Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: UiDSotgSgEBERLXPfaYP/dzD7NZ/HiWPj3CVXlDgvqk=
Subject key identifier: BD:F3:FF:B8:F1:1A:FD:6F:0B:F3:9C:24:D6:0E:82:A8:40:2C:6D:D8
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 0194BC04CDC28E7FAB2959F9CA6ACDDDF546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 089E
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: bFZ+MpKIyDgJNwZ2CBJq0/hiPGQ0KtyHqKexfRrfkRM=)
2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cd:c2:8e:7f:ab:29:59:f9:ca:6a:cd:dd:f5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=bdf3ffb8f11afd6f0bf39c24d60e82a8402c6dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:8e:d9:c7:07:05:4c:b8:8c:8a:11:67:54:
8f:93:3e:cb:10:21:5d:99:c9:c4:a0:c5:0a:fa:c0:
8c:2a:2f:89:79:40:5d:a4:11:4e:cb:17:5f:fa:5f:
dd:03:22:dc:3d:da:b5:f4:4e:06:8b:7c:bf:9f:02:
1b:e7:d3:12:24:81:86:12:d6:cd:04:c6:33:77:ef:
cb:dc:7a:f1:0d:27:1f:ad:5c:d6:d2:0b:51:d1:7b:
b0:7e:7a:a5:ab:1d:b7:a4:52:f7:91:5b:6d:b8:a1:
6b:b0:06:34:a5:e4:df:27:b9:51:6f:4b:0f:8a:12:
c3:7b:3c:93:ab:c3:f2:aa:ec:74:39:b6:63:a8:bc:
6f:0e:11:2b:7f:b1:88:7f:16:42:dd:ad:59:aa:0d:
28:49:a2:b2:e1:79:f3:be:21:4c:b8:c8:7a:58:ed:
7d:c6:6f:1b:62:d0:c1:85:b4:50:d9:fb:bd:b5:51:
bb:f4:ed:9c:a6:dc:9b:2f:49:61:1f:f2:93:db:37:
b8:07:65:cf:02:ee:b6:75:eb:62:e4:56:de:3a:eb:
3e:b7:15:68:6c:48:dc:2c:00:9f:c3:e6:73:d3:b4:
55:94:a4:73:02:85:74:c6:b0:d3:6d:3a:53:c4:dd:
1e:04:cd:9f:d7:6c:75:cc:73:cf:84:91:02:72:d7:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:FF:B8:F1:1A:FD:6F:0B:F3:9C:24:D6:0E:82:A8:40:2C:6D:D8
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:58:1e:aa:fd:c7:3a:93:be:bf:b1:2c:d9:53:4c:cb:71:7b:
41:4c:5f:78:50:43:ad:6a:21:41:f3:d7:71:5f:e8:d7:1a:d0:
72:96:97:71:13:c8:75:d6:59:0b:49:df:8b:3a:d3:eb:b1:42:
0a:88:a3:46:46:cc:18:82:81:08:ff:39:63:0a:96:1d:46:63:
1f:1c:f1:fe:93:37:77:21:3a:ce:54:5f:44:ec:55:aa:3b:8e:
02:a3:20:23:89:a3:f2:db:c4:5e:76:56:97:7f:bc:0c:f1:08:
34:c2:13:b7:b8:54:5e:15:8c:c7:51:13:e7:aa:40:31:70:08:
e7:b3:72:a3:cc:c4:c5:f1:ab:b4:24:15:62:49:3f:4c:db:0b:
ab:b1:dd:77:e6:7e:81:e1:0e:e4:45:07:1c:2d:c6:54:98:02:
e0:a3:13:3d:a3:7d:29:f6:8b:ba:06:d1:38:83:43:e3:13:4e:
b1:0c:66:13:82:e4:4f:b6:94:8d:df:f1:e8:08:07:9d:4e:07:
ca:0f:d2:cf:79:c9:43:d9:70:33:50:3d:87:04:02:5d:8c:d5:
f6:c9:58:3a:33:ba:52:b0:9b:53:15:93:0c:a4:80:fe:4c:ef:
24:a4:98:98:aa:e8:3f:c1:1a:f8:57:5b:c7:db:fc:ec:22:6c:
11:6e:40:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:55 2025 by rpki-client