1:63:af:0a:
40:bb:22:d9:fb:16:4e:38:65:d1:ee:20:12:dd:14:
af:24:0a:c9:8d:2d:1f:37:11:68:07:dd:e6:54:71:
84:5a:6f:61:ed:42:f2:3d:b2:70:46:4e:95:cb:d1:
46:1b:7b:5b:4a:05:a2:32:ea:23:a0:ca:dd:7d:e9:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:48:37:7E:33:03:8C:C6:B0:5A:CF:45:38:DF:8E:F5:90:66:92
X509v3 Authority Key Identifier:
keyid:10:F2:9D:D8:47:8B:57:DE:5E:EA:D6:E7:9D:F9:5E:64:00:61:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPKd2EeLV95e6tbnnfleZABhku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/98c304-1fce-4f15-a41a-51e8f2dfa0cc/1/EPKd2EeLV95e6tbnnfleZABhku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/98c304-1fce-4f15-a41a-51e8f2dfa0cc/1/EPKd2EeLV95e6tbnnfleZABhku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:dc:44:80:ce:57:30:9e:85:2b:b7:48:d9:75:9f:51:10:70:
48:57:92:7b:b2:a8:c0:e7:ba:26:b2:d1:e9:a0:00:22:30:6e:
f6:f6:da:ee:93:c9:c3:24:3f:02:40:dd:fa:25:ba:d8:bc:b6:
9f:0b:5f:7d:d4:dc:30:20:4f:d7:ab:cb:18:75:e1:2b:cd:40:
02:d6:72:63:de:d6:b7:65:43:85:62:21:2f:b6:46:72:1a:58:
ec:1a:79:8b:5f:bb:02:0b:02:ee:89:e6:73:1e:66:35:84:3c:
3d:48:d8:b3:ae:68:05:ab:bf:93:42:c9:ac:2a:88:bc:bd:8d:
42:ec:d2:54:0d:13:48:73:4e:16:5d:17:c7:93:e4:5b:39:ee:
ec:fd:85:76:1f:94:c4:c0:e8:bf:c3:d5:11:2e:76:c9:86:49:
d8:82:2f:38:04:b5:e6:c3:46:78:02:f7:72:73:c5:42:f6:44:
a1:d7:cd:50:dc:d2:f7:e7:35:f9:46:53:06:9b:b1:99:7f:29:
3c:e2:0e:80:6a:15:aa:fa:6d:66:f6:57:58:3c:a4:c8:32:83:
a5:c2:91:17:02:a7:e2:8a:29:18:37:a5:be:bb:4c:02:d1:7c:
a2:32:bb:8e:4c:f6:49:0c:0c:fe:8f:b7:34:13:f0:da:87:98:
27:0e:df:d9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEA8MeJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MGYyOWRkODQ3OGI1N2RlNWVlYWQ2ZTc5ZGY5NWU2NDAwNjE5MmVkMB4XDTIyMDMy
NzIxNDMwOVoXDTIyMDMyODIxNDMwOVowMzExMC8GA1UEAxMoOTU5OTQ4Mzc3ZTMz
MDM4Y2M2YjA1YWNmNDUzOGRmOGVmNTkwNjY5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK95knTIjSd7fWKXp2mzs8Dz4uLQ6OVm7nxvkPXBEVr+53+s
44zsq2DaBbcwKAw71Srj4fxSJkBS7BQitbwOi9+zmKlhPazlLJgvX2GvAJNXmCd8
7zt6tWYLkt+B3NKWpKLaMA7f6RhvOFBGMDzg9l9LKukQ/sOL07+u5CEfO8ToOnde
yYiIjAo4esWZL3euQYziv4rqisrRlut+0htF6nH53MLFRZht6wcUvByXKbuHAHLi
MqKh/S3MwHt5IsXhY68KQLsi2fsWTjhl0e4gEt0UryQKyY0tHzcRaAfd5lRxhFpv
Ye1C8j2ycEZOlcvRRht7W0oFojLqI6DK3X3pUD8CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSVmUg3fjMDjMawWs9FON+O9ZBmkjAfBgNVHSMEGDAWgBQQ8p3YR4tX3l7q
1ued+V5kAGGS7TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VQS2QyRWVMVjk1ZTZ0Ym5uZmxlWkFCaGt1MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjMvOThjMzA0LTFmY2UtNGYxNS1hNDFhLTUxZThmMmRmYTBjYy8x
L0VQS2QyRWVMVjk1ZTZ0Ym5uZmxlWkFCaGt1MC5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMv
OThjMzA0LTFmY2UtNGYxNS1hNDFhLTUxZThmMmRmYTBjYy8xL0VQS2QyRWVMVjk1
ZTZ0Ym5uZmxlWkFCaGt1MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACjcRIDOVzCehSu3SNl1n1EQcEhX
knuyqMDnuiay0emgACIwbvb22u6TycMkPwJA3foluti8tp8LX33U3DAgT9eryxh1
4SvNQALWcmPe1rdlQ4ViIS+2RnIaWOwaeYtfuwILAu6J5nMeZjWEPD1I2LOuaAWr
v5NCyawqiLy9jULs0lQNE0hzThZdF8eT5Fs57uz9hXYflMTA6L/D1REudsmGSdiC
LzgEtebDRngC93JzxUL2RKHXzVDc0vfnNflGUwabsZl/KTziDoBqFar6bWb2V1g8
pMgyg6XCkRcCp+KKKRg3pb67TALRfKIyu45M9kkMDP6PtzQT8NqHmCcO39k=
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:48 2025 by rpki-client