Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
File: eaKVyAtUwtvne6R959rsa5hgIbQ.mft (raw, json)
Hash identifier: GxDgRRwQ17zSNXT1Wj3yDyw4RBLhqkaEtMx9X2YWbrg=
Subject key identifier: 7A:DD:CE:DC:96:59:B7:52:55:DB:C4:50:D9:07:A9:51:19:50:A1:E2
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 0194BCAA2B59F3F49B37FD15C56940473897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
Manifest number: 0E1C
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: NcQKvxmtrYw-jrNoZNkRcv77JN4.roa (hash: 3Uzym40miS7PlDIapcSMHwpqDBF42PS4SEf8vIe4LFs=)
2: ZVVp-hw2AMJ15Rd7WsMIT1Km8-s.roa (hash: WgRizB9+0+5SvhRK1pWejgDCwkom7sFNhInASFXxJ7Q=)
3: eaKVyAtUwtvne6R959rsa5hgIbQ.crl (hash: b706vtYj/3yvdAYhQDG5R7J9EJ/xUqo9y7JZ4w8b4NA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:59:f3:f4:9b:37:fd:15:c5:69:40:47:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=7addcedc9659b75255dbc450d907a9511950a1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:15:a4:9f:62:71:12:80:da:e1:42:44:4c:
46:1a:6a:85:c6:10:b6:36:9d:7e:13:65:2f:73:ab:
6b:ca:f2:1f:12:99:c7:69:17:fb:df:9f:ed:c9:dc:
b9:7a:6b:dd:19:a6:b9:bd:ea:89:0f:e8:c9:9b:d1:
25:aa:47:d1:50:fa:bc:41:96:67:1e:e9:c2:7c:e2:
f0:55:e7:8c:67:12:9f:e1:75:82:dc:1c:37:09:55:
a2:f7:9f:74:f5:69:e3:8e:36:9b:a2:d0:32:22:ae:
c5:4e:5b:33:65:ab:72:d8:92:40:91:f8:96:9d:e6:
6e:0a:d1:4e:83:f7:a7:39:bd:b0:29:7e:de:f2:fb:
95:c5:ed:c8:b5:c8:c4:e9:14:7a:fc:fb:2d:17:fd:
7e:3c:19:80:d7:09:0f:31:fe:76:04:e3:0f:12:b1:
cd:78:3f:a4:33:ba:6a:27:b5:ce:2d:e0:d7:2e:93:
fc:ee:ce:4f:18:6c:5d:c2:19:b1:94:fd:7f:18:b4:
99:dc:10:5a:d5:75:b7:bb:9d:12:f9:0d:88:58:e6:
8c:c1:bc:fc:77:ac:f3:90:ff:53:53:d8:9c:13:8f:
f4:ca:06:e1:d6:3e:6e:94:01:96:3e:b5:45:64:0a:
d7:c3:81:c5:1d:1e:8a:78:41:12:d7:11:de:45:47:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:CE:DC:96:59:B7:52:55:DB:C4:50:D9:07:A9:51:19:50:A1:E2
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5d:50:5d:94:ec:e0:15:c7:03:41:27:29:36:93:8e:13:a1:
ea:c4:fe:ef:5b:a0:fd:0c:e5:d3:f5:31:4c:7a:13:58:44:af:
7b:05:b6:1c:0a:ed:6e:81:19:a0:cf:af:c1:0c:da:fa:6e:5e:
a1:cb:d3:d5:13:f7:86:36:ef:fe:f6:4b:8d:39:a4:9b:c0:46:
33:46:e8:aa:1d:55:7b:11:35:07:95:57:c5:4e:b0:d5:95:d3:
66:41:31:44:99:a2:ff:b3:6b:65:b4:81:49:8e:a0:ab:1e:8d:
b3:9b:43:05:3d:b5:b6:63:c3:2c:55:48:a9:c5:7c:45:0a:cc:
ba:7d:75:55:d7:a2:e9:c5:31:75:56:50:0d:06:fc:f9:00:27:
60:16:10:f8:f4:67:f1:96:75:ac:2b:08:fe:0d:42:4e:3d:fa:
b8:5e:12:d9:aa:96:6b:19:26:5f:9d:5d:db:35:d1:21:55:0c:
7a:00:92:2b:4f:cf:6b:ac:b0:6a:ad:b0:ac:2e:4e:98:ca:1c:
bf:2a:80:ab:10:9f:9c:10:1e:94:61:56:17:bc:fb:6f:62:76:
3c:33:59:fa:54:f2:5c:0b:0f:d4:fb:54:06:b9:a7:ba:0a:d7:
98:be:9b:dd:b0:b0:11:50:ff:91:97:6e:67:13:8c:25:15:0a:
8e:f1:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:25 2025 by rpki-client