Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: mutUbDjjpNIbXS4yXuKlhXXZy5+cSIL/aqrs61ydviM=
Subject key identifier: 84:CC:A0:3D:17:67:0C:BA:A0:20:1A:D0:E4:0E:E5:F9:90:27:D7:84
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 0194BC3BD1292BEC2D14471B17D4100EDF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: O2+B/ljm6jrBkmHgy3zcQCjvEf8CWxcMKHJ0UeS3JTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:29:2b:ec:2d:14:47:1b:17:d4:10:0e:df:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=84cca03d17670cbaa0201ad0e40ee5f99027d784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:de:4a:0c:9b:bb:57:ac:0f:95:91:30:86:
0a:90:6e:eb:6e:cb:ab:01:7c:ec:77:fe:ae:fe:92:
cb:c9:ba:00:08:0e:43:10:3a:45:00:46:9f:e5:03:
ae:bf:bc:08:b6:75:59:20:5b:96:5e:95:43:90:14:
ce:b7:88:6f:b3:8a:26:f5:45:ca:0d:f5:81:98:42:
ce:04:ff:d4:ed:33:69:f3:d6:db:91:5a:c1:af:4c:
47:d1:74:06:90:22:68:f3:7f:cd:f9:27:79:43:ea:
13:aa:9f:17:be:37:43:8b:2d:18:c7:41:43:d5:d6:
a6:5b:47:4d:ba:b9:34:30:f3:31:24:f5:94:d1:8f:
30:ba:03:e7:60:0c:6c:64:8f:7e:1d:1e:9e:a0:37:
38:8b:7a:ab:d7:77:3e:c9:eb:80:17:e3:24:2d:75:
85:28:00:6e:fc:4e:98:46:b6:0b:25:52:c8:80:75:
c1:42:2e:a9:23:99:f6:08:a6:a6:6f:f7:40:f1:47:
ac:52:22:41:07:a1:29:2a:c0:c6:ac:08:1a:ba:40:
8d:80:5c:1e:67:a0:cb:8d:3e:25:d2:1f:c6:99:cf:
9f:12:c3:b8:01:ab:e9:51:5a:d4:ab:66:14:19:81:
7b:59:7a:1a:3b:1e:d8:b1:38:e1:c4:e5:7d:80:12:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CC:A0:3D:17:67:0C:BA:A0:20:1A:D0:E4:0E:E5:F9:90:27:D7:84
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b9:d8:05:7f:ab:74:75:35:df:e6:5d:ce:f4:20:1f:aa:85:
13:fd:14:fd:75:68:c6:3d:ef:34:31:92:7a:f3:32:eb:94:83:
3c:82:60:d7:e7:a3:85:a7:9b:a0:e8:f4:57:f4:8a:41:58:10:
06:c2:f1:f1:5b:5c:01:1a:61:b5:9b:c4:e6:c0:bf:c4:81:22:
13:7a:10:0b:5c:f7:17:08:43:ea:b0:89:47:68:6a:3c:a9:f9:
7e:c3:81:09:30:8b:1c:30:c2:8c:e8:86:6d:a0:7d:37:3d:d9:
83:39:4c:3f:fc:af:24:5d:0d:ed:c2:7f:1c:14:52:7a:81:d5:
5f:44:33:5a:19:ab:bf:16:80:d9:db:42:45:78:21:1f:cc:09:
7b:ff:cf:61:fd:5d:43:1f:e7:d4:49:a6:88:72:53:5e:f1:82:
44:f4:c1:16:d9:ea:1c:4e:03:8a:06:a0:1b:c7:25:85:72:e9:
ed:a4:5d:28:e3:2a:37:52:d3:cd:db:2e:97:b3:e6:1a:cf:97:
08:c9:ae:86:0c:1b:a3:ea:03:0d:cc:22:5f:6c:80:d8:ac:fc:
e5:b0:24:3d:e5:f8:54:ba:3a:17:f1:33:fb:1a:67:2b:3d:75:
29:d9:66:ba:c7:f6:a4:9a:52:f6:e7:24:4d:fd:0c:99:d0:4d:
a7:42:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:21 2025 by rpki-client