Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: VH6g6625GzY+YHlAVrCNRFTxHdKJ0Jp57iTGPnX1nPw=
Subject key identifier: 1C:BA:2F:2F:CE:55:F1:35:D9:FB:F7:69:68:14:97:B0:09:D2:02:C7
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 0194BCA9D292CE170BCD8AE7FAE6C5DF6A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0B17
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: Kt5ebqIkiqX1q0pCaNpdApXNwI9ILBjYTI+wBfMDjZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:92:ce:17:0b:cd:8a:e7:fa:e6:c5:df:6a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=1cba2f2fce55f135d9fbf769681497b009d202c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:65:77:32:a6:85:c9:99:c2:39:19:8a:1b:
00:06:11:5a:e9:ca:f2:ed:ee:65:1a:92:07:54:35:
a8:cd:35:8e:f8:b1:21:13:f3:7d:14:ba:ae:63:74:
10:8e:3f:32:77:f3:25:34:ba:8a:9e:d7:99:50:2e:
bb:4c:8d:d5:27:3f:44:54:45:91:3f:e1:ce:ea:8b:
1c:cc:01:e0:f9:8a:cd:5b:e6:64:86:3e:ca:71:fc:
5c:6a:0b:70:83:cb:1e:cd:aa:81:0b:f1:3c:2b:03:
67:e4:26:11:d7:d6:2c:1d:89:37:bb:c2:7f:4d:6a:
ca:a0:ae:d5:27:71:da:ad:88:8f:22:e0:3d:ae:4e:
e1:16:31:bd:03:b0:5d:24:c6:83:9e:47:af:f6:54:
ae:62:36:e2:4d:32:c7:40:9b:16:bb:2e:91:cb:5c:
28:c5:6a:50:bb:c4:9c:9a:88:b5:fa:fc:50:62:5e:
bb:33:61:d1:00:f6:fe:33:99:39:e6:75:87:c1:9e:
ac:2c:46:79:3b:30:59:69:99:ba:19:84:7b:67:ff:
06:a3:56:2b:28:30:e2:8d:26:75:03:8f:29:09:61:
49:37:12:38:86:a7:b7:a2:3a:24:e9:2a:72:c8:33:
83:75:fc:a6:13:ca:a2:72:a0:76:6e:bd:37:18:a9:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:2F:2F:CE:55:F1:35:D9:FB:F7:69:68:14:97:B0:09:D2:02:C7
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b4:e2:a2:56:55:c5:ba:43:52:91:6c:0a:19:4f:dd:bd:34:
8d:c7:b5:bc:28:f3:8a:43:77:b1:e8:35:24:65:93:bd:88:da:
fb:1f:24:78:a3:d4:1a:f8:d9:dc:e0:e4:88:74:6f:41:db:67:
28:5a:02:cb:3e:73:93:60:d9:9d:5e:0c:d7:7a:2f:ef:0a:74:
f9:19:8e:f5:c7:b0:97:b8:64:23:ae:05:0d:a0:24:8d:e6:52:
e3:4d:ba:c1:ad:4b:85:78:18:61:22:3a:fc:0b:cb:da:6c:25:
78:c3:f5:e9:49:b1:f2:20:05:7d:6d:40:3b:3a:1f:96:f7:66:
e9:99:e2:55:a6:c7:c8:89:ee:e9:20:7f:68:5d:fb:53:6e:f9:
2f:08:93:cc:cb:84:47:9c:fd:e9:e7:6a:ad:9a:4d:c3:43:de:
86:d5:7d:7d:dd:f2:24:40:9b:a8:14:79:9a:b4:be:6f:61:ac:
0a:d6:96:64:d3:ab:5c:2e:77:3a:18:83:99:76:08:42:c9:86:
c3:93:2f:c4:4f:0a:07:93:06:e7:ea:7e:ff:2f:30:e7:05:6e:
fc:62:9f:ef:c7:c3:6e:38:9b:bf:7a:e4:07:54:10:26:1c:25:
02:95:9a:34:68:12:13:46:6e:6c:06:c5:24:af:94:4c:90:25:
48:40:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:40 2025 by rpki-client