Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier: adE3zi1rGfVY/+ku2zc03oXwR38SgKMkGys9xMGKNao=
Subject key identifier: 70:C0:6B:EF:DD:1F:DE:2D:A8:A5:EE:2A:3A:18:A8:6D:01:83:D9:EA
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 0194BD857F52187939AE1576A554953800ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number: 0FA9
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: JLhqWjSZDObmf+OuVt3jI1F75YsT0aKRTaE0HCPCSf0=)
2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7f:52:18:79:39:ae:15:76:a5:54:95:38:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=70c06befdd1fde2da8a5ee2a3a18a86d0183d9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:11:9e:ad:46:fd:d1:b5:ab:23:51:33:5f:
9f:3b:30:60:19:e1:0e:a6:5d:e6:76:56:0c:1d:9a:
75:5d:60:99:37:40:ed:48:bb:8f:54:37:5e:39:15:
b4:b5:17:3d:a5:18:45:32:29:f9:e0:ed:09:74:8e:
41:5d:bf:fb:6f:0a:a0:26:30:f6:32:3d:26:63:ec:
14:b0:e9:2e:f7:68:74:e4:af:a0:80:00:17:bb:93:
6a:51:26:2b:1c:32:48:18:50:9b:a7:24:07:31:be:
5f:2d:68:11:b6:13:9b:df:3d:3a:45:e9:61:af:fd:
78:f3:a2:da:0f:9c:cc:57:53:bb:96:a8:6f:89:29:
5f:12:ef:ef:f9:10:0b:28:6c:2c:e3:73:3b:36:a1:
87:73:8f:1f:62:83:13:b1:e0:35:49:fc:00:62:09:
ee:ef:5c:45:d0:aa:1b:98:e7:0f:93:cf:28:4d:33:
f5:dc:43:dd:c4:4e:01:6e:bc:d9:0a:8e:76:86:7e:
9f:8b:36:2d:eb:5f:b5:da:f4:c2:dd:b4:ed:95:38:
81:16:9b:31:6b:99:7f:ac:0d:47:c3:f3:c3:0e:48:
2f:c0:21:60:e5:de:a5:34:0e:68:79:e6:85:a1:41:
08:5b:03:d1:af:fb:f6:be:d6:b5:32:45:ba:db:18:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C0:6B:EF:DD:1F:DE:2D:A8:A5:EE:2A:3A:18:A8:6D:01:83:D9:EA
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:eb:9b:38:3d:37:df:48:08:9f:73:04:27:bf:cb:b1:e0:fd:
39:4b:c2:14:34:01:c4:06:96:ab:4d:cd:f2:2a:95:01:e4:b5:
a6:a7:32:ab:ca:3d:f7:1c:9a:64:0f:5e:41:ec:9c:a6:11:69:
0a:9f:07:c6:aa:80:56:11:03:38:61:8d:f7:0c:c0:44:9b:d2:
b9:e3:77:86:8a:d0:1c:e7:4d:a5:cc:f4:50:fd:c6:f0:b2:5f:
bc:bf:64:37:cc:b4:d1:9e:c8:c0:3c:4b:e7:d3:28:86:88:6e:
9c:28:4b:b3:ae:4c:d6:2a:91:59:0d:cf:99:9c:9f:b8:fc:01:
32:3c:8e:8a:d3:74:07:06:88:92:39:eb:3c:8c:5d:b8:e1:a0:
25:fb:aa:cb:6e:94:0d:fb:26:2d:7f:e0:e8:cd:b3:3f:fa:e6:
2c:c4:1a:bd:3a:9d:d8:46:5e:af:b9:6f:69:44:2c:72:38:2f:
47:97:f8:fc:71:55:5c:f9:33:cb:aa:c2:eb:f1:2d:b5:1d:d3:
0e:05:2e:b0:ac:e5:0a:7e:f1:02:6a:af:bc:00:10:25:b9:22:
2d:80:44:47:e3:dc:9e:3c:24:7f:13:19:20:91:1c:b9:18:62:
6d:e2:0d:2b:3c:25:e3:73:6f:37:72:76:51:ae:58:4b:9d:9c:
ea:84:d6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:18 2025 by rpki-client