Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File: E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier: PgqYMTAGBKIkkgPYLcxbAtLe0+X6nskySIqg9WW/CaA=
Subject key identifier: 27:BF:63:82:07:73:69:CB:36:0A:32:ED:BC:C4:C5:6F:61:BF:3C:3C
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer: /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial: 0194BCE0A37621454A6F410BDF3BEFF01247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number: 1A
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: fuBPpGVdhqz37KB/mfpw8NxbAb9RoBDKjwVyQ74boyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:76:21:45:4a:6f:41:0b:df:3b:ef:f0:12:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=27bf6382077369cb360a32edbcc4c56f61bf3c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:91:48:8a:17:46:09:f1:d9:5e:db:5c:a1:
62:df:5c:82:8d:72:52:18:d6:ae:7d:5f:81:59:d6:
77:a2:a6:b2:78:9f:39:d7:e7:0b:c8:fa:ab:32:bb:
ba:05:ae:6c:91:8e:f3:66:62:2d:65:04:f5:4b:38:
4a:5e:e0:42:3d:a4:09:ae:d2:d1:e3:6b:fa:64:06:
ac:d8:e0:07:12:b2:8c:73:a5:25:32:83:74:8d:cf:
0a:43:a3:58:99:a3:ce:d3:f8:64:83:7b:ed:97:f4:
12:21:0e:52:cd:6d:b6:99:66:d5:9c:80:b5:87:7a:
e3:67:96:c6:da:49:ef:8b:d0:f1:40:d3:af:a6:f6:
77:e6:1a:ab:e1:09:b7:75:18:9d:48:d6:49:a7:8e:
f5:47:13:10:02:ad:15:bc:69:5f:35:c5:1b:a3:94:
50:6d:1d:36:0c:78:ed:8a:ef:ce:b4:fb:95:0e:98:
47:c3:32:a5:4f:40:a5:f9:f8:3f:6b:57:57:88:fe:
54:fe:68:b7:a8:83:e4:8c:d4:94:64:01:3d:6c:d5:
0b:8d:6b:6f:7e:10:be:f3:38:7a:47:b1:e4:5f:dc:
7a:aa:0e:14:61:cf:f0:5d:e4:57:a7:69:88:76:4d:
2b:6c:c3:c0:16:d2:24:24:c6:bf:b1:3d:5a:5f:c3:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:63:82:07:73:69:CB:36:0A:32:ED:BC:C4:C5:6F:61:BF:3C:3C
X509v3 Authority Key Identifier:
keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6e:9d:81:c8:e3:e0:5c:78:1a:df:a9:af:58:60:c3:b8:46:
58:3a:68:d7:23:80:35:34:a8:91:bd:37:92:85:d0:79:b0:c4:
e7:3e:ad:7a:af:e3:86:01:9a:b0:fd:5c:8a:42:0e:50:68:75:
be:62:60:73:2d:96:38:23:9e:a0:31:e9:8d:93:de:20:b9:a0:
e9:4c:49:9b:6a:59:88:e1:ee:03:2d:87:59:66:7f:c7:aa:0b:
8c:fc:2f:b7:8d:6e:e7:ff:94:73:38:7f:a4:cd:89:68:64:63:
7b:99:f8:4c:6f:74:a2:05:f6:e9:39:66:06:90:2f:7d:04:3c:
1d:e5:15:3d:13:f8:90:3c:9c:22:b8:58:1e:7f:c8:46:b2:94:
59:0c:e0:39:d4:97:9c:56:11:9e:df:16:70:d0:d2:48:4a:7f:
d3:1a:4c:ae:82:d9:c4:15:51:32:ad:fa:29:91:6f:f2:77:91:
f4:0b:72:75:50:7a:8c:1c:fc:4b:59:63:31:35:d7:04:24:23:
0d:5f:63:4b:a7:69:ce:ab:71:3b:f6:b0:c9:60:2c:e5:83:69:
c5:ce:93:43:59:76:fe:1d:40:ad:87:9c:35:5a:29:2d:58:ba:
61:2e:bb:8c:f5:69:2f:08:07:0e:d3:cd:60:4f:b1:ae:e4:3b:
43:2f:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:35 2025 by rpki-client