Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: YsddXw0tOspsblRSiKqKepPhUsnr9xaTOIGIE+cLNLw=
Subject key identifier: 34:AD:3F:5B:F7:63:BE:A2:B0:A6:DB:57:6E:41:48:AD:EC:97:F1:92
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 0194BCE0C54783703692550AC3799926C266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 1116
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: AXKglW8hQIlLPJTwEWPmKruhnOsWaQ7/4BUirEDRWwo=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c5:47:83:70:36:92:55:0a:c3:79:99:26:c2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=34ad3f5bf763bea2b0a6db576e4148adec97f192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:2b:7f:83:d4:20:c2:b8:9e:79:50:18:2c:
4f:e4:c5:83:b6:8d:ac:36:57:c1:34:d8:6b:e0:cb:
17:c3:11:94:c1:5c:37:c6:da:e9:83:8d:c2:56:39:
ae:e8:50:9b:df:c9:fa:c9:c7:39:b4:7c:1a:49:3b:
82:62:d8:1d:13:dc:32:cd:63:b1:a9:6f:1e:9f:b3:
a9:6b:2d:a4:d5:ae:9b:48:4b:8a:1c:e4:fc:cf:51:
ec:08:82:d9:d2:53:23:01:4e:9f:57:cc:06:74:6e:
83:33:bd:25:ec:f2:c4:5f:85:54:f2:ed:af:01:af:
af:26:8f:b0:19:89:82:d0:ba:09:6b:3f:a5:2c:35:
9d:5e:04:d1:6c:85:a5:90:9f:12:df:52:5f:7a:32:
14:ea:0e:ef:84:39:1d:f7:25:18:21:16:32:82:f7:
8b:d2:0e:33:6b:5a:62:3b:fb:76:ad:2a:73:eb:23:
b6:25:9c:c5:56:7f:a8:9d:55:03:5b:67:6c:ce:d6:
b3:18:12:b9:43:85:1a:14:57:ad:2b:e1:37:f1:51:
ae:75:23:7a:2b:6a:3f:74:ea:67:59:1d:08:ba:94:
14:17:a3:83:ba:00:d4:d3:98:8c:a7:6b:4d:47:11:
ac:67:86:f8:70:46:d6:e6:09:94:5b:f1:8b:04:8c:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:3F:5B:F7:63:BE:A2:B0:A6:DB:57:6E:41:48:AD:EC:97:F1:92
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ec:75:98:64:14:ae:eb:fb:25:96:4b:2b:59:79:17:09:97:
26:f9:bd:ee:65:c5:c6:dd:ad:51:a1:f9:26:12:d9:6f:10:ef:
a1:c0:73:ab:4d:e3:22:f0:31:8b:08:33:06:fe:71:ed:6b:70:
b6:96:6b:24:11:cf:6d:e4:32:2d:b2:e0:50:bd:50:72:5c:64:
c3:48:d3:4b:4f:db:bb:93:3c:4a:86:6b:5f:9f:1b:a0:23:a7:
78:c4:c2:b2:e7:a5:2a:bd:6f:68:14:49:4e:44:20:df:e2:c2:
14:bf:d4:f1:9b:d2:82:df:ca:e1:ec:49:6c:21:b4:0c:61:57:
5b:f3:cb:3b:07:c4:d2:9d:6e:58:5d:f0:9f:35:35:83:aa:cd:
41:d1:96:e5:f5:9c:86:3e:73:91:b8:7c:65:92:5b:ae:8d:22:
77:c6:f9:82:9f:71:cb:ed:1a:c3:51:41:ca:76:2c:17:e7:98:
33:53:f9:52:d4:a5:ab:72:e1:10:24:27:5c:9e:d6:21:3b:ea:
58:cd:db:b1:63:3a:6d:12:37:f3:89:9c:99:e4:a1:d8:e7:cc:
47:62:21:7d:13:ae:e9:7e:16:e7:33:43:e9:4a:2d:2b:0e:78:
90:f6:ff:c9:c9:6a:99:3b:d4:35:76:df:f9:90:ca:56:c3:88:
4a:b2:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:25 2025 by rpki-client