Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: 4LvXdajDBnVP/x9YQVK4XF2smyhL3jpcY2LPCryjFR4=
Subject key identifier: 63:52:2F:8A:CC:1B:A6:BA:1C:29:99:E5:7B:7F:79:F5:9B:A4:3C:50
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 0194BBCEF452074CCAB8850094323976155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: DNOKNO6qjnwoGbHMCMenSkrPyjhKuoK9SUQyw/Qu3L0=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f4:52:07:4c:ca:b8:85:00:94:32:39:76:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=63522f8acc1ba6ba1c2999e57b7f79f59ba43c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:52:94:6a:74:e8:99:81:5a:f3:77:11:a1:
81:21:cf:cd:d8:51:cb:0d:bd:99:dd:ce:10:2c:22:
67:76:56:4a:7d:41:43:61:cf:64:d9:5f:00:0b:7a:
6a:25:1b:62:f2:f9:54:3d:16:6c:c7:a1:ff:43:85:
75:60:7d:25:c6:42:c0:59:0c:f9:5d:99:15:83:f0:
1b:43:4d:5a:e9:63:00:a5:9b:bf:42:c6:4d:70:01:
4b:5c:27:d1:3e:4c:9f:26:6d:2e:aa:45:f7:e5:55:
26:e4:40:5b:d0:e4:95:bc:25:88:e5:86:9c:2b:0a:
ba:6d:83:ed:a1:2b:b1:9c:79:3a:44:52:34:fc:71:
a5:66:b1:8e:92:fc:a3:ef:d7:66:d9:bd:ea:69:46:
dc:f6:0d:a2:e1:ab:63:20:71:46:f0:ce:a2:b9:eb:
08:e5:3d:ce:01:81:30:b2:50:1b:56:48:dd:75:76:
85:29:88:5e:c4:0f:81:fb:3a:c4:96:d8:82:da:e2:
d6:55:60:2e:d0:0c:fa:33:72:40:f5:ae:57:dc:47:
6d:83:01:80:f3:01:9e:ed:ee:a0:f6:7b:be:79:b2:
2c:ec:46:49:48:6b:35:9b:43:de:9f:73:48:a4:0c:
2e:92:3e:5a:00:83:e7:b4:be:65:ca:4f:8e:1e:87:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:2F:8A:CC:1B:A6:BA:1C:29:99:E5:7B:7F:79:F5:9B:A4:3C:50
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:49:6f:68:7f:35:7f:39:bf:28:c0:8e:59:bc:24:57:8e:7e:
49:c1:ba:eb:90:c2:fd:7f:7c:f9:a6:22:39:ef:d0:33:85:06:
9c:06:f1:b9:94:7a:0b:51:49:0b:f3:08:57:d9:a2:6c:c4:62:
dd:7c:59:49:7b:5d:ab:6d:42:8e:2a:a7:cc:9a:3a:4b:ec:bd:
03:e2:7c:dd:3c:fe:14:db:cf:63:a0:52:89:17:41:f9:1e:d0:
85:ff:d7:a3:e3:8d:a6:21:57:64:3e:30:18:66:ac:1d:73:ac:
2a:93:80:2f:32:82:c7:31:6b:bf:fd:fa:3a:aa:5e:55:a5:35:
f6:c2:d5:9f:90:7e:bd:26:96:34:ab:ee:bb:bf:12:c3:d5:69:
79:75:0a:54:16:72:3e:f0:40:9a:69:ba:88:ea:5e:ca:5e:d8:
87:c1:d9:a3:99:42:ef:9c:a7:80:d7:1c:db:67:a5:be:d1:ad:
95:86:60:ec:ad:6b:28:5e:ab:1d:74:96:a5:ef:d7:90:c3:af:
ec:75:36:56:a3:28:a8:b9:5d:0e:21:db:18:70:57:2c:5d:3a:
92:52:87:0d:41:0c:79:c4:d0:7f:29:d4:f5:a8:19:b5:62:69:
62:11:2e:6e:38:6a:da:a9:0d:8d:25:31:67:80:f3:84:21:e2:
ef:ee:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:11 2025 by rpki-client