Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: cQYxXan9v7ba5ZttdItcf7UJ7GCIwqCSWppiFjWVO6A=
Subject key identifier: BC:50:05:70:73:06:F8:D4:A8:AF:B0:4B:B8:1A:ED:F2:11:ED:1E:05
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 0194BCA9D8DD2263164506FBEC21B184154B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: yNdheFaaUKbdVw+s9hCtEi2sIgQ0qZaRwh1MY3xvYnk=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d8:dd:22:63:16:45:06:fb:ec:21:b1:84:15:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=bc5005707306f8d4a8afb04bb81aedf211ed1e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:2d:aa:ef:a8:82:80:ee:e8:75:6a:33:b8:
dd:81:bb:83:4a:c7:f3:7f:d7:55:48:b2:e2:fe:b2:
87:c5:f5:dd:a6:d3:1d:2f:0a:bd:13:cb:1d:01:ac:
18:ce:61:b8:46:fe:cc:93:6a:2f:56:d3:ad:3d:a1:
06:eb:8e:11:e2:c4:f7:69:8a:99:aa:7a:7c:cc:01:
44:5d:b7:70:98:07:1a:32:c6:df:eb:04:55:e8:59:
fa:a7:da:0b:3f:e8:f6:7b:83:63:c9:b3:ce:51:35:
05:8d:4c:23:0a:78:5e:84:43:9c:12:06:ce:c7:f3:
4d:b8:7f:7f:75:ba:78:e2:62:92:9b:52:4f:0d:03:
c1:fc:01:02:de:36:04:95:f8:50:18:a7:3b:bd:da:
b0:41:13:49:b0:fa:6f:17:bd:b6:9a:93:d0:fc:48:
28:1f:38:3b:83:17:23:fc:01:df:8d:85:4e:57:9e:
50:15:61:a6:66:78:47:6b:ed:13:8c:45:f8:80:09:
69:d8:9b:79:6d:9e:4c:dc:aa:24:dd:6f:ef:7c:3a:
29:06:d4:36:a1:b1:c0:c0:db:09:4f:7d:07:29:2d:
f1:54:d8:8e:d0:1b:31:d9:4f:54:03:14:81:ea:63:
81:62:44:2c:08:da:c0:28:f9:12:dd:72:a1:cc:0b:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:50:05:70:73:06:F8:D4:A8:AF:B0:4B:B8:1A:ED:F2:11:ED:1E:05
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4c:04:0b:5e:29:68:c7:b2:f6:d4:1f:d8:a2:70:32:d0:5f:
59:13:6c:b4:29:a0:1e:e9:44:de:91:f5:cd:dc:60:a5:f8:f4:
e8:cc:84:34:98:c9:3c:d9:72:83:3c:66:c3:a1:61:bd:60:4f:
ad:f5:44:e3:58:c7:bf:4e:65:52:11:c0:77:8a:4b:d9:8b:ce:
82:a4:2d:e1:c8:22:e8:a8:55:a0:3b:2c:78:a8:43:8b:c8:7e:
df:9f:38:c3:1d:92:74:cb:74:a4:78:4e:f7:d3:43:61:20:48:
3f:b1:05:df:75:51:19:82:b1:53:3a:df:aa:8b:b2:51:39:1f:
0c:20:f8:6f:28:7c:25:f6:c8:0a:88:92:03:0a:f1:e3:db:b5:
07:7e:2b:ff:52:c5:6d:2b:ad:f8:3f:bf:6e:bb:8d:a5:e6:1c:
91:fa:5a:1b:2e:b5:b4:21:61:16:8d:80:cf:99:64:b0:95:fe:
1c:78:0f:07:ff:3d:af:3f:c5:e4:94:1e:1b:22:73:bc:5d:5d:
84:26:7d:13:48:97:18:f6:b5:fc:68:29:ca:8e:dd:76:67:d9:
6b:f6:fe:23:02:44:ff:9d:a7:e5:c2:07:b9:8d:1b:1e:d6:38:
94:40:eb:32:f5:2c:24:4b:16:88:81:72:75:2c:45:4f:94:a4:
3a:a2:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:57 2025 by rpki-client