Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: C0iftx77Uu3Jzug8g18cKZqBvVp6AxecqLuhwRid+qc=
Subject key identifier: CA:D6:D7:A6:40:9E:65:52:7D:D8:F6:87:1B:98:74:5A:96:29:E1:0C
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 0194BC72B6D8DB63848CE06F26FA634C111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: Nbgb+u1c83GvavX3DeSAuv5qQbZQjWxGC4AUG++r2eE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b6:d8:db:63:84:8c:e0:6f:26:fa:63:4c:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=cad6d7a6409e65527dd8f6871b98745a9629e10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:b1:81:7a:3f:db:64:87:e3:4e:e2:8a:d1:
a0:38:48:e9:b1:51:f8:23:b6:2d:ee:d0:a3:07:4f:
af:4e:1d:e3:f2:48:19:8a:f4:a6:ab:7c:36:39:bf:
78:ea:ab:fd:6d:d7:59:17:81:f4:e4:af:d6:c9:46:
26:8e:d1:ad:13:82:1b:69:85:39:1f:e1:3c:59:8d:
ee:a1:3c:e2:f4:ba:78:72:57:b2:82:a1:18:89:a7:
43:ac:32:ab:54:3a:02:5f:dd:52:f5:c9:83:ba:ee:
28:86:8f:37:1e:bd:c5:2e:5b:4c:43:2b:2d:2b:92:
26:62:5d:ff:58:7d:42:db:d3:5b:0c:ef:6b:75:91:
63:cf:8d:5b:f6:04:ad:60:4f:15:0e:75:6b:1f:93:
91:df:47:2b:08:9e:ce:58:52:d1:c0:3f:45:15:a4:
08:14:25:60:e1:f6:9a:fc:73:f7:77:53:6d:5b:f1:
86:9b:b6:76:25:03:62:aa:3a:bd:8f:ac:2c:81:a0:
20:6c:ec:d5:6f:00:f3:e0:99:b4:78:1a:41:2f:58:
a8:64:48:f5:34:e1:6c:5d:d3:65:e9:1c:9a:d9:56:
06:8b:84:29:21:2d:4b:87:89:ed:c0:98:ee:de:84:
a4:f3:43:9f:ca:3c:8a:20:be:99:fc:0c:44:00:0d:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D6:D7:A6:40:9E:65:52:7D:D8:F6:87:1B:98:74:5A:96:29:E1:0C
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d9:60:6c:13:46:52:3f:f1:54:10:03:4f:ea:57:c0:05:47:
67:4b:a1:cc:4b:ca:15:f5:6f:d1:05:89:2d:a4:8a:ee:8f:c4:
71:e9:a2:68:2f:e8:bd:19:b9:91:d6:a1:b5:75:ba:81:38:b3:
cf:d6:15:9c:e3:dd:0c:aa:36:30:03:bb:d8:31:94:07:e0:25:
4c:ff:35:38:82:68:a2:d4:c9:08:59:c6:e5:51:2f:d7:b9:76:
fa:69:5c:81:0b:d5:0d:c5:4a:4a:38:9f:74:d8:8a:dd:ca:21:
8c:fc:ea:91:f1:9c:65:3a:ba:49:2d:eb:0b:0c:1c:99:3d:9d:
ed:0c:12:ae:21:29:65:17:71:77:d0:f7:86:4a:2f:f0:d0:a6:
f7:22:1c:6a:ac:47:16:79:bb:e0:2d:06:2a:dc:ab:24:d0:d7:
15:b0:d5:f9:8f:82:07:9e:45:e3:38:f8:37:6b:ff:be:87:c1:
f9:f1:d5:17:a7:7f:67:d7:02:d6:b4:2d:e8:f2:77:72:8b:de:
6a:1b:e7:52:35:cc:09:c2:08:d2:3a:22:8c:5f:27:f0:f3:54:
5b:dc:3b:f5:f7:5e:7e:af:45:da:bd:6e:eb:74:44:eb:e3:dd:
d4:2f:f9:7b:63:43:70:f7:f9:f1:43:2f:83:20:c8:72:b0:13:
f0:63:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:22 2025 by rpki-client