Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: xplCPVvWtTHhyZkjGa82WP9/Jgo6p9jifYiwFqGul9I=
Subject key identifier: AF:12:2B:08:39:8A:DA:91:AC:58:BB:0A:9B:57:D8:9D:77:71:CA:89
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 01962E2AFC5BF7DDA58A5B84976C75D5C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0843
Signing time: Sun 13 Apr 2025 08:01:31 +0000
Manifest this update: Sun 13 Apr 2025 08:01:31 +0000
Manifest next update: Mon 14 Apr 2025 08:01:31 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: LpPbfHu724hhEmxfPjt4cLX3xAnCyg9ru1yOD7DxI1c=)
2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:fc:5b:f7:dd:a5:8a:5b:84:97:6c:75:d5:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Apr 13 08:01:31 2025 GMT
Not After : Apr 14 08:01:31 2025 GMT
Subject: CN=af122b08398ada91ac58bb0a9b57d89d7771ca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:b4:6c:c0:19:30:71:cc:c1:ee:e1:e4:bc:
fd:66:5c:8c:b4:dc:dd:ab:a5:5e:da:d0:fa:33:8d:
0c:05:c2:d6:41:7e:e4:a0:07:b9:da:de:0f:4d:81:
23:85:a4:8e:85:8a:2c:88:56:7d:95:27:5a:41:03:
56:56:e6:57:67:22:f3:5b:fc:33:1b:e2:19:ab:a8:
95:c5:f8:0b:14:63:7a:6e:70:15:a2:26:f6:d7:be:
7c:f8:31:ac:1e:f2:a1:95:6a:a5:9d:51:1f:2e:03:
cd:2a:d6:ed:9a:da:b4:ee:89:00:44:97:fd:98:f5:
0f:77:8a:d3:2f:df:0d:8c:95:4d:36:07:ca:46:9e:
5f:e0:cb:5b:05:80:65:ed:07:45:30:9c:19:52:a3:
54:62:81:ec:53:8e:f6:8c:28:a5:fd:44:b1:09:9b:
57:d6:8b:9d:f8:12:9f:aa:29:85:9b:4d:0b:dd:76:
a2:8f:0c:c9:36:c3:88:11:67:7c:20:e3:be:1d:1a:
87:a9:a4:cc:03:a0:52:0e:2a:3a:1f:b2:14:28:e3:
7c:c4:e2:7c:06:cb:1e:e0:4a:a0:c5:f2:65:08:dc:
35:85:bc:3f:6f:29:79:0b:6b:7c:de:30:e9:5d:ee:
0d:b0:21:ba:09:48:22:44:fd:08:ad:b7:e4:e7:10:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:2B:08:39:8A:DA:91:AC:58:BB:0A:9B:57:D8:9D:77:71:CA:89
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:95:2e:1e:a9:6b:18:a8:3b:2e:e4:24:1c:a7:bf:ca:fb:2c:
78:c4:3b:72:d7:f6:9a:88:54:71:98:50:82:3a:52:08:2b:18:
e1:e1:89:40:7b:cf:ef:4f:5b:6d:6b:98:3a:66:af:7d:57:b5:
aa:bf:89:60:af:c0:e1:e8:49:14:18:b0:65:61:74:7d:33:33:
55:d4:c4:39:6f:95:47:27:61:a9:fc:c8:54:e1:92:7f:8b:50:
89:b2:60:f2:75:fa:b6:d0:b2:4a:b7:97:a4:6b:f4:c5:5f:57:
8b:13:32:d4:54:b4:76:9a:15:8f:0c:2b:f4:8f:a9:60:88:4e:
be:2e:94:7e:38:e9:b5:d4:02:8d:68:f0:b9:30:94:fb:e0:ce:
f2:a8:cd:93:34:bc:be:c5:98:30:d1:27:9b:e7:ce:73:13:13:
7e:7f:db:13:32:c5:a2:1d:e6:6d:6f:68:a8:15:d8:a4:30:89:
b0:f9:5e:14:1a:85:0b:9e:e8:f7:63:20:b0:26:b6:c4:63:a7:
ab:6f:1a:4c:d6:d8:cc:8c:95:11:41:fa:0c:1b:5b:e0:f5:9e:
b3:66:3e:f1:4b:be:54:a0:46:a6:93:32:2d:41:9d:14:33:c0:
26:0a:3d:94:3a:34:05:73:a4:84:5a:4d:71:72:11:94:c3:8a:
70:15:a1:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvxb992liluEl2x11cSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNDFjODViNDc0ZThiNmMwMDg5MWQ5NTQxMjRmZjBjODEy
MDBkOGMwHhcNMjUwNDEzMDgwMTMxWhcNMjUwNDE0MDgwMTMxWjAzMTEwLwYDVQQD
EyhhZjEyMmIwODM5OGFkYTkxYWM1OGJiMGE5YjU3ZDg5ZDc3NzFjYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOW0bMAZMHHMwe7h5Lz9ZlyMtNzd
q6Ve2tD6M40MBcLWQX7koAe52t4PTYEjhaSOhYosiFZ9lSdaQQNWVuZXZyLzW/wz
G+IZq6iVxfgLFGN6bnAVoib21758+DGsHvKhlWqlnVEfLgPNKtbtmtq07okARJf9
mPUPd4rTL98NjJVNNgfKRp5f4MtbBYBl7QdFMJwZUqNUYoHsU472jCil/USxCZtX
1oud+BKfqimFm00L3XaijwzJNsOIEWd8IOO+HRqHqaTMA6BSDio6H7IUKON8xOJ8
Bsse4EqgxfJlCNw1hbw/byl5C2t83jDpXe4NsCG6CUgiRP0Irbfk5xDcwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8SKwg5itqRrFi7CptX2J13ccqJMB8GA1UdIwQY
MBaAFOBByFtHTotsAIkdlUEk/wyBIA2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMt
NDZiYjNmYTI4YjAwLzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMtNDZiYjNmYTI4YjAw
LzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpUuHqlr
GKg7LuQkHKe/yvsseMQ7ctf2mohUcZhQgjpSCCsY4eGJQHvP709bbWuYOmavfVe1
qr+JYK/A4ehJFBiwZWF0fTMzVdTEOW+VRydhqfzIVOGSf4tQibJg8nX6ttCySreX
pGv0xV9XixMy1FS0dpoVjwwr9I+pYIhOvi6UfjjptdQCjWjwuTCU++DO8qjNkzS8
vsWYMNEnm+fOcxMTfn/bEzLFoh3mbW9oqBXYpDCJsPleFBqFC57o92MgsCa2xGOn
q28aTNbYzIyVEUH6DBtb4PWes2Y+8Uu+VKBGppMyLUGdFDPAJgo9lDo0BXOkhFpN
cXIRlMOKcBWhJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net