Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: VToeo0y4tho0XDDR36k3LR4Fi25X1OGQ5dKBA5yLFdE=
Subject key identifier: 31:F2:DA:FC:1B:CF:A0:EE:B9:20:72:68:8E:09:49:FE:EF:78:28:43
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 0194BD8567A8C06362C8BA7E346D81A111BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 115A
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: IhoaGQa0QYiFO4auTj3+v6W5LkVNE648xJOg72g2b8g=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:67:a8:c0:63:62:c8:ba:7e:34:6d:81:a1:11:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=31f2dafc1bcfa0eeb92072688e0949feef782843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:05:8d:16:f6:e9:f3:83:c3:89:02:87:82:
38:48:18:cd:83:e8:b2:58:02:f6:0b:1e:ed:d6:98:
26:7c:80:a1:ee:43:cf:56:36:52:74:0a:38:f3:1c:
8d:24:d9:d3:19:16:a8:90:b1:7c:e1:01:7a:bc:bf:
24:a1:6d:7d:92:fa:40:03:9a:fb:2d:ca:a6:12:a0:
77:1a:c5:15:32:17:1d:05:2a:bf:6a:b0:ce:9f:ab:
48:f2:13:38:7b:61:0a:92:fa:55:ac:b5:af:f7:02:
c9:c7:31:8d:16:0f:2d:b9:c2:11:a3:d4:7e:ad:ec:
d8:7e:43:e9:84:76:0f:1d:51:8a:4d:c4:aa:58:96:
ea:69:b9:9e:1f:1e:bd:c8:dd:76:09:0a:a6:20:d0:
e3:f9:84:fb:a7:49:f3:92:99:71:42:94:88:9f:ae:
95:e5:96:a7:7d:be:dc:ec:80:54:ea:20:24:a9:f1:
91:c9:d8:d3:db:80:ed:2d:0a:aa:d1:a9:69:0e:7c:
7b:7e:46:7a:62:3c:ec:eb:37:20:f4:f5:6e:bf:a0:
a4:65:68:89:1b:e9:58:f6:ef:b4:ea:db:cd:74:8b:
0d:5c:d0:38:3b:cb:22:d4:7b:40:a1:a2:30:21:dc:
67:2d:32:56:2c:c0:03:85:fb:e5:36:56:f9:17:c6:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F2:DA:FC:1B:CF:A0:EE:B9:20:72:68:8E:09:49:FE:EF:78:28:43
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:82:fd:61:67:2f:c1:20:0f:ef:48:b6:b8:a3:8b:b4:fc:48:
0f:07:5a:2d:6c:0d:d9:48:78:c6:0f:73:eb:b0:31:9f:5b:aa:
d6:3c:04:44:98:bf:7c:47:f0:78:5b:92:92:f3:05:cd:3d:8a:
f8:d2:37:14:8c:87:c9:f8:b0:1c:fb:62:c2:50:51:ad:a5:57:
29:11:42:43:b1:b3:df:b4:52:d0:ce:43:00:55:c5:c4:ae:32:
08:26:86:9d:04:22:ef:ee:07:df:21:50:b0:08:b4:6c:5a:c3:
53:78:45:72:2c:46:2c:67:17:d4:76:ef:38:90:f1:c3:31:65:
a3:3c:42:1b:0e:d5:33:0d:ef:8e:20:1a:23:b2:a9:d9:6c:f9:
53:e8:51:d1:9b:3f:ad:43:6f:c3:d0:6e:4e:fd:74:35:c7:60:
0a:cc:30:27:51:69:98:17:f8:07:6b:02:2a:fd:a2:dc:4b:80:
e9:a4:cd:c1:38:44:90:56:00:85:bd:60:0a:d8:58:69:28:4f:
82:82:4f:a1:e1:50:df:97:45:3e:ad:85:62:f6:f5:e0:b2:31:
52:2b:9e:84:22:8e:e9:d6:b1:e1:cb:9c:0c:3a:7c:7f:58:13:
c2:ba:79:99:04:2d:f5:eb:88:91:c6:f1:15:4e:47:b0:98:c5:
aa:73:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:17 2025 by rpki-client