Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier: +IAo28Au5zR/1x/DtL5t+GLWW6jwphoXWBbvszFLhOg=
Subject key identifier: F4:FD:FE:2B:16:7C:CF:A1:A1:B2:0A:C5:DA:9B:98:47:88:52:CC:05
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial: 0194BCA9910C950939DC7F14A1EDF99EE20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=)
2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: wn71THA7NSJH6eytnaWGb4ym4LXdigGfPWrnn5I8bV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:0c:95:09:39:dc:7f:14:a1:ed:f9:9e:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=f4fdfe2b167ccfa1a1b20ac5da9b98478852cc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:e0:e3:bd:f5:49:4f:88:db:ad:85:bb:c1:
fa:e6:22:ee:50:57:03:8e:3a:a6:af:42:0b:5f:56:
d8:a8:c0:ed:59:8f:c1:f2:50:b6:24:62:c4:56:fa:
ad:fc:58:cf:c1:5d:10:f3:08:57:95:72:1c:0c:e2:
f3:d5:2c:95:a4:22:62:38:3e:49:7f:c1:c9:fa:9e:
5e:c5:72:e9:a2:42:dd:07:66:04:39:ec:75:a3:26:
82:9f:70:94:85:7b:7b:38:fc:9a:b0:29:f2:cc:ce:
69:14:f2:9b:4f:5e:2f:8c:5a:c7:cc:05:f9:d4:7c:
90:2d:24:c2:8a:3f:c1:cf:5b:d6:4d:42:36:ef:5a:
93:b5:a7:d8:f1:98:4d:5a:3a:4d:b5:3d:53:5a:d5:
a2:e9:a9:4f:1c:d2:14:9e:48:c0:66:f1:bf:0b:0e:
c6:df:da:2e:59:d7:8d:90:fc:ae:2a:eb:2e:cb:6e:
2c:99:31:6f:17:e7:4a:f2:db:ea:06:c4:32:42:05:
d1:27:ac:1d:c1:ef:b9:4a:73:a6:b0:92:28:96:58:
d2:a8:fc:a6:b7:60:ae:38:fc:c8:8e:8b:d0:b9:0a:
ee:c6:bb:92:49:39:d5:a5:b0:41:96:d0:ca:14:01:
86:e9:6a:7a:d7:33:b3:5f:81:45:21:54:7f:8a:59:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:FE:2B:16:7C:CF:A1:A1:B2:0A:C5:DA:9B:98:47:88:52:CC:05
X509v3 Authority Key Identifier:
keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:21:ca:31:9e:a9:ae:7e:47:01:48:b7:c4:b0:42:01:73:6d:
f5:1d:96:e0:87:13:d1:62:f4:64:4c:2a:bb:23:62:a0:b2:ba:
12:41:d1:60:cd:8a:8a:6b:7c:b6:3e:d5:15:4e:c7:8c:9e:81:
e2:44:32:4e:b9:ea:eb:9a:7e:d2:97:39:fc:30:7c:2a:1d:f4:
69:81:77:6f:1d:d2:0e:44:d7:d4:a4:be:20:42:89:17:ed:55:
52:f5:cb:05:bd:a3:eb:fd:fb:41:81:71:34:d2:89:aa:07:de:
f8:41:43:9e:ac:9a:25:a1:3e:93:ec:c6:e4:28:7b:cb:41:5d:
73:03:1e:77:a8:11:bb:85:de:04:84:82:7a:d6:7f:6b:0b:b8:
e5:e8:fb:cf:b5:61:c8:f9:80:dd:c7:bc:33:5f:68:ea:03:b2:
69:70:da:d3:d1:76:32:8c:b0:27:e2:7e:1d:8a:f4:9e:4b:be:
54:6b:47:7f:6e:8c:14:43:c1:6b:90:29:89:16:31:b5:c0:55:
68:39:e6:5d:68:f5:66:c9:2a:94:bc:36:85:99:8f:99:93:27:
b7:b3:5e:9c:3f:eb:6d:e1:cb:e4:f1:be:a2:eb:d4:34:41:e7:
30:24:31:37:1a:4a:e0:07:de:5d:da:d5:2b:f1:70:95:4d:d1:
53:df:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:35 2025 by rpki-client