Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: zXCheBT9hH7NSHNRq4f1Z0SZpejHw32rwRzGiLtDdsY=
Subject key identifier: B7:BA:EE:97:2D:D3:DB:4F:92:7A:C5:1C:B3:E0:5A:BA:48:4D:C3:24
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 0194BD4E6BF25F0E169BD055ED021C52CD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 0D93
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: vlAU/h1wWplg2nr37l2d839mMn4/+M1g2N3eOFcJQ00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:f2:5f:0e:16:9b:d0:55:ed:02:1c:52:cd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=b7baee972dd3db4f927ac51cb3e05aba484dc324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:84:89:3f:10:2b:e7:85:cb:73:1c:a7:ad:
c5:63:ac:64:60:87:23:50:49:c5:fa:5b:a5:de:f5:
50:12:04:4e:b8:9d:7f:da:a7:2e:55:07:10:5c:8f:
2a:41:d5:ff:27:e7:32:04:8e:b9:85:33:4b:78:c6:
72:ab:d4:3a:88:db:7b:b8:7f:2d:b9:f6:a5:58:13:
82:00:a0:b6:e5:42:ca:75:b5:b0:9b:62:66:4e:2b:
c8:c2:e2:33:94:f3:89:79:81:92:27:7b:91:d7:33:
9e:32:04:56:0c:d1:0a:65:69:17:bd:2b:d5:53:d4:
4e:da:1b:f9:53:01:4b:84:ad:59:fd:ed:d0:37:d9:
3b:dc:cd:08:44:72:c5:68:77:34:17:73:92:e2:56:
03:41:7a:b6:03:f7:be:77:37:79:44:e6:03:5d:49:
ae:00:b3:18:3a:1f:1c:72:51:3c:e5:60:30:61:14:
5d:7b:88:05:87:fd:03:5e:03:12:7e:32:63:68:f4:
82:ca:5f:5f:49:5b:90:db:ef:dc:56:aa:b9:7d:ff:
c1:b2:22:83:7c:36:4c:16:45:36:55:73:1d:81:89:
39:d6:21:f0:eb:1f:0a:82:96:ef:ce:11:4b:dc:b0:
36:c0:c3:df:dc:d9:3f:73:11:4f:e0:cb:92:26:ed:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:EE:97:2D:D3:DB:4F:92:7A:C5:1C:B3:E0:5A:BA:48:4D:C3:24
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b7:98:69:f3:f9:63:c8:9c:01:ef:23:a6:58:2d:57:e6:57:
2a:aa:31:e1:c3:85:8b:4e:68:c8:6c:93:aa:7b:3b:91:57:b4:
c0:72:66:24:43:84:cc:ec:e6:26:5a:99:da:57:fc:ed:75:06:
cd:88:b0:69:16:53:a2:7b:b2:53:fd:09:26:a4:9e:e6:a2:72:
d6:4d:d6:31:4e:9f:c6:bf:c7:58:b2:db:17:77:ee:92:14:14:
88:fc:7b:3b:32:91:fc:be:58:64:72:93:4a:15:19:8f:d0:92:
8c:a2:ff:7f:e2:a9:18:03:e5:9a:d0:ab:08:f2:47:83:98:ae:
09:b0:21:16:af:66:c2:01:77:d2:fe:04:16:51:1a:b6:02:15:
55:0c:7d:35:c8:6f:e1:78:4f:3a:64:e6:a9:9f:ea:7b:bd:54:
bf:86:d0:a6:ef:43:ab:72:4c:be:0d:bc:61:61:01:89:f5:9d:
15:4d:5f:1a:f2:af:75:f8:5e:37:db:e6:28:a4:ee:57:bb:aa:
a8:73:82:c2:5f:b3:e4:86:5b:70:f3:34:94:c4:0b:36:f6:0d:
32:78:43:06:c9:43:26:69:af:53:ff:57:6e:41:96:31:f1:82:
81:a9:c2:92:26:53:b2:86:52:de:22:b9:3f:e9:29:e5:60:08:
6b:64:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:11 2025 by rpki-client