Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: PUIGuTXWarzVrku5kVyMuferEar5L80n635SF2dzTLs=
Subject key identifier: A1:6B:4B:11:FB:18:39:DA:51:B6:84:8A:72:CF:D9:A1:84:69:1D:99
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 0194BCA9DB32229A8C7E1FED2C9B2CDADF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: eh5qADvOW9YooSFi9xWIhPqTZAE.roa (hash: lzsm6FBwUN9N9FmksKmql4AQDvHpl7L4NMdpIGcKg2s=)
2: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: QjXPmsjFuGxtRo121XLKoDhhOJFicVWdUQKNeiw9tLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:db:32:22:9a:8c:7e:1f:ed:2c:9b:2c:da:df:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=a16b4b11fb1839da51b6848a72cfd9a184691d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:86:83:21:dc:02:2a:f9:64:f0:14:91:00:
53:d1:05:f0:d0:0d:74:36:ad:96:63:38:e9:e0:dd:
05:68:f1:87:d4:d1:5f:8c:88:ad:f6:24:f4:08:5c:
04:7a:83:05:d4:4f:55:2d:25:53:d5:6f:71:cc:86:
f5:f5:9e:a6:3e:c3:85:56:60:0a:3e:c2:39:5a:07:
14:e5:05:59:36:14:4b:c8:93:05:ce:b7:81:98:60:
c8:80:ba:48:af:2b:ae:98:fb:82:3d:95:f8:f3:95:
30:e7:bb:4a:e6:a8:67:8b:51:8c:7e:00:d5:ea:6d:
a4:3d:dc:99:66:21:4f:cb:fe:3b:64:06:68:0f:b1:
ee:37:14:a8:8c:98:3b:6d:0d:6a:12:7a:d9:0d:45:
7c:5a:0f:eb:55:f8:ef:16:2e:95:9c:d2:d3:56:4c:
05:95:d8:d1:c4:13:a4:78:4e:31:42:29:50:f5:83:
6b:27:4c:b1:9d:ae:33:d4:03:b1:d0:00:e9:31:bf:
db:23:f8:0d:2e:8b:9f:0c:14:bf:d0:0a:9b:b1:4c:
ef:ba:51:15:6e:6a:25:ac:79:13:d9:f4:7a:92:99:
20:bb:02:d1:fb:8c:ff:72:72:0c:4e:69:ed:31:cb:
ce:5a:5c:ff:ec:b9:b8:5a:c7:1c:55:30:5c:d7:72:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:4B:11:FB:18:39:DA:51:B6:84:8A:72:CF:D9:A1:84:69:1D:99
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:f3:4b:ad:f6:72:7e:38:17:b5:03:81:33:10:94:ff:aa:
c9:33:f7:19:10:6d:e8:90:ac:31:ea:c4:a9:da:6b:34:dd:89:
51:ee:6f:8a:0e:89:f0:43:d7:92:71:5a:bd:57:cc:51:30:a3:
c2:94:53:fc:e5:f0:71:ff:87:94:1e:6e:09:56:9f:77:49:a3:
6c:42:99:67:0b:da:8c:fa:23:39:f1:f5:1c:d3:ec:6b:83:68:
d3:2b:87:00:d7:1e:20:ab:75:e7:c0:70:79:bb:b5:31:75:28:
b8:46:f8:2d:85:ea:7a:65:3d:fa:a1:de:47:b3:f8:7a:6d:a8:
6d:00:37:e4:40:2a:d4:f5:67:10:89:05:33:3e:4a:85:49:c8:
48:f5:5e:69:11:ea:6a:95:95:80:c5:c0:6f:e8:00:82:1d:75:
9f:9a:40:38:bc:18:a9:93:f0:29:3f:d1:9f:8b:da:2d:89:4e:
20:68:ec:ae:49:c0:72:c2:8f:5f:62:83:6f:09:bd:1f:8e:71:
7d:8f:8e:c6:4a:ce:cf:6a:01:c3:6c:0f:d3:d3:86:16:35:78:
26:95:32:b5:f3:74:f0:8c:8c:f4:f7:03:ff:2a:02:87:00:09:
fd:a8:c1:1d:9d:e3:8f:11:d9:25:de:4d:c0:f6:51:60:0d:64:
61:bf:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:41 2025 by rpki-client