Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: ixizkWoVLm7dA59x/8rLVVL1K+FTrqdZAbLZ2mU3bQc=
Subject key identifier: E9:C7:61:1A:73:7A:DC:21:85:F2:CB:B7:B8:62:28:2F:D5:54:F6:86
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 0194BCE0BD4D36C8A917DECDF8DCEB31A3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 02F0
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (hash: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=)
2: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: SKv9Q4SvDFTOvOVCAGSkuhhE0InYHJ7DfoslWRrmP3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bd:4d:36:c8:a9:17:de:cd:f8:dc:eb:31:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=e9c7611a737adc2185f2cbb7b862282fd554f686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:da:06:c8:d7:50:9a:0c:66:e5:f8:cd:56:
32:df:bc:7f:f3:e0:4d:73:48:c9:21:7d:3f:48:1e:
74:8c:16:13:b9:cc:13:8e:21:47:f2:e8:3c:34:4e:
e2:82:e4:a4:3e:16:d5:11:60:c1:69:bb:dd:b1:23:
0a:c6:b4:a2:a0:7c:5b:35:b1:63:49:a6:65:e2:be:
96:44:85:b4:80:1d:25:16:f2:c2:da:95:7b:15:e7:
76:e0:b6:7a:2a:b2:58:b8:85:5c:1f:73:aa:65:1e:
ca:aa:77:96:bb:80:6f:3c:17:3d:15:02:8f:dd:be:
aa:5a:1b:1a:3f:fd:85:66:b7:48:fa:b3:89:81:14:
52:bf:31:8c:ec:a8:e9:86:1c:6f:60:51:16:24:9c:
98:9b:59:5e:49:d1:20:7b:74:a1:6a:0e:4b:4a:18:
8e:f1:c1:d4:d1:03:cf:bf:19:e5:c8:ae:0c:ea:86:
23:76:37:18:e4:16:f8:b6:23:c5:47:f0:96:f5:b3:
8d:58:55:2e:3d:7f:f9:ac:05:78:f2:64:3c:d0:77:
53:a8:f6:7b:61:63:f1:66:52:8b:ca:bf:e9:f8:b3:
0a:eb:45:fc:5d:6a:49:63:38:97:9b:e8:2e:76:46:
25:44:de:61:42:70:55:82:04:ea:2c:cf:09:41:1f:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C7:61:1A:73:7A:DC:21:85:F2:CB:B7:B8:62:28:2F:D5:54:F6:86
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:60:67:4b:34:16:71:32:97:7d:52:c3:aa:6b:50:19:93:1d:
86:e3:d4:89:ab:26:c1:cd:2a:6b:ad:b6:68:4e:74:8c:d2:97:
0c:24:51:66:12:7d:dd:db:38:7d:5d:be:5a:8c:4a:43:86:32:
01:67:ce:3c:e4:00:11:06:eb:12:36:f6:d0:c6:ac:89:9b:de:
49:85:c0:b6:49:57:cf:f3:70:df:43:a7:ba:74:4b:d6:80:69:
e2:ed:92:25:ea:0e:20:c1:44:47:7a:1f:dd:fb:71:6d:9b:a4:
f2:99:61:90:f1:34:ae:7f:e7:d4:57:06:30:c8:ca:f3:97:e2:
02:f5:f5:e9:d5:82:dc:04:99:52:58:78:02:a7:9b:f3:ff:a7:
16:4b:17:cb:39:3b:ac:93:93:aa:1f:e8:3c:e6:be:4c:cf:68:
78:1c:61:52:26:92:40:24:e5:5a:20:69:54:11:d3:17:d8:d5:
6f:38:a2:1b:b5:74:0a:ca:d2:07:fd:db:f8:ee:51:a7:f2:15:
cf:12:15:1f:eb:7e:19:be:dc:15:b7:d4:e6:cd:a6:f5:59:63:
3b:ec:75:2f:29:d4:b3:17:e4:81:da:e0:68:c1:4a:2f:0f:fc:
14:4a:a7:14:24:c5:86:ec:24:3a:b3:fd:5f:9e:3f:9c:3d:f2:
b1:b2:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:44 2025 by rpki-client