Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: f2U9ZHPnLz8btRX2FdTTkgJoBSTsNRktZuuR7noa9Yk=
Subject key identifier: 52:AD:44:87:64:CE:9D:CF:9E:48:CD:DA:82:3A:67:EA:14:65:B0:18
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 0194BBCDE8E623634FA2B01BA361A58760E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0A54
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: yNI0vJ4/B1BnSn67L3sQsf1QNlvkQPA9mFQijjMnWdA=)
2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:e6:23:63:4f:a2:b0:1b:a3:61:a5:87:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=52ad448764ce9dcf9e48cdda823a67ea1465b018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:73:11:0f:3b:dc:79:c6:97:87:52:4d:b4:
c1:74:42:fd:78:0c:99:ff:fb:2e:ac:a3:1f:7c:e8:
61:82:f1:3a:2c:16:f4:02:03:43:3d:66:af:e1:03:
19:cd:eb:5e:02:ff:aa:32:db:12:65:6a:01:30:6a:
ed:42:a4:30:27:2e:dc:f0:fe:62:29:64:c4:e4:d0:
25:96:ca:e5:f4:a4:cc:52:c0:33:41:33:b7:7a:a3:
75:b3:0a:72:3a:d2:78:7b:ff:69:01:53:22:a8:3b:
c4:6e:c1:2a:96:d8:23:fd:16:de:24:e9:02:32:32:
0d:e5:5a:13:7e:af:ed:c3:d7:fe:c7:a8:4e:8b:4e:
e7:aa:68:7a:d8:01:48:e1:4a:50:6e:69:f6:b6:80:
4a:0d:e4:b4:59:7a:08:ef:f1:79:93:e2:19:8e:35:
6c:c2:bd:51:c9:e7:b4:30:64:44:16:be:a0:a5:2c:
ec:6a:ab:14:87:73:14:97:94:92:10:0e:3c:f8:05:
0b:36:bb:5b:8f:7e:43:8d:c0:2d:4b:5f:9e:43:82:
09:50:73:d3:fb:54:ba:0c:78:b3:4e:c4:b6:e3:1a:
cf:f6:d4:2c:70:d0:0a:72:50:16:cc:38:83:54:0e:
b6:ef:c3:d3:49:27:a8:23:6d:43:59:ad:79:e5:90:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AD:44:87:64:CE:9D:CF:9E:48:CD:DA:82:3A:67:EA:14:65:B0:18
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:56:90:0e:2b:73:8b:75:9d:2c:18:9a:3c:51:07:ff:67:4d:
3a:20:4e:cb:1b:3e:9a:60:fb:da:1a:9d:b0:98:78:b2:3d:0b:
e4:9c:d1:ef:a5:7a:4e:96:01:90:06:22:13:f3:95:30:0c:fe:
cc:4f:62:9b:68:dc:3a:c8:50:1e:8f:f7:5d:2c:40:cf:a3:d7:
db:25:84:c4:a0:d1:20:6c:c0:8e:91:f2:93:ac:bc:db:f7:cb:
54:f6:5d:15:d3:f6:ac:ac:3c:a4:94:7b:d7:4f:cf:dc:66:21:
6e:75:54:e8:d5:19:cf:bd:79:a4:37:cf:d1:71:d8:9a:48:d7:
2c:a4:b6:e2:73:e8:07:6f:46:f9:e2:7b:8a:95:e6:b3:7c:9d:
24:48:dd:d3:6d:b2:e7:4d:a5:0a:45:a2:2d:06:d1:b7:d6:da:
fc:9c:4f:4c:11:ed:11:95:83:f4:82:ef:70:90:3e:22:ef:f9:
89:ff:05:1b:cf:1e:f2:a1:15:8b:be:1f:f1:87:79:a0:90:a7:
9f:1e:cd:54:b2:3f:f6:75:00:e6:4d:65:6d:43:5e:bf:18:2b:
73:5d:3b:9a:e0:bc:29:e4:cd:ee:07:af:d0:7f:a0:3e:98:0a:
89:94:1d:fa:df:32:31:b0:43:c6:ed:ef:08:ed:d9:70:80:6c:
4d:f1:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:33 2025 by rpki-client