Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier: Efaq0JVT8up/9BFD6kQHestz7ocIeH+lixv/XDEa19A=
Subject key identifier: C7:E6:38:7D:80:F2:3C:EA:1E:70:2A:4C:B0:E0:AB:DC:2A:41:A2:3E
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial: 0194BC73136DE65A8453778B64B45C61144B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number: 09C9
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: qrnSU1UKak7Ofv8YTg5n9wO0Hy8rX3quyl9anSrh5iM=)
2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:13:6d:e6:5a:84:53:77:8b:64:b4:5c:61:14:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=c7e6387d80f23cea1e702a4cb0e0abdc2a41a23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:19:ec:0c:c5:8e:dc:ab:51:b5:1c:ff:9c:
03:4f:3d:29:77:43:46:2f:93:0a:5f:a9:0e:32:18:
5c:02:cc:3c:98:61:e9:4e:0c:b7:2c:28:81:06:da:
1a:70:70:07:05:08:f8:3e:52:74:b4:c0:8f:90:b1:
3d:9f:05:2c:40:22:09:a1:08:73:e1:3a:19:17:f6:
26:20:76:c6:d1:b9:c0:31:2a:ed:01:88:b5:22:21:
89:6a:92:1a:21:8e:f5:31:16:53:80:11:05:f4:47:
65:8c:52:52:98:41:86:c4:c6:fb:29:15:59:0c:60:
12:b3:c1:6e:cf:64:59:a7:85:89:26:3c:5f:af:70:
4f:c3:58:81:04:58:b6:02:1e:71:dd:33:3e:25:50:
06:e3:09:13:a9:24:68:67:66:51:85:ff:af:1d:b4:
04:fc:36:cc:b1:c6:2f:3c:39:a5:c6:da:b6:38:dc:
3b:a2:bc:90:9a:7d:2c:27:de:2c:8d:45:f1:ce:7a:
1f:f8:11:c8:ca:5e:85:de:0c:90:98:7f:ee:40:d4:
72:f9:93:cc:27:51:c9:37:69:c5:04:90:ae:f5:9f:
11:e7:35:9a:20:6c:f4:f8:68:3f:83:7f:36:ef:71:
37:a9:a4:a8:f3:15:57:3f:02:57:05:26:07:eb:ca:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:38:7D:80:F2:3C:EA:1E:70:2A:4C:B0:E0:AB:DC:2A:41:A2:3E
X509v3 Authority Key Identifier:
keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:38:39:03:51:6b:8a:7b:ff:06:e3:c1:b6:01:eb:9e:9e:9c:
b7:fe:42:32:7a:18:54:be:ed:7c:15:6b:2b:30:40:fa:74:dd:
23:7f:68:a2:39:f0:d1:8e:59:20:75:f8:4c:8a:17:66:3a:44:
8d:e0:4a:30:3d:3c:b6:ef:27:67:3a:1a:46:e6:0f:df:6b:60:
93:b9:f9:f6:33:5d:0d:ad:11:a2:3a:bc:f1:b0:82:26:3e:94:
1f:93:e2:dd:d9:2d:e8:2a:b0:bd:ba:b3:f1:fc:5a:44:f7:e6:
0c:53:0f:8c:a7:b1:cd:b9:8d:80:23:f2:ac:e3:7b:1c:eb:b2:
2d:fa:c8:d6:a2:28:ea:4d:12:02:ce:74:c5:5b:38:de:c7:7d:
5c:66:44:26:7c:c8:ff:99:9e:5c:a5:66:a1:eb:53:75:5e:73:
59:83:e5:a8:84:45:06:0e:d7:5d:cf:e3:db:da:67:ac:92:06:
f1:55:96:20:66:6f:dd:5b:40:52:6a:b5:b2:07:d7:39:0e:be:
df:bb:8f:d2:10:66:2d:9e:5f:ce:46:34:ce:74:20:64:76:49:
9d:b8:a1:e8:bc:cd:f8:e4:71:91:36:35:c6:c5:ea:32:66:9e:
08:93:7e:0d:f8:0b:c2:1c:6b:32:a3:cd:a4:ff:c4:9c:c8:5c:
95:6f:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:50 2025 by rpki-client