Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: r8xUURkZK75k+h9t7KvwV+oim34Mec933SE2IPles+Y=
Subject key identifier: 4C:7C:29:D0:F6:97:0E:DC:7E:2B:E6:0C:F4:80:D1:36:01:C6:E5:96
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 0194BCA96FED0684BA22DC23BFD363B987C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0479
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: CKmFpzLtBLCn_NNA-kjLjYSqoQQ.roa (hash: XS5c/3Fp/k2cQ+BjaGp3LfDqsrjuxq8arHZvAi7l+M4=)
2: Hw4lne_Zx7QdAWSuYYhERC-BrKY.roa (hash: 5ycr19RvTqq4OQ6fLgeeMdSRmnWtTkBiC0fCWT6H0gY=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: EUdePcdk2k5wxIIe6zOsfAGhV5sY9Ua3BicD3SW/eRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6f:ed:06:84:ba:22:dc:23:bf:d3:63:b9:87:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=4c7c29d0f6970edc7e2be60cf480d13601c6e596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:26:19:72:d0:29:e2:3a:61:8b:a7:bd:4e:
73:23:aa:27:4c:cb:94:d7:44:00:29:58:7f:35:da:
64:88:4c:ae:0d:51:d1:86:5e:42:1f:07:38:7e:ae:
0f:c0:d6:54:fd:22:d0:f2:bb:ed:b1:02:c1:1d:7d:
24:1d:6e:dc:db:7b:bb:69:2d:4b:50:03:dc:27:7c:
d1:11:a0:c9:2c:40:f0:f5:bd:09:c8:c4:f6:88:44:
a1:6e:95:41:cd:ac:3d:60:1f:f3:a4:ec:3a:d5:5b:
1e:2e:db:42:83:cd:ad:4b:87:8f:26:5d:96:6b:55:
35:6f:25:f1:58:d2:2d:a6:e3:3e:53:6d:32:31:dd:
4e:81:54:22:b1:e6:0d:17:d8:83:32:90:6d:0f:44:
48:45:4a:6c:83:c4:6e:24:9d:25:40:d7:2e:7a:13:
2d:7d:81:04:a1:b6:d2:0d:9a:99:92:49:6c:ac:a8:
52:87:91:ce:c7:b9:55:3a:78:c4:f4:0b:d6:a5:26:
3a:68:d2:2e:27:fa:90:58:e1:31:54:5a:a0:73:e2:
c6:d1:d9:74:58:55:2b:53:a3:74:39:eb:54:3f:a6:
c5:70:8e:af:ac:17:38:79:f4:ea:3e:ba:a9:8d:54:
34:a2:36:12:91:13:45:64:81:48:a7:43:2a:24:01:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:29:D0:F6:97:0E:DC:7E:2B:E6:0C:F4:80:D1:36:01:C6:E5:96
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ac:93:b1:cb:34:ec:44:66:18:97:df:76:43:6d:8c:e7:51:
12:15:96:b4:f2:57:67:34:c5:5e:85:7f:7e:a5:0e:bf:40:8f:
96:b8:41:60:bf:45:6e:bd:3b:6d:69:03:45:d0:48:a7:dc:d7:
96:ca:22:a0:ce:b0:72:f5:94:60:39:48:6a:1d:03:b6:27:7f:
40:97:57:1a:7c:87:ac:a8:7e:31:65:99:66:ad:8d:8a:c0:81:
8a:78:ea:42:20:7f:93:26:a8:a8:ac:30:47:41:70:5e:fd:94:
cd:22:9a:00:c5:d1:97:33:08:9d:61:72:ae:c3:2f:5d:24:b7:
2b:0b:69:c4:99:49:67:ce:ff:30:e0:13:93:8f:75:e9:ab:5e:
a5:e0:c5:3c:00:dd:eb:e5:be:40:7b:fa:04:1d:bc:23:35:54:
8e:f7:56:49:af:e6:57:ba:38:41:6c:90:5d:c9:dd:c7:ab:f5:
e9:07:89:b5:a6:b5:7b:24:da:41:37:54:15:b4:91:4b:d9:72:
c2:8d:c2:21:73:3e:90:cb:68:30:30:e1:63:b2:4e:bc:f1:0f:
ac:e3:05:94:61:c3:9d:37:b3:22:10:13:77:98:94:01:34:e3:
0d:6a:3b:a3:c3:2d:c6:c8:b1:97:6e:b2:a8:7a:04:87:42:3c:
b2:ab:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:27 2025 by rpki-client