Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier: RonXyoRW38N7aIWZMupvTnwiF5PZBrpyZ+dsqBezYHc=
Subject key identifier: EE:AD:47:72:B4:00:52:A4:74:A4:F9:F1:F4:E7:18:58:16:F6:94:FD
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial: 0194BC3C1F03B8C7E5AA17848A1B9BDD54E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number: 1C
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: YEkOODLKmoqdvFtiCde6crMzge9gU0BBK6D4js1BPJY=)
2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1f:03:b8:c7:e5:aa:17:84:8a:1b:9b:dd:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=eead4772b40052a474a4f9f1f4e7185816f694fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:18:b7:41:34:f4:32:73:e7:3a:fd:0e:b5:
a4:cb:92:8e:8e:9a:16:74:29:6b:62:a2:13:49:ed:
19:79:98:42:a0:48:f0:61:15:64:48:ba:c4:59:26:
30:17:d1:40:0a:84:48:16:07:b5:7a:6f:a7:d5:f8:
cf:3e:98:78:f4:0f:da:7f:bc:75:28:ce:c8:93:7b:
92:0f:43:c4:65:42:14:5c:a3:04:86:0c:c3:67:aa:
63:84:36:1d:d4:c6:a1:2d:36:10:18:ce:d1:62:7b:
25:33:9f:bd:f1:bd:1f:b1:dc:8f:87:dd:59:8b:b1:
67:a8:09:f2:61:68:95:51:79:43:72:87:e0:f2:00:
88:af:0b:b6:2f:f7:b4:25:37:95:cb:ef:82:78:b4:
c7:e0:57:81:ed:c6:89:b2:30:3b:3e:bf:5a:dd:0e:
fe:b4:2d:db:71:e6:ac:bf:b8:0a:db:d1:bc:bf:c7:
ac:49:5d:13:27:c3:fb:18:34:a4:9e:09:67:79:b8:
6b:1b:97:d4:e4:af:d1:f2:1c:84:30:1b:96:8a:ac:
11:77:11:21:41:5e:f6:d1:0c:04:94:26:5d:5b:df:
61:5f:8f:58:51:11:fd:d2:ea:2d:79:95:97:63:6a:
3d:06:cb:c4:6b:55:b2:d6:16:aa:22:c3:cb:f6:47:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AD:47:72:B4:00:52:A4:74:A4:F9:F1:F4:E7:18:58:16:F6:94:FD
X509v3 Authority Key Identifier:
keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5d:16:91:ea:d9:a6:96:5a:0b:d0:ef:ae:e6:9a:2b:73:70:
b3:d3:47:76:10:f6:5b:bd:d1:55:78:02:e6:c1:14:83:d6:80:
0d:39:f4:6d:e5:8c:d8:7b:a7:9f:ff:c9:54:0d:ba:34:ba:fa:
bb:5f:68:cc:69:e7:8c:16:44:fd:a1:6e:49:23:a2:51:93:a2:
f6:a8:7b:8d:29:bb:1e:41:d3:24:57:4c:56:27:52:3e:cf:67:
82:9d:c4:20:36:49:25:c6:2a:43:e9:69:c1:ee:18:d9:55:31:
35:89:f7:e4:60:7e:ef:98:cb:23:6e:4c:7f:c8:e6:f3:f5:06:
af:c5:85:2c:18:ac:f6:ce:db:56:12:3a:20:4d:2d:87:7d:46:
82:59:74:a0:73:62:9e:2b:4b:3f:ae:13:37:ed:aa:75:2f:fd:
da:af:5a:7a:0e:6e:34:fa:b6:b7:78:e2:9b:45:91:0b:2c:1a:
11:28:dd:23:2c:74:d3:1a:f4:af:71:ce:ec:ea:c7:ba:c3:61:
fa:f3:82:7e:5e:bc:1b:85:b5:7c:b1:38:f6:a9:eb:1b:39:72:
42:f0:90:7b:50:0c:bb:9a:90:ef:55:82:cd:aa:20:7f:f6:de:
9a:77:6c:79:34:4b:f2:39:8c:ad:d5:97:be:f5:1d:17:52:95:
7d:16:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client