Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File: EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier: xniwJ/+ebRbA5hAJfgec4mJCjFkNt9dz6+7CLZl2vKQ=
Subject key identifier: 2D:47:86:9F:BB:68:57:B7:8A:2D:28:70:A7:29:B6:3C:33:A0:6B:5B
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial: 0194BD4E725A0E7D77B054F8D752B3092C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number: 09E0
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: MwXOYfzceOrh5RzHaZPDgTFkx3SwbyFkaJGdoeaJNEg=)
2: hMWp2eYYKaaUSIum5EmKLwWKUa4.roa (hash: 8+yLsr+nQz8cs8V3LX83Tse1Iso+npvbmYLm0xnhp94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:5a:0e:7d:77:b0:54:f8:d7:52:b3:09:2c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=2d47869fbb6857b78a2d2870a729b63c33a06b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:bd:82:a7:36:70:38:cb:cf:7f:70:d6:0a:
52:2b:3b:93:18:9c:d6:f8:33:df:d6:e2:b4:e1:0b:
28:bc:bc:3e:4e:ee:6f:9d:f4:74:d4:60:be:df:a4:
a8:68:a4:d4:a0:15:a4:8b:a0:c1:43:ee:c6:de:33:
48:c6:05:7a:55:13:c9:6f:96:8d:6d:12:e1:d5:91:
da:38:00:79:e9:09:2a:92:6f:2a:c5:9e:13:d5:99:
aa:af:fd:d1:f5:c7:14:92:69:e3:a1:e0:c4:5c:c8:
dc:ca:0d:07:31:b5:f1:5f:1a:d3:c3:33:6b:da:d4:
b4:f6:0f:89:9f:25:cc:3a:d1:41:af:58:36:12:bc:
03:0a:c7:93:f3:92:a5:da:ba:3d:db:b4:83:f7:aa:
ce:10:bb:de:99:2a:c8:8f:d6:05:d1:65:fa:3a:4b:
82:8a:49:ee:2c:14:66:e9:78:dd:25:b1:df:ac:5c:
a3:87:7c:ec:27:0f:05:22:a3:a5:b8:c4:89:b2:0e:
80:e5:d8:c9:be:ef:ed:81:44:59:66:37:05:7d:6a:
8a:44:51:f4:31:16:e9:fe:42:89:59:45:07:54:23:
09:42:37:43:35:ae:c5:7e:52:19:de:5e:0b:d2:98:
30:b8:50:38:db:f0:83:e7:3c:8b:be:c9:fd:04:ba:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:47:86:9F:BB:68:57:B7:8A:2D:28:70:A7:29:B6:3C:33:A0:6B:5B
X509v3 Authority Key Identifier:
keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:69:b5:c1:ce:88:35:d4:0e:aa:eb:ba:1f:d2:ef:ed:fe:36:
2b:61:ab:83:5c:43:cc:d6:91:82:97:1c:78:36:bf:aa:f7:df:
82:f4:7d:89:a2:5e:08:1a:47:42:4d:e6:ef:ba:47:6b:64:25:
92:ba:e5:c4:68:3c:9a:34:fb:10:83:c7:4d:16:bd:c9:e9:4a:
8a:53:bd:2c:27:5d:f2:35:42:fe:01:1b:76:97:1c:5d:42:34:
9f:fa:df:cb:23:7f:88:a7:81:9f:5f:45:d3:23:0f:c5:cb:0d:
9b:35:76:ab:32:b0:4c:32:77:94:45:83:36:f0:5e:75:a1:e3:
3e:ed:55:86:42:8b:b2:c2:8b:04:60:5b:cb:07:39:07:c1:dc:
8c:3d:34:c3:cd:b6:91:fa:10:d7:64:85:8e:53:4e:ab:d6:0d:
19:8e:e1:76:95:dd:d9:e7:23:10:aa:79:f5:45:8f:f4:da:7d:
e9:ed:30:cf:f1:ea:df:de:ae:d7:01:06:c0:f2:54:32:ca:6a:
ef:c4:d6:61:66:18:17:6b:79:69:8a:9c:a4:d9:21:aa:7a:d9:
17:08:01:a6:c8:94:bb:d0:d3:11:ac:77:47:bd:cd:e9:f4:4c:
b0:7d:dc:8e:c8:40:20:18:fb:9b:e1:c1:22:18:be:64:94:a2:
33:9f:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:52 2025 by rpki-client