Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: UivACm2nAuEthC3xIjtW0swKLFAwg861XjmT/knad50=
Subject key identifier: 4A:66:11:17:F3:75:E8:86:25:B2:B3:19:D3:68:81:49:0A:A7:E0:0B
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 0194BC04D37AAD3C8A7FA09350628E54BD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: rPLpejX1YrELAUAO6qPlwOknMyN9aOq4eYez/OnfVYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d3:7a:ad:3c:8a:7f:a0:93:50:62:8e:54:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=4a661117f375e88625b2b319d36881490aa7e00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:18:3b:b6:93:bd:d1:69:9e:2f:82:ca:6c:
b7:ca:d4:05:ff:cc:2c:4f:c1:31:7a:29:31:e8:b7:
5b:1a:1d:85:75:d0:19:ae:5f:1b:dd:29:a3:8c:3c:
ed:3c:4b:2c:41:c2:a1:cd:dc:7a:67:3f:9c:56:8e:
43:be:40:d6:69:66:8a:97:53:73:75:96:b3:76:3a:
c7:19:bd:39:bc:4b:a0:0d:60:aa:57:96:6a:6a:00:
0a:67:51:06:62:24:92:61:ef:ea:48:d9:cf:69:e8:
d3:f4:00:1c:d0:a8:f3:88:58:fe:f7:c5:03:62:7b:
03:c6:05:84:52:63:3f:e9:9e:4f:70:74:ab:20:88:
1c:00:c0:5f:7f:8d:7d:e5:e7:ff:f0:de:3a:56:f5:
6f:25:41:5b:f0:5a:4f:97:8c:e7:0e:d3:e9:4b:57:
3b:c4:18:05:0c:3f:d9:da:0d:21:b7:0a:0c:76:3a:
7f:52:52:cd:66:7c:b2:18:34:15:2d:4a:8b:68:11:
51:35:54:e4:8d:8b:b5:20:05:3c:9f:04:98:d0:41:
95:89:71:3d:45:b1:68:d4:1f:d4:d9:2c:9e:28:f7:
20:a6:f0:f9:f6:37:9d:8b:c2:44:50:e4:07:24:e9:
52:0c:e4:fc:ff:7c:8f:0a:2b:eb:7e:14:26:47:3f:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:11:17:F3:75:E8:86:25:B2:B3:19:D3:68:81:49:0A:A7:E0:0B
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e3:91:65:6e:96:98:23:0e:c1:df:f2:62:cc:32:6a:9f:42:
6f:37:cd:f8:51:13:19:58:23:73:a7:01:fe:37:11:12:15:42:
7c:37:c5:d4:7d:a4:f9:b8:17:08:99:59:27:d8:a5:a4:7c:d5:
08:ee:ff:74:5e:70:4a:05:4f:c2:b1:6c:47:17:78:05:e1:4b:
56:c8:ef:31:2b:5c:93:ee:61:6d:94:98:13:fb:c4:7e:9b:31:
ba:f5:8b:cf:1a:60:89:ac:62:68:fd:b1:64:22:cd:0c:d3:1d:
63:82:6b:1a:f9:df:db:49:8e:c6:5f:aa:d0:44:fa:e1:a2:31:
60:ec:14:db:6f:8e:20:72:33:17:9e:c3:e7:e2:ac:36:57:d0:
c0:24:d5:ee:94:51:c6:9a:90:fb:b1:25:65:cc:11:67:0d:e9:
3b:51:ea:db:1f:83:3c:41:ef:f0:71:2f:2a:1f:24:0f:84:57:
6f:38:cc:63:57:97:df:da:a1:c8:89:90:07:f0:76:98:bb:88:
0d:2e:85:2b:69:cf:39:07:30:3e:12:d6:32:91:ee:c0:ba:6f:
bc:d7:de:2a:13:2a:cd:f5:80:7d:f7:e9:51:e8:68:bc:6c:07:
c1:69:5c:5f:e9:93:78:cb:bc:44:27:39:39:87:f9:d6:81:76:
09:2a:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:16 2025 by rpki-client