Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: yT5M9QCL5sECnDuuIDvFWFa4WVTKLyd/VhVAFt5BDHY=
Subject key identifier: 11:9D:86:E0:E5:07:85:B3:27:78:73:17:B7:06:45:B8:74:FA:72:9C
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 0194BBCE2D7234B9F72A533FA8EE4FBF71E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 0317
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: h6/hH5496Z6Juq6A5wxjVOg4lT98ZrQlKLbPy4wlJiw=)
2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2d:72:34:b9:f7:2a:53:3f:a8:ee:4f:bf:71:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=119d86e0e50785b327787317b70645b874fa729c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:e9:8f:22:f7:0a:8b:56:13:ad:e9:90:c6:
1c:77:b7:d0:d5:07:cb:4e:77:b6:fc:40:15:7e:a9:
f8:13:41:2d:22:1b:7d:63:10:e8:00:e7:9b:e3:a6:
cf:60:3a:d0:8c:c7:6b:99:76:ea:43:9e:74:32:dc:
f9:00:79:f3:28:80:84:a1:1e:04:82:3b:97:fb:96:
68:3c:ff:18:6e:26:24:a4:30:fb:95:b1:78:a2:7a:
8a:4a:05:36:8b:68:17:d1:ec:64:80:07:4d:f5:0b:
24:7e:ce:f3:81:29:d1:ca:5b:90:83:77:5c:5e:e9:
f6:48:bf:d7:2e:09:dd:5d:74:ed:c7:4a:4b:a5:7d:
ac:c9:c4:5c:f2:d0:ba:d3:a4:99:08:19:26:61:49:
db:e9:c9:3d:7b:05:4d:c7:58:04:aa:dc:ba:5f:7d:
55:0e:8f:a0:d9:e0:9e:d9:d1:9b:85:00:61:f4:b8:
36:0a:f7:f1:ee:40:27:0b:a9:3d:8c:92:f3:59:a7:
e2:6d:2d:0b:0b:e1:3c:7c:16:7c:4a:18:7b:f4:df:
c6:f5:5f:77:21:87:7f:6c:e0:91:59:1e:57:8c:6b:
18:13:b9:a2:d5:d6:43:75:d4:44:31:5e:d4:bf:39:
3c:50:aa:0b:62:d9:a4:49:98:88:f0:94:6f:7f:c8:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9D:86:E0:E5:07:85:B3:27:78:73:17:B7:06:45:B8:74:FA:72:9C
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0a:9f:32:4c:92:72:50:48:ef:04:87:2a:57:cb:00:9c:18:
d5:6a:4a:fe:bc:89:10:5e:8d:fb:18:f7:13:95:fc:55:b8:ad:
8e:28:e4:f1:b3:af:1e:4f:a5:cc:3e:d4:8b:0e:63:cb:b0:88:
10:a3:1b:2c:a5:00:3c:80:ee:29:87:0f:b7:db:ed:3e:f7:88:
ef:cb:c5:f3:5c:6a:c3:08:09:21:82:73:73:bf:2d:39:cf:96:
aa:b2:18:b8:38:d0:4c:39:7c:0b:01:e7:3d:1a:e7:15:a4:29:
95:91:37:7c:5d:d6:9a:4a:29:ba:bd:a1:4a:67:3b:82:0c:43:
cd:c0:4a:3d:97:c3:39:01:47:77:40:d5:42:4d:c5:b9:81:05:
11:5c:22:39:38:91:a7:d9:03:eb:fa:b5:01:05:c7:82:57:52:
db:83:62:6a:0f:c9:f3:81:89:bf:46:a7:d1:a3:d1:28:5e:ab:
44:19:04:1c:ed:eb:68:9a:09:f7:26:36:f1:ac:04:f6:79:82:
f8:55:79:de:60:c4:ed:58:8d:45:b8:1d:8b:b8:3b:6f:b3:12:
bf:4c:72:4e:7e:5c:30:31:29:c6:a8:92:39:11:62:c8:2e:a8:
82:89:6a:52:5f:38:b1:f3:cf:df:fc:63:73:a2:f8:33:39:24:
b9:ae:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:07 2025 by rpki-client