Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: lxEuByoXLCMDAtMBbJu1B2yaWNe+UdGoxB5ul4rEzqc=
Subject key identifier: 98:18:B7:3A:B5:FD:59:20:54:A0:EE:88:E2:C0:5C:E1:25:D6:BA:0A
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 0194BCE0E2C174F6B95D48CCE852BC7E6076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 04BE
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: Ma7smYgl1d5oWj6GfOEuc6P2eFEsu/k7u5+J1TWn3Ew=)
2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e2:c1:74:f6:b9:5d:48:cc:e8:52:bc:7e:60:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=9818b73ab5fd592054a0ee88e2c05ce125d6ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:c4:61:ce:a5:3a:9a:7c:fd:01:33:39:92:
82:e8:06:39:db:21:56:7f:4f:53:06:52:d4:71:c7:
9d:a5:01:94:b6:95:33:e6:1e:0f:21:5c:9e:f6:33:
c3:f1:fc:98:71:b3:9b:d7:1b:6b:1e:8a:55:d6:9c:
21:cc:1b:6e:b5:fb:04:ff:8f:91:7a:74:0e:05:72:
70:9e:24:7c:cb:50:1c:59:70:5e:62:05:e8:fa:ff:
d1:5a:9f:27:2a:7d:e9:c9:f3:3d:a4:49:21:b5:b9:
1a:22:06:3c:87:9c:b6:4b:46:80:92:39:b2:2d:6a:
27:ff:6a:a7:db:68:fe:73:b8:1a:43:ec:e7:b7:5e:
ed:36:73:7b:4c:a6:7a:be:2a:d7:89:9e:b1:b9:07:
59:a7:3b:5e:e2:80:a0:73:0c:98:01:63:d2:25:e4:
a6:c0:c4:e7:ca:0a:4c:28:a5:ce:d8:b1:60:84:84:
93:de:80:5d:dd:82:e5:9b:df:66:e1:a3:31:af:d1:
92:11:ae:ba:13:72:ac:33:81:5a:95:0d:2a:ee:86:
27:fb:74:59:76:7d:8a:8d:1a:55:14:e9:fe:34:26:
93:bf:0a:d5:87:49:0d:c8:63:82:24:c7:d1:93:7f:
49:d9:9d:24:33:10:9a:64:8e:41:ca:69:1a:7e:8b:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:B7:3A:B5:FD:59:20:54:A0:EE:88:E2:C0:5C:E1:25:D6:BA:0A
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:46:d7:31:b4:78:02:6b:5f:f9:d9:ba:72:b2:97:28:04:34:
30:07:f2:12:d8:1e:d7:ea:88:aa:f5:8c:c4:96:68:f1:c7:21:
2a:7b:bf:27:f0:68:56:e4:57:a4:73:be:88:4e:e2:9d:3d:13:
e9:9f:63:68:7a:86:c0:57:0f:f6:79:50:05:02:40:95:cc:6d:
7a:91:f4:2d:5d:f3:4d:c9:6b:4b:17:83:8c:71:b8:e8:8d:f9:
3b:4a:12:53:d2:e2:92:61:ee:97:9f:f7:95:05:40:0c:54:fb:
58:f4:ea:a2:00:b8:59:27:0a:35:ca:f6:a5:b4:a3:33:80:b6:
83:3e:66:09:65:88:0b:67:cf:7c:5b:a9:5e:ae:0c:76:bd:95:
fe:dc:ed:49:8e:fc:a8:18:e5:c0:ba:36:d1:0e:1f:8f:88:bf:
91:37:fa:cc:17:54:87:8a:03:2b:f3:3b:c6:c8:00:71:86:66:
45:aa:d7:2c:ec:09:19:7c:63:d0:a7:8f:c8:6a:a1:0d:28:1f:
79:cb:0d:ed:28:fb:d2:96:0f:f5:f9:b8:33:39:df:19:3b:f4:
9e:22:12:af:67:77:71:28:91:1d:49:e6:fb:fb:68:fb:dc:1a:
fb:2a:0c:c2:a2:62:3a:79:02:a3:90:b2:81:e4:ae:22:43:3a:
b7:d8:2a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:32 2025 by rpki-client