Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File: egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier: xjXhYC+QEEouruMPrF00EuUjbLW8no22L3YNxyn/Igk=
Subject key identifier: 6E:00:81:DB:E9:F3:9E:D2:C6:44:B2:5F:FC:76:DF:A3:50:9C:1E:58
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 0194BD85A19C3D8005650F2B62041334361F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number: 0138
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: cChdW9IKygfKR2rAFYsXhx5RqmU.roa (hash: TyxqseiqVgQ1lk5s+kcYQAHiXGFHWxgFXhhbbIVGfj4=)
2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: pRIocY8+0rJcs5LaOcPP0xo/AQ8YbytEyPpUcbtAO8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a1:9c:3d:80:05:65:0f:2b:62:04:13:34:36:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=6e0081dbe9f39ed2c644b25ffc76dfa3509c1e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:39:ee:87:ca:28:af:bc:55:fa:8a:1e:8c:
06:e4:11:3c:78:64:2f:a3:4d:f3:f7:e3:59:8e:bd:
c8:4c:f9:1f:1a:60:d2:18:1b:1e:73:4b:b7:86:14:
40:bb:b9:26:88:c7:f9:92:09:e9:8a:42:d0:52:46:
34:17:ff:8e:48:84:8e:dd:f4:81:a6:41:9e:51:a1:
81:4c:fc:26:76:49:4d:5b:24:40:30:6d:e9:9b:08:
61:2a:01:ba:d9:37:75:ce:8f:6a:c0:c8:90:ce:0e:
d6:fa:f7:25:1a:d6:6d:1f:71:0f:1d:4b:46:08:d4:
49:29:0c:0c:30:a5:6b:f8:98:a2:b9:80:96:d5:49:
ae:f6:13:af:5f:be:95:79:fd:4f:a0:44:4a:b9:dc:
72:7c:a0:34:17:2f:e9:78:72:ab:1d:59:6d:41:af:
60:6d:28:21:25:d3:4d:85:2d:58:cf:16:50:d4:c1:
a5:19:69:75:c1:37:bf:5a:73:06:51:61:be:9a:cd:
9f:82:fd:f6:d4:8f:2c:d9:87:62:a1:d5:1e:52:94:
aa:28:80:40:d3:1c:da:f7:0b:de:04:27:cc:3c:69:
43:0e:73:4f:dd:9b:dc:eb:7c:4d:7e:f3:e0:a3:ce:
80:e7:44:85:03:55:ca:1a:fc:d9:d1:7e:d6:03:12:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:81:DB:E9:F3:9E:D2:C6:44:B2:5F:FC:76:DF:A3:50:9C:1E:58
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6c:ac:97:bd:5a:6e:bd:a9:87:e7:58:95:dc:51:15:d4:e4:
35:aa:0e:23:43:28:bd:11:7a:ce:3b:61:10:50:51:da:56:3d:
0a:28:9d:72:7d:8b:cf:30:30:c5:3d:41:56:a2:9b:a9:fc:93:
4a:53:67:b0:11:2d:99:e7:d8:f0:2f:ad:e2:56:cc:1b:60:b3:
ea:c5:0b:65:ac:ad:8c:aa:bb:83:2c:12:89:16:cb:a8:ce:f7:
8f:20:0d:a2:94:eb:64:1a:63:33:c5:da:c2:38:a2:05:6c:b1:
28:50:d4:53:e9:9d:a7:06:ef:af:cc:2c:0b:98:09:1c:99:06:
c4:43:19:67:04:20:84:3f:b7:45:e7:1f:15:74:b9:e1:d4:c9:
fc:93:b0:98:0a:9e:18:02:f7:57:b0:08:96:1f:29:e9:71:41:
40:7f:aa:01:36:c6:29:80:67:01:03:85:ac:50:6d:ce:2f:21:
e2:54:92:15:f6:77:62:18:94:37:be:69:2d:f3:c8:af:6b:fb:
c2:df:59:e8:21:c0:ad:67:59:38:92:0f:22:e1:b0:e7:00:22:
96:6a:3f:dc:30:9d:fc:71:07:04:2e:3e:e2:02:6d:00:29:e1:
d5:5f:21:a2:c5:2f:2c:3c:7b:81:34:e7:2e:01:b9:84:3f:8b:
70:a9:69:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:34 2025 by rpki-client