Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: E8/ehRH+DeLKlyyyUifOediIvYsoY6gWKkAaUYpwJI0=
Subject key identifier: 58:80:B8:37:43:16:C4:AA:4C:11:51:27:32:41:15:6C:AB:1F:12:5A
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 0194BD1768AAB6BED02EB1FD2B418207E947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 1103
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: wCVW3mLpSWK3Yd1keZ+Q6Ccu/HHfIpv6LCUFANsMy+0=)
2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:68:aa:b6:be:d0:2e:b1:fd:2b:41:82:07:e9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=5880b8374316c4aa4c1151273241156cab1f125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:2e:da:40:a3:9f:02:ea:dc:d5:ca:87:94:
ea:ce:88:c9:30:11:fc:7a:b3:7a:67:78:bb:ff:c6:
78:b2:36:f5:02:68:2d:1b:f8:7c:c4:f9:9a:02:3e:
b0:5b:27:f0:85:15:37:ff:43:05:59:5d:ad:36:18:
f2:45:44:9c:52:f2:6d:78:fd:3e:3b:dc:5b:c5:53:
4c:fb:df:4a:9c:65:2b:d7:45:17:4d:67:a6:f5:84:
79:ec:19:f7:32:0e:e5:ec:fd:19:91:8a:62:2f:7e:
04:8e:6c:b3:16:9e:f5:25:de:aa:11:43:b5:02:e7:
52:1a:6f:c9:12:0b:c9:d1:6f:9d:2f:0c:d3:bd:c2:
80:6e:0e:23:43:fd:17:32:cb:7f:48:2d:dc:cf:21:
01:65:fd:4b:b7:b4:02:99:45:19:52:08:c9:ae:46:
c9:09:fe:49:3b:3e:71:ac:50:97:f1:36:05:b9:e2:
3f:14:ef:65:27:1a:86:64:86:7a:18:b2:55:59:5f:
14:17:7f:4c:83:40:f8:69:9a:de:16:d6:ef:44:be:
03:16:80:3c:ed:88:8d:7c:0e:21:73:fd:46:71:50:
e6:05:71:92:04:65:0d:2d:1a:d2:b7:a2:87:5e:3e:
57:f3:dd:b3:5a:e0:e1:9a:e6:fd:88:d3:0b:e7:6b:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:B8:37:43:16:C4:AA:4C:11:51:27:32:41:15:6C:AB:1F:12:5A
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:6a:99:28:2b:1b:bd:07:2e:c4:b1:0a:a4:de:d9:db:f2:
de:c1:bc:71:cb:f4:ec:5f:f1:9f:dc:9d:15:72:c0:03:60:1d:
b7:4b:c5:06:68:df:49:c4:a1:8a:8a:23:3d:b0:c2:83:d6:b9:
b6:94:43:0e:05:62:31:24:1b:d1:c0:d6:1a:b2:ae:6b:1e:78:
9d:a5:ec:f0:23:81:56:10:a5:34:94:a7:84:c9:45:b1:3c:bd:
7b:fa:0e:0f:1b:7f:3b:eb:a5:0a:86:7d:cc:e1:36:56:3d:b6:
a5:55:1c:1e:40:63:c2:ef:fc:30:5a:76:c0:bc:d5:17:e8:80:
34:c8:fb:ae:e5:1e:eb:48:54:fb:5e:4d:65:09:ef:70:cd:81:
9c:c1:59:d9:03:a5:9b:91:fa:19:71:a2:67:8e:8f:8b:ca:25:
f0:28:90:32:a3:33:c1:c4:88:e4:9d:64:e5:a2:9e:c1:5d:5a:
82:46:a5:2c:a5:cb:5c:d5:21:87:3e:90:fa:b1:16:97:c6:65:
52:3b:62:7a:40:d1:2e:13:85:3c:2c:e4:11:70:0a:ea:c5:c5:
b6:b0:7a:11:ef:7e:2f:67:ec:91:cb:f5:f5:d9:e4:b9:88:99:
f3:1d:19:8b:98:cd:6f:4f:c6:d6:ca:8d:c5:bb:fc:9d:72:b0:
87:bc:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:58 2025 by rpki-client