Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File: EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier: AjS2LSckSn6ZW/Zozn0drhB0QqreaoBghlbK3xeOOpE=
Subject key identifier: AB:B7:7B:B0:2B:69:8A:4C:79:7B:84:E0:AB:87:D9:DE:8B:27:A9:8E
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 0194BD18004F966089B35D4D0D837B5BD611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number: 072C
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: CXI9tnHJqkXizavmClvI3mQVAYY.roa (hash: olaSQQn3cAdH7ubY4n/KDSx/8oljij//4hraa9CiDXU=)
2: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: VPb2O1DWZwRQ5dXXpLeUR5rJ5PBsS5WAgE/WaaG2lPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:00:4f:96:60:89:b3:5d:4d:0d:83:7b:5b:d6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=abb77bb02b698a4c797b84e0ab87d9de8b27a98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:b6:a9:99:b3:4a:91:b0:8a:79:6b:b3:2a:
43:6d:ca:5c:3e:d9:60:77:88:0e:12:99:12:b3:ba:
9b:d6:b9:8d:19:01:bc:cf:b1:de:61:d9:d8:28:64:
64:70:7f:58:bb:29:db:7b:e6:16:b6:a3:f1:b8:9f:
26:7e:2d:f9:bb:f2:ff:51:7d:ce:0c:78:81:06:cd:
d4:79:61:d4:7c:0b:dc:0c:11:39:0d:b0:87:e5:1c:
85:89:38:b9:99:78:3c:a6:76:96:c6:8b:8d:99:91:
cc:d6:32:d5:d8:f7:4d:ea:68:40:f0:6a:ae:83:a7:
a3:be:98:e0:0a:58:a1:33:97:1a:13:9a:62:14:39:
7b:ff:81:d7:c4:ed:d7:79:59:8b:96:fe:62:2c:9d:
52:95:6f:a3:e7:ee:78:8b:7f:eb:66:b6:d7:12:4d:
2c:64:0d:6a:2c:4e:79:7b:a8:d5:8e:9a:a1:2a:f7:
9d:cc:b1:69:29:d8:1c:e0:ab:ec:05:73:b5:e3:f2:
c0:fd:05:a4:62:9a:a6:24:a4:71:69:e3:52:2b:0d:
50:3e:d3:1b:e7:09:63:b1:c5:3d:4a:fd:69:c1:bd:
e9:6f:67:6f:a5:d7:b2:80:65:0e:8a:0f:92:7f:f5:
87:db:5b:39:d6:c8:3d:c6:6a:cf:9e:0a:a1:8c:3c:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B7:7B:B0:2B:69:8A:4C:79:7B:84:E0:AB:87:D9:DE:8B:27:A9:8E
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bb:28:39:5f:88:25:3b:dd:1b:e1:8d:bb:54:3e:39:9d:cd:
6c:a1:32:4e:ab:39:3f:a3:88:d9:d9:92:09:c2:78:29:27:d3:
b1:03:77:2c:9e:f5:e0:c1:91:e8:6e:88:96:5d:6c:1a:f6:d8:
f1:4c:dd:9e:23:af:24:f1:bd:d9:a5:93:ed:18:de:b0:d9:aa:
48:60:b2:15:91:eb:8e:3c:6e:a5:65:2f:22:10:0b:a9:51:47:
03:0a:dc:a4:1f:c2:50:51:04:fb:85:16:a9:32:c4:c3:a4:e1:
6d:b0:94:4f:99:01:41:74:c8:4e:69:c3:4e:de:94:e5:4e:7e:
9a:69:31:4d:1a:2c:74:24:26:b9:9a:43:21:8d:95:fa:16:da:
df:a7:ea:41:80:68:67:fd:43:32:ca:13:03:33:7d:34:6a:4c:
c4:2a:bb:fa:3c:a9:f0:54:19:29:55:6e:83:a6:60:7e:55:5f:
25:12:06:e2:24:33:51:9b:fe:28:c4:08:ed:67:f5:c5:e7:5e:
6a:86:c0:8e:82:24:60:4b:17:18:b3:a1:2c:74:9a:38:72:28:
1f:28:41:ff:67:28:9f:fd:58:71:fe:9a:57:8f:4c:35:8f:d4:
84:39:36:bf:e1:ac:1e:0d:da:7b:6a:58:f3:11:48:2d:e2:0b:
b5:55:e0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:39 2025 by rpki-client