Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: nSU/xAhT8ALJ6pGI6XuTW8JHe9xTZqpmRZtMt/ICiww=
Subject key identifier: 16:9F:D9:2D:DF:02:0B:3A:22:A4:B1:77:3C:F5:D8:2E:7F:98:96:ED
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 0194BCA9BCAB6AB2959E0071DCF73A1ED958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 127A
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: 5aAkTvoofnL3zGFO49EF+SvsU8t8nz02wRp3fp3M5bk=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bc:ab:6a:b2:95:9e:00:71:dc:f7:3a:1e:d9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=169fd92ddf020b3a22a4b1773cf5d82e7f9896ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:f2:e0:5e:f2:54:2d:27:34:b7:90:99:6f:
6b:a3:57:f1:fa:dc:cc:2b:f2:bf:46:61:e6:36:80:
ed:1a:6e:a9:34:1d:ba:ac:87:b4:17:c7:4a:d8:8c:
3b:fa:b4:3e:47:64:5c:71:dc:54:87:55:2b:78:2e:
e5:67:35:b3:a2:ba:bb:d2:a8:c2:93:e0:50:65:70:
2b:78:6b:3a:b5:7d:ab:7b:1f:63:2b:b1:1a:b0:4b:
d8:f4:1e:f9:23:eb:14:79:3f:13:77:bf:c5:3e:72:
4f:1f:30:67:d3:b7:2e:fd:b5:5c:17:3d:a9:8d:c6:
f6:b3:ae:b1:07:c3:4c:09:d0:ac:0c:25:f3:dc:ad:
08:a2:f3:de:5c:65:71:e1:45:b3:29:46:33:c5:b1:
bb:b4:6a:07:e3:24:e5:82:fd:43:7a:9f:cb:7a:d3:
d1:e6:47:3d:7b:29:11:58:64:88:63:6a:82:c9:82:
90:01:68:05:bf:ea:40:0c:0a:ac:09:d5:9b:dc:8e:
e5:d2:15:4c:32:a8:20:85:7d:32:66:ca:e1:16:0d:
37:dd:30:9a:d3:eb:6c:76:08:eb:f3:3a:4f:13:4f:
67:c5:21:3c:fd:d3:83:89:6a:ba:58:94:db:db:7b:
45:3e:8f:b1:1f:b3:05:7d:cd:f2:4c:78:b7:16:91:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:D9:2D:DF:02:0B:3A:22:A4:B1:77:3C:F5:D8:2E:7F:98:96:ED
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:03:40:0e:ac:f4:25:5e:86:5b:38:25:3e:94:00:52:b1:f2:
10:f3:bd:50:d6:9a:60:a3:59:41:d2:78:f5:63:c5:1e:17:65:
a5:09:56:94:2a:48:e5:0e:e9:f4:08:aa:00:cc:ed:76:68:29:
b3:7b:4e:d1:dc:c1:60:4b:3e:18:7f:33:33:93:73:33:e6:09:
a2:3d:ca:b6:64:b0:16:1d:85:10:0a:1b:27:11:4e:a6:4f:d2:
24:41:7c:70:f8:54:b1:6e:20:60:2b:fd:02:03:5c:64:af:59:
4a:14:19:3e:e3:64:03:f3:cc:0c:81:86:3e:71:a5:87:f8:a6:
1e:a7:b0:c2:5f:42:ae:c8:7f:b0:f7:72:bb:33:62:57:6d:fb:
84:3f:4e:a9:3d:2f:6d:4d:aa:f9:59:f5:c4:b1:f2:ca:e8:f0:
98:1b:75:31:26:16:84:56:dd:10:93:96:ae:50:13:74:63:1e:
5e:76:8f:47:54:18:5d:c3:56:61:1c:27:58:2e:f5:f3:0d:a2:
d6:27:1f:78:20:64:87:12:76:27:6e:f4:0a:ee:f8:5d:20:d6:
94:2d:00:bd:bc:75:50:fd:8c:94:ea:69:bb:f2:5b:6e:b3:8c:
c5:d3:9e:12:48:3b:01:84:fc:e9:73:ed:d1:1e:6d:e7:f0:a1:
72:5c:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:14 2025 by rpki-client