Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: lj28n/5SsQbdy/CCzDxVduAQizPn+uiz7xYI0EVNY3k=
Subject key identifier: 8A:8C:C2:09:C3:A3:A4:4D:A2:81:20:75:AD:08:CE:4E:2F:2A:03:14
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 0194BBCE14F07A4F435DBE838B8EF91298C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: 3klR5JsvZ8NeIQRDJyw3kbGVLQuT0r5rU33QK0ajnbY=)
2: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (hash: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:14:f0:7a:4f:43:5d:be:83:8b:8e:f9:12:98:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=8a8cc209c3a3a44da2812075ad08ce4e2f2a0314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:fa:f3:cc:bf:f3:32:17:ee:5e:b7:84:40:
30:9b:69:0b:8b:1d:5b:d3:4b:2b:f1:6f:29:8e:01:
3e:d1:fc:6e:07:a3:08:7e:e0:9b:81:96:52:6a:9f:
4e:5d:8b:b2:50:6a:57:20:0e:e4:9a:87:ef:57:a4:
9c:69:94:62:fb:96:a5:96:7b:ea:a2:5a:ee:ec:2a:
88:3e:9f:71:45:03:fd:b5:5a:04:ec:d9:cf:f6:ac:
79:fd:69:43:61:e8:88:08:e3:54:ae:61:3a:60:e3:
27:ee:09:97:c2:0e:b0:cf:86:d6:e2:9a:b1:2d:44:
63:79:41:78:ae:41:7b:34:5c:be:2a:c5:43:eb:15:
aa:65:0e:ec:78:ec:a9:91:e3:0b:e3:33:bb:ac:bd:
7c:75:6f:c3:02:b4:ee:87:64:10:5d:58:2b:f2:80:
9a:d6:67:65:8e:ab:57:3e:7f:6e:99:9b:b5:2a:5b:
77:e9:ab:84:7d:a1:26:69:50:3e:77:f5:d7:5d:02:
56:12:f7:0f:24:f3:77:8b:20:3f:63:d3:cb:0a:15:
71:2e:40:1b:b4:32:23:8f:a2:e1:51:93:e7:42:5f:
4f:1c:e2:31:b3:c3:fa:4c:79:63:43:f7:81:9a:2b:
15:28:e2:9c:03:63:89:e5:32:88:7a:eb:ba:ca:92:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8C:C2:09:C3:A3:A4:4D:A2:81:20:75:AD:08:CE:4E:2F:2A:03:14
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:15:a1:c2:42:22:8e:be:d5:97:bd:f7:c9:5a:51:02:19:3a:
52:2c:9a:c9:87:b9:53:2f:59:71:f6:41:00:34:b2:82:8d:47:
e0:89:f6:58:c7:35:ff:bc:2a:f8:9b:23:bc:fb:08:40:f8:a1:
79:28:01:8c:ad:05:ac:2f:63:ef:ee:84:fe:1e:5e:2c:17:00:
5e:e2:a2:95:c3:90:1a:5a:5b:9d:de:81:0c:2e:1f:a8:cd:82:
4a:84:03:fe:a0:da:59:42:ec:25:e1:e0:6e:67:f1:ad:5d:3c:
d0:e3:36:c2:b3:a2:d6:ad:77:36:1d:1d:9f:74:46:e6:65:00:
ce:7e:78:4b:17:db:23:25:16:21:59:97:e8:37:96:a3:e9:54:
44:49:b0:1b:b7:b0:d1:17:28:e7:e3:11:85:fd:88:4b:bc:af:
f5:03:1f:f9:37:f9:01:22:b5:d8:18:cc:f0:e1:fd:22:e3:d1:
ed:2e:1a:ac:23:47:dc:8c:a0:0c:94:63:bd:fc:e1:d0:8f:a6:
4a:e8:9d:f9:4b:d7:f1:36:ff:06:e0:33:e1:0c:c6:45:fc:b9:
2d:24:d1:82:1b:92:c3:c1:7d:4e:38:67:d5:01:8e:bc:2c:31:
5a:6a:d9:66:0e:85:dc:6c:8b:61:f5:cc:e0:76:b7:6a:7b:8c:
51:45:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:02 2025 by rpki-client