Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
File: ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft (raw, json)
Hash identifier: zDePsaE7/4eeszdBDxaQA+2Ubsest2bfb4WB6yShDSU=
Subject key identifier: EB:DC:52:26:90:F6:BC:E3:9C:0D:5D:B9:29:0B:DB:8D:3A:E9:90:21
Authority key identifier: 81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
Certificate issuer: /CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Certificate serial: 0194BD4E4761E65F73A9E89841577356A87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: F4qvGIYkJR23AR8i3U55htWfFrA.roa (hash: sLcl2GBXiso+t+Z5Jf9zcobxR79ID28gM2VuGSdiFAw=)
2: ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl (hash: sqnwpUUtd+4cl6mlxgTuYo93sDcllLDx7DRJwFhYX7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:47:61:e6:5f:73:a9:e8:98:41:57:73:56:a8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=ebdc522690f6bce39c0d5db9290bdb8d3ae99021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:9c:cb:eb:fb:40:f5:bb:60:9e:8e:ba:3b:
07:37:db:56:02:77:8e:62:a7:f3:e1:46:21:26:f3:
5e:b6:89:c3:6e:8d:16:90:78:0e:76:54:6f:e4:96:
02:17:8c:ef:69:fb:94:fd:6a:b3:ca:12:ba:64:c8:
60:4e:38:77:9a:2a:2f:d8:b8:7c:e6:eb:79:84:bb:
7c:22:dc:01:49:e2:24:7c:5c:d1:ae:d5:de:5b:8e:
7f:bd:56:e1:5f:c8:a5:dc:a0:32:ff:c8:c5:d9:a8:
33:d5:3b:0b:b0:16:6f:af:81:16:a3:25:0b:31:af:
b1:a6:20:c6:05:58:36:a6:7e:8d:30:95:1c:0b:57:
6b:53:85:9c:8a:5f:42:86:b6:cb:90:29:ae:06:dd:
5f:9d:77:82:f0:46:61:0e:f9:0b:7a:c5:18:93:d6:
6c:1e:92:f9:61:83:75:1b:3f:03:21:2e:fb:f3:09:
12:fd:e8:b4:cc:11:a3:1d:d2:18:4b:60:59:5f:c0:
95:3a:7e:b8:0a:9e:ac:83:4b:47:0f:6b:0f:73:c1:
1a:0e:e2:c0:d3:90:e0:22:ee:71:43:bd:cd:dd:f8:
63:01:5f:b2:7a:9e:d9:d2:75:82:8d:85:c8:99:a0:
99:ae:18:65:61:b5:72:9c:36:45:89:3f:7e:c5:b6:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:52:26:90:F6:BC:E3:9C:0D:5D:B9:29:0B:DB:8D:3A:E9:90:21
X509v3 Authority Key Identifier:
keyid:81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9b:41:d1:d6:24:50:ec:8f:0e:7e:11:c6:c3:4c:88:0c:13:
80:29:ee:4f:95:22:01:e4:f9:ff:01:84:17:9d:8b:1c:70:e6:
03:a9:1c:dc:40:1d:87:f6:ff:31:6c:b2:0c:bb:e2:57:85:af:
4d:b0:5d:3b:af:5c:af:82:90:8c:04:e4:b6:de:f7:d4:67:50:
61:43:88:04:77:82:76:92:84:9b:19:83:93:41:ae:c1:95:4c:
77:4f:04:95:f4:c7:c3:7e:1c:ac:00:3d:4f:2e:4f:ce:a0:c9:
e2:f1:ed:96:00:bd:26:3a:0c:a9:71:36:03:d7:0a:20:87:a9:
8c:d6:98:58:09:e9:bf:b6:70:7e:d4:0d:ca:38:b4:85:b2:7c:
9d:d8:5f:e4:e3:23:cd:be:a0:80:1c:fd:0c:e0:ee:2b:94:8b:
b4:34:24:68:05:ab:d0:33:98:cd:19:77:01:a8:49:e0:01:56:
04:bc:1b:9b:92:31:45:04:8b:77:e6:12:b9:c4:6e:05:a5:6f:
13:35:05:5f:97:70:a7:30:6f:97:0d:cc:83:3d:cf:c6:b7:07:
46:41:ca:26:16:49:9f:1f:1b:be:09:9e:74:68:5c:39:49:09:
5f:98:4b:c0:c6:fd:64:ae:03:a5:b4:81:e9:cd:0e:1e:29:4b:
06:9a:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:03 2025 by rpki-client