Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: ZBRX8VWMvV2qW6wpm5BeyN97eOak0YnAYjjBEd02VlE=
Subject key identifier: 59:4B:DB:63:50:35:E9:2D:42:E0:ED:5E:8F:77:DB:86:E8:F1:A9:B8
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 0194BD4E457BE2D7FD39C6B9A08650E14471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 143E
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: D60KCdpxWYvjy7/IcMN862sojhrvr+w4o648Q0FgUkc=)
2: VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa (hash: Ey27v1VSvBG1kOCOG9N8A9sC+9f+2KfQyTxQVT7GEW4=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:45:7b:e2:d7:fd:39:c6:b9:a0:86:50:e1:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=594bdb635035e92d42e0ed5e8f77db86e8f1a9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:55:07:e7:d7:6e:28:1e:a5:a6:cc:06:bf:
8f:43:38:1b:c3:df:19:fb:ab:fc:d0:ae:4f:41:a1:
7c:dc:dc:44:25:ad:2e:60:c2:80:da:97:8e:43:35:
57:0f:4f:0b:26:be:34:fb:62:7f:90:6d:b7:c4:23:
dd:22:72:8b:46:d7:a2:99:df:5b:94:9a:32:8f:93:
80:46:f7:83:1c:3f:76:ce:8b:75:ce:bb:05:92:3d:
95:2f:42:b0:3c:59:a9:c4:58:12:76:f1:d4:e7:af:
30:20:9a:6a:28:52:51:41:c6:49:44:38:c8:97:dc:
31:09:71:42:9f:2a:03:07:e5:47:7c:0d:1f:14:60:
81:9a:e6:a3:6e:87:9b:5a:b8:9d:a2:6b:82:f0:f3:
f1:df:25:6b:11:3a:4f:91:11:ce:2a:f9:02:22:65:
7a:74:1f:1e:cd:f4:16:9f:a4:22:cc:12:76:b6:df:
ab:c0:d1:4f:36:7a:0d:0f:c2:61:bf:d6:84:51:14:
72:ab:29:e0:94:96:f6:58:e6:8c:01:5f:46:a9:29:
65:8a:74:de:d3:1f:94:8d:d0:76:1a:21:16:b3:bd:
19:33:b4:4b:77:86:5d:45:c2:f0:6f:44:32:5e:fc:
d0:bd:55:0d:43:ba:31:70:b6:44:73:2d:e7:b8:51:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:DB:63:50:35:E9:2D:42:E0:ED:5E:8F:77:DB:86:E8:F1:A9:B8
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e9:df:4c:05:d1:0c:a9:c7:75:e8:67:0d:b2:96:e7:c4:ee:
12:76:28:a7:8b:d9:07:4f:ae:a4:a1:97:9e:14:fc:19:26:00:
53:ee:5f:d6:59:b3:f3:ed:66:72:38:3f:e3:bd:3d:bb:73:33:
c1:87:72:83:29:35:a7:6e:f2:ab:22:62:d0:be:d8:1d:f2:32:
2a:75:cf:c0:84:a4:77:86:c8:59:7e:d0:e9:f9:17:84:62:9e:
fe:41:1f:5b:ff:b2:e0:b0:3f:a7:e3:34:55:93:bf:67:84:85:
89:6b:fc:68:9f:b8:46:cd:00:1b:9e:3c:a9:03:33:d3:67:ee:
0d:e9:bc:ed:73:0d:87:03:a4:75:fb:df:b0:17:a5:e6:b6:59:
41:70:48:e1:80:a3:9d:f5:93:e2:d2:f8:ad:5a:7c:38:75:fe:
4f:34:8e:87:71:dd:8d:60:1b:a3:12:a0:c9:78:94:4e:5e:b2:
b3:f3:c7:7f:3e:06:99:31:36:5b:35:d0:48:de:32:9a:ca:73:
c6:16:df:45:93:07:7f:1b:18:1c:85:6e:53:6a:8b:d5:ae:a2:
a2:d2:6e:42:f3:e7:0b:b2:97:6d:08:62:32:b8:8b:77:22:94:
be:df:20:6b:05:fa:15:0f:33:c1:be:03:09:59:1e:14:80:04:
e7:74:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:19 2025 by rpki-client