Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File: eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier: VNm4h/EZcSKpeG31x1vBQ9HJ5jax3ZTKThp0k3+OMpA=
Subject key identifier: A6:9E:55:83:F2:76:4E:BD:27:0F:E4:EB:18:CB:54:F0:A9:BB:E1:B5
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer: /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial: 0194BBCEAD76E32D127F63351934C4E531EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number: 0D29
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: N0z9esTkm8sf7IqrP3Uufonx0_k.roa (hash: cRVe0pjyNnhUe4BOiczul9pweEDzxKe03iHv5OQ9WhI=)
2: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: 9niJXfNUDHqcnligggjL03BlrJNipEvVRO/v9zx36PQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ad:76:e3:2d:12:7f:63:35:19:34:c4:e5:31:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=a69e5583f2764ebd270fe4eb18cb54f0a9bbe1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:00:2f:c1:f4:f9:7a:b3:da:86:46:6c:a6:61:
e9:74:aa:f5:d5:2b:59:7e:b2:36:a8:a3:92:91:c9:
15:c5:63:b7:c3:2d:04:3d:5e:e4:b1:cc:11:39:9e:
c8:7d:9c:0c:99:ad:de:e3:71:92:f6:ac:e8:ed:5b:
bd:e6:e5:7c:61:eb:04:ce:e9:ac:e7:ad:27:04:66:
d2:bb:c3:b8:2b:bc:d9:02:9f:a4:8f:c4:c3:10:57:
7f:64:6e:55:70:56:4c:2d:17:ff:21:17:1d:b4:c8:
6b:1b:ff:04:92:d5:9f:e3:d7:7c:d4:22:79:51:2a:
b4:fe:57:ef:17:10:ce:19:ca:52:ac:f1:1a:d7:6a:
15:0b:cb:50:27:f2:96:25:4d:b0:4b:44:5e:38:55:
98:e8:9b:50:99:3e:47:73:fd:b4:65:e4:77:bc:92:
19:e3:51:4d:bd:36:5c:2a:34:8a:29:cc:7a:91:5d:
1f:bf:c9:dd:ad:76:1a:58:96:8e:59:3c:05:52:c5:
f2:66:a6:4c:82:b2:05:95:c1:f7:0a:a8:04:af:f0:
14:5b:41:a0:54:19:e8:35:d0:b2:ff:44:75:49:91:
ff:91:56:cd:dc:06:80:06:1e:84:80:32:0a:29:ef:
cc:b4:33:ba:3f:69:f2:06:7b:39:6e:0c:b9:d9:d8:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9E:55:83:F2:76:4E:BD:27:0F:E4:EB:18:CB:54:F0:A9:BB:E1:B5
X509v3 Authority Key Identifier:
keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:44:53:09:c0:24:c5:0f:83:fa:10:cf:03:05:06:af:97:6d:
f5:3a:36:1d:60:4c:a9:cb:ab:4b:49:9d:eb:6b:6c:cb:9a:4c:
e1:9c:96:d8:5d:ee:12:6a:05:29:b0:73:26:e0:7d:b6:1c:6e:
ff:87:15:1d:85:c1:dc:21:a7:94:1f:e7:ab:55:4e:bf:59:54:
45:fa:80:a5:2b:da:ad:c3:ad:5c:75:0b:e9:92:20:5f:f9:8a:
01:cf:75:5c:7d:90:6d:c5:71:14:ac:5c:e2:18:25:45:29:68:
45:ef:23:4c:3d:7b:2d:04:d4:a3:0e:2a:8c:e8:bb:be:dd:59:
89:42:3a:c3:8e:9a:9e:d3:aa:e6:9b:69:e9:5d:a6:84:48:35:
c2:d2:bd:c1:0e:ee:8b:81:62:b9:d5:b9:ff:55:57:e2:a6:5d:
c1:b6:ad:ff:de:cf:7f:26:61:77:fc:d9:4a:db:85:84:d1:1a:
67:20:61:04:da:b0:eb:f0:c2:64:5b:dd:00:53:58:80:42:1e:
f0:91:72:61:88:f2:3c:dc:d4:58:45:1c:c3:76:57:5c:fa:5e:
9a:3c:ca:9b:c3:92:38:1a:7f:1a:66:a6:2a:3c:a4:30:c3:f1:
75:b9:98:6f:57:08:17:77:d1:4f:6d:23:90:0a:43:4f:0d:8d:
aa:6d:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:35 2025 by rpki-client