Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: YchiVojlw053+SQW/Mv8M8HyKHGjcXt8ktOFtfWrK+M=
Subject key identifier: C1:D5:6A:ED:83:B2:1A:7B:C9:79:DC:04:06:5E:D6:F6:A2:72:76:53
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 0194BCA99E91614CD4CC6CBD00F70400484F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 0DF2
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=)
2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: cGcpY4s0OdrdvZ2y15R5/cH4p3tpuywzUdtufgxtSRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9e:91:61:4c:d4:cc:6c:bd:00:f7:04:00:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=c1d56aed83b21a7bc979dc04065ed6f6a2727653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:31:84:99:7d:f5:7a:2d:f8:4c:76:7d:28:
5a:d7:d6:e7:e6:b4:8a:e4:da:bf:63:d2:55:6e:ac:
f5:8c:db:63:4d:6b:b1:b4:2e:52:4f:b8:eb:37:8a:
52:ab:3e:56:1a:e1:bd:af:5f:41:e4:00:1f:15:46:
aa:9a:00:a0:64:9e:dd:35:cb:d6:7c:a4:8f:92:9d:
19:ea:46:62:0f:12:b0:3b:dc:4a:6f:cb:58:6c:b4:
a7:97:b2:4c:53:89:a9:5f:10:51:9d:cd:6b:a7:4f:
7a:0c:68:86:19:cc:8a:ba:9c:6d:70:e3:67:37:4a:
79:29:ff:f7:74:80:4e:81:dd:0d:a2:a1:77:a8:cd:
89:5e:9f:55:28:3c:44:a8:2a:64:97:39:8d:28:99:
18:32:f2:79:4c:da:34:0b:5c:14:c1:ba:dc:cb:44:
a8:6e:1d:a4:dd:22:34:6c:39:0d:df:72:c3:9d:01:
87:56:d8:c2:15:0f:f3:ea:40:c5:92:03:32:a3:95:
89:cf:eb:6c:44:5e:c4:d8:67:4f:9a:bd:25:1c:b3:
70:9c:3a:18:87:11:29:89:e0:53:f6:ae:fc:05:bc:
d1:64:01:ac:b1:2f:5f:61:29:37:7d:39:69:e0:96:
ca:99:60:94:be:d1:a0:f7:76:41:6f:1a:fe:50:64:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D5:6A:ED:83:B2:1A:7B:C9:79:DC:04:06:5E:D6:F6:A2:72:76:53
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:84:89:fc:50:3f:bc:da:69:78:4c:47:cd:da:13:59:64:d4:
22:de:2e:6c:51:fe:97:ca:a6:1c:2a:38:f5:fa:96:58:ae:f2:
db:bc:15:9c:d8:cb:81:b6:59:92:66:c8:b1:27:3e:31:62:49:
ea:4d:0a:c0:52:bb:68:bf:08:0a:b1:5c:43:eb:80:98:a9:68:
71:df:ad:2d:75:6f:a0:54:b6:24:7c:f0:42:45:29:62:a1:75:
4f:03:6d:5d:af:17:2b:c7:9e:00:53:0d:1a:bc:d8:29:95:8c:
c5:ab:06:81:95:a1:55:e3:fe:e3:fd:e0:2b:ce:7d:c3:7b:ff:
fc:00:d8:92:de:b2:9c:b0:99:ca:84:52:9d:3a:46:f1:c9:99:
24:f5:22:4b:55:36:02:0c:85:24:f6:c9:09:cf:f5:2e:8f:5c:
d9:69:3d:60:05:1f:6b:a8:00:c8:d2:4e:35:4b:29:5e:94:24:
71:be:89:2d:b1:74:0b:96:61:5f:5f:18:25:96:d8:1a:60:0b:
02:98:cc:57:56:88:16:83:b0:96:b3:c4:bb:8e:92:39:fa:1a:
13:b4:eb:14:5f:6e:3c:0f:b7:c4:af:79:ea:f9:e8:aa:2d:e5:
32:dc:fe:c6:2c:96:1d:41:b6:af:b7:d3:8c:54:2b:92:2f:a8:
8d:7b:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:13 2025 by rpki-client