Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: t/8AKl0S0H0aaohKzdO6OgcvFw+gGZeitRvxCLoM0Mc=
Subject key identifier: 2B:2B:DE:BB:F9:0E:95:E8:CA:58:F7:DF:BC:01:43:F0:95:E5:20:56
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 0194BBCE8E5A6686E2E1424AE12D393919C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 049C
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: KfUArVZ6u8s58k9eI8J1MlUGVcUr4LVof/YPPbAlz1s=)
3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8e:5a:66:86:e2:e1:42:4a:e1:2d:39:39:19:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=2b2bdebbf90e95e8ca58f7dfbc0143f095e52056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:c9:16:15:96:0a:e4:1f:c9:a1:72:d6:8b:
af:62:ff:ba:1d:d8:9d:39:5d:53:cc:3a:5c:c6:0a:
e6:b0:32:b5:3f:29:cf:6f:86:c0:80:e8:5e:3e:bd:
4a:36:d0:31:30:42:8a:97:dd:33:9a:0e:f3:13:87:
ce:bc:c6:64:fb:38:55:83:30:2b:73:3f:ac:10:26:
94:d8:a3:a1:6c:ae:0b:ef:b5:9d:ad:a6:86:8a:b1:
f5:ca:b8:b3:25:e5:22:fe:cd:da:04:d7:e7:18:da:
75:09:fb:ba:30:c1:da:1f:19:b3:fe:e7:f1:4d:e6:
e3:5e:61:56:7e:9f:6f:d5:c5:01:c3:eb:1f:d2:52:
2c:42:a1:12:63:b2:4a:73:99:8a:c4:87:8d:7a:10:
a2:28:2c:96:ee:31:cb:02:de:ff:a1:6e:52:82:ab:
78:2c:9e:3a:64:d6:99:ae:1b:c2:a7:58:6b:59:a3:
90:0c:98:20:c0:2b:52:1b:56:62:af:13:fb:e5:61:
18:1c:9f:46:80:62:29:61:f2:62:55:6a:a7:c4:82:
3b:9d:20:30:5f:9d:5b:79:27:6b:15:59:f6:27:0a:
b8:45:2a:74:15:7d:e9:02:8c:2a:69:33:85:ae:67:
fb:88:6d:fb:e1:12:db:13:af:47:d3:d2:1d:3f:81:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:DE:BB:F9:0E:95:E8:CA:58:F7:DF:BC:01:43:F0:95:E5:20:56
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:49:46:f6:28:89:cb:6e:35:32:32:8b:ea:1f:b1:28:cc:c8:
05:fe:f9:be:44:f2:08:e0:d3:86:e5:fa:46:1d:12:90:a1:83:
e7:62:a6:bd:45:5a:3f:12:81:ce:d5:3c:ae:3c:b0:65:4a:b5:
bb:60:cf:ca:0d:73:ec:e2:28:4c:a4:f7:fc:2e:0c:e6:c8:6c:
a7:64:8a:00:f9:e4:1d:a5:8f:8b:72:08:51:d9:5d:5c:54:3a:
65:6e:76:d1:5b:54:96:ec:0e:2d:f0:d7:21:c5:a4:2a:8e:ba:
60:90:87:00:f8:59:21:53:ab:7f:d4:30:3b:4a:44:11:68:75:
d3:3b:b7:73:89:56:9e:88:27:7d:6c:4c:8d:75:bf:25:53:49:
f0:92:16:ed:a6:f8:69:48:97:3b:37:55:ba:eb:71:a0:f1:57:
41:b4:8b:23:7c:02:1e:f0:bc:75:55:84:aa:1f:73:9b:58:0d:
45:72:8a:e8:ca:ad:0c:f4:c2:e9:69:b2:31:ef:08:00:4f:a2:
aa:14:cb:1e:67:32:0e:47:0e:7d:80:93:04:97:4d:b2:28:d7:
9b:1a:a3:b0:69:ce:41:c9:91:5a:66:13:22:c5:c0:d9:57:8e:
34:ef:60:fe:3b:60:8b:86:9d:a8:cf:9a:73:40:4e:f8:c9:b6:
a4:45:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:25 2025 by rpki-client