Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier: Ofme5QREWedUDQlYhMdMeJCr9q0JXN5EYtRJgZMIMe8=
Subject key identifier: C3:24:10:63:C1:A2:9F:9F:20:65:CA:0B:F8:93:50:23:25:3A:4C:CB
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial: 0194BC72C4D5F19E178EC1CCE122CEF87F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: 9xKnDYTGsncir9pGK8UvDoqBIrQ.roa (hash: ruj+NSfqLyzPa16DtiDqJuwEcOM3gn9igG3unI9kKcI=)
2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: hMpGWCF2shmBQr/4TNBmrf4yynXy360u07i7zGjHjW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c4:d5:f1:9e:17:8e:c1:cc:e1:22:ce:f8:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=c3241063c1a29f9f2065ca0bf8935023253a4ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:c1:ae:e2:d5:bf:3a:41:fc:7e:15:1f:bf:
88:f9:53:4d:3f:81:96:ab:d9:65:0c:4d:06:66:a8:
e5:37:99:69:ba:e1:9b:4a:ba:6a:e7:34:c1:e8:d3:
ad:f4:97:9e:2b:13:50:9b:76:6e:9d:23:bd:0f:20:
5e:30:e7:3b:59:ed:b2:93:52:f6:5e:36:82:23:77:
1b:8c:84:0d:5a:52:b8:25:9e:f1:83:33:ca:e2:44:
37:1c:47:08:7f:90:12:85:0d:88:6e:64:fb:6b:42:
75:8c:de:84:a1:41:9c:23:8c:57:90:cf:01:51:94:
b2:52:5c:07:18:6f:a0:90:1d:00:bc:f9:90:f3:81:
39:db:74:67:cd:7f:76:c8:f5:90:c9:f0:7d:ab:89:
a3:ac:19:cf:1b:63:38:b5:69:8e:35:f5:94:e3:e3:
db:bd:92:b5:3f:d7:c4:01:5d:13:d0:c3:16:ee:9d:
a4:c8:a4:22:57:dc:fc:11:ce:51:01:ef:ac:84:7a:
5d:b0:58:06:61:57:ac:e6:e6:8d:98:9a:a4:fe:23:
15:d8:c2:d9:34:e1:91:b3:8c:fd:33:67:64:22:00:
96:f4:2a:00:01:f0:e9:d8:70:11:89:10:1f:ff:8a:
2d:fd:1a:02:87:54:2e:3e:54:56:8d:45:1a:17:6b:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:24:10:63:C1:A2:9F:9F:20:65:CA:0B:F8:93:50:23:25:3A:4C:CB
X509v3 Authority Key Identifier:
keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:54:d1:d6:ab:ef:54:0f:e7:94:a4:5f:43:3c:b2:a1:77:05:
5a:e9:54:61:23:75:81:de:31:07:42:ae:bc:f0:f3:d8:ae:3f:
1f:0e:d1:16:5d:a7:7b:64:39:fd:30:1d:20:53:1f:ba:3e:6e:
f3:54:f7:dc:1d:f9:52:37:d3:35:6d:cc:26:13:97:d9:21:7a:
a3:f0:9e:7b:c7:c2:39:cd:33:c7:f6:d0:e7:7f:e1:f5:ef:a4:
6e:42:9a:7d:b7:c4:fa:f3:e9:aa:a1:9e:54:6b:dc:4e:d6:20:
d7:46:b9:62:2c:e7:cf:28:ff:f4:60:90:3e:bd:e9:6f:58:cd:
2d:1f:b7:ca:88:f1:20:92:27:6f:57:3c:24:e9:f8:01:c8:e6:
48:91:3c:93:08:87:81:03:ca:47:e5:86:d6:b7:14:2a:54:b1:
3b:5f:56:3c:98:a5:56:2a:a3:f9:d8:d8:7d:f7:3d:01:c0:59:
d2:4d:28:e7:a8:3e:de:63:5d:d6:e2:52:01:0e:30:e5:e6:4a:
aa:86:cb:75:61:14:55:68:70:15:91:ff:5a:54:44:05:6b:cc:
26:a2:b1:b6:f1:51:ee:d7:e1:e0:ef:46:2b:a0:c2:ef:e2:dd:
9f:23:c5:1d:3a:6f:d5:53:57:cb:68:47:87:b7:03:fe:54:08:
fd:6f:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:43 2025 by rpki-client