Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: lRKv4fC0+/y86hZhsZ8I8u7pPGunQDetoJHpihqoQ+I=
Subject key identifier: 30:F3:03:43:9C:AC:CE:2D:90:AB:6F:5D:A7:66:37:EE:08:D0:34:CA
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 0194BBCE6EB7EADD777A848B826783C9EC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 1133
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: J5HACYPc82UhKsnxw3fCAPhbhMNxtuNG0Vrnd+TMaG4=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6e:b7:ea:dd:77:7a:84:8b:82:67:83:c9:ec:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=30f303439cacce2d90ab6f5da76637ee08d034ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:93:58:68:25:93:1c:7f:3b:1f:0e:da:0e:
58:dc:19:c0:83:3e:dc:d1:6b:88:8d:c6:da:2b:60:
5f:c4:33:e3:a4:61:36:6b:c3:c0:51:25:06:52:81:
da:1d:e2:aa:a5:1f:05:48:89:c8:f9:1f:ab:be:3a:
42:82:74:1e:71:ea:40:e7:b9:43:bf:3f:6f:f1:02:
41:a9:ce:07:eb:9b:6f:fe:a1:96:d9:b8:96:cc:0e:
fd:f3:2c:f2:69:3b:ae:60:97:3f:25:4c:9a:2e:6d:
98:d0:88:ce:dc:6f:37:ba:37:4f:cf:63:12:4b:fc:
bd:8d:2f:29:3f:75:63:e4:b0:cc:5f:ef:77:9a:08:
85:55:37:5e:01:7f:2c:55:8e:2c:90:7a:23:01:50:
0f:d3:ac:1b:9c:bc:c0:c5:9e:54:46:4d:27:b5:2d:
ac:68:9a:c3:b0:30:a5:68:21:e4:6b:e0:f2:62:a6:
ef:6c:09:ac:77:2a:6a:bb:fe:d0:5f:f4:a9:d6:03:
07:54:4a:5b:68:a4:e4:d4:f8:aa:dd:ef:f6:8f:18:
2a:35:8a:0e:8c:59:b6:af:c3:82:e5:2a:2f:9e:c6:
d2:e6:fc:2a:b7:6e:1a:39:7e:4d:1a:93:93:c2:ac:
c2:c8:06:cd:72:de:ae:a7:81:3b:06:de:5f:c5:e3:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F3:03:43:9C:AC:CE:2D:90:AB:6F:5D:A7:66:37:EE:08:D0:34:CA
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:58:6d:8f:47:2b:ce:07:78:9c:1d:50:8a:01:f0:5e:88:02:
3a:21:de:ca:c0:91:0c:87:f6:f6:ee:b7:35:17:36:4c:07:ae:
69:ee:fb:c1:9d:32:48:d8:d3:0e:da:0d:f6:c0:17:69:a6:01:
ce:9c:a1:83:68:d1:dc:d3:80:ca:2d:87:24:db:8e:9d:ff:a5:
92:9b:64:c1:30:6c:7f:6e:0e:e9:b7:05:32:83:42:98:e0:fd:
d6:9e:e4:90:6d:f7:c5:a4:ce:4f:04:7f:db:0f:98:ea:2a:f7:
73:d6:e0:5f:cb:8b:86:24:4e:ae:d3:8c:a5:89:69:3f:60:17:
80:e0:e0:6e:02:32:b1:57:14:17:f0:a7:9f:73:87:f9:59:14:
28:46:5d:5a:4e:65:9e:89:27:1b:44:bd:53:8e:d7:56:17:51:
e6:8a:e4:ea:38:0f:15:27:dc:fc:21:c5:2a:6c:3d:df:be:57:
39:2f:7f:e9:97:18:8b:58:01:77:b3:1d:cb:f6:53:9a:59:e4:
af:31:bb:74:44:54:98:f9:54:c8:f5:64:fd:c8:cb:5a:3e:fe:
50:06:72:bb:fa:a7:14:77:3c:1d:82:63:e4:2a:b8:5a:64:9f:
f7:32:2e:78:c3:bf:d1:c9:8f:2e:3e:d1:1f:26:0f:7c:51:05:
9f:a6:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:31 2025 by rpki-client