Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier: yPuLxaELOdmxV16ABASbucUWPwthXl3QKZDQ44m56dU=
Subject key identifier: DB:BE:C9:6E:C1:FC:5E:E9:7D:1D:C2:02:76:54:7F:81:1D:30:DD:D1
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 0194BD4E5F62067248099C00FE2FBFA4ECB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number: 1447
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: JnZiRhY0wVFKBeijGP6VKJag6E5BFD31ahj/3VURbsg=)
2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
3: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
4: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
5: ibV6SVEOzYK-uCJ2IJP7n2XGoFE.roa (hash: 367ZTo8bU7FXxL+j4Dkgjzx4iuXuZnPhTMCWZPMb+Q4=)
6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:62:06:72:48:09:9c:00:fe:2f:bf:a4:ec:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=dbbec96ec1fc5ee97d1dc20276547f811d30ddd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:94:b6:a7:3b:a2:2e:6d:f3:48:fd:65:49:
39:a4:7b:c0:d5:80:63:33:87:f8:50:44:93:95:f8:
b4:ae:1c:3e:2b:8f:6b:4a:7a:9d:af:39:6b:06:bf:
94:21:47:9b:cd:8d:2a:8f:ea:c6:c3:52:e9:23:02:
b1:91:61:32:d6:78:df:4c:65:f9:2c:dc:89:d0:7b:
dc:31:65:d4:3e:11:38:da:1e:c6:1c:77:f5:33:6a:
97:96:9b:03:a6:3d:0f:e7:8c:b8:be:61:be:e6:0e:
46:c3:ce:60:ec:2a:3b:16:0c:95:e4:d8:b3:49:0d:
a4:1d:2d:92:5b:f1:02:7d:f2:7d:d7:92:5e:0f:e2:
02:3c:37:7a:bd:43:eb:93:db:27:61:6b:ed:78:37:
10:26:fd:ae:ea:91:57:ce:ed:4f:86:0f:9e:b4:4d:
82:ae:8e:a6:80:21:6b:cf:8c:db:d1:d8:cc:42:2f:
24:e2:7c:81:29:da:bc:26:85:26:a1:79:12:52:3b:
38:ea:0d:d9:d5:10:74:f4:60:4e:27:29:26:76:62:
07:0f:12:65:cc:f4:82:41:dd:da:8c:33:68:55:4f:
ec:20:53:f1:fb:e5:4d:23:fd:f4:3d:e6:84:bd:92:
20:95:e0:b6:ca:3c:c5:ac:c2:84:a8:5e:ba:5f:d1:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BE:C9:6E:C1:FC:5E:E9:7D:1D:C2:02:76:54:7F:81:1D:30:DD:D1
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6e:c5:8e:b8:4e:d8:b0:75:54:c2:e4:9f:a3:f8:d0:12:64:
29:8c:85:f6:ca:a9:59:fd:6a:b3:ec:90:f6:cc:dd:a7:b5:3e:
25:f2:ca:86:87:21:ab:7e:91:38:e5:d8:87:62:8c:b8:11:73:
24:8f:ec:68:5e:2a:90:df:75:38:3f:99:2d:01:89:2b:4d:51:
cb:d9:3c:5f:5b:ec:97:70:c7:a3:64:9a:a7:b6:59:c7:ea:b5:
35:9a:9d:b0:a4:c6:83:c2:df:41:4c:01:ce:7c:2e:f9:e2:0f:
14:0d:f1:86:fa:01:10:f2:1e:fe:b3:be:17:24:32:1f:b5:68:
f2:ec:b3:2b:32:07:58:95:0f:23:8c:09:01:78:fe:76:2a:00:
45:2d:4d:36:03:bf:ad:42:7b:30:99:db:42:38:37:13:91:82:
a4:d8:6f:7d:8a:6c:0b:49:17:09:be:49:bf:db:b2:90:32:97:
50:3f:ec:fb:19:2c:ee:e7:6e:c9:d2:79:c0:a1:71:1f:0f:02:
4c:76:85:54:d7:90:fa:ff:e2:6e:a4:4e:ce:6b:1b:e3:4c:c5:
af:b8:27:07:25:ac:e2:00:fb:a4:2b:56:74:04:58:ca:7b:30:
2e:55:e1:45:8c:f4:2f:7a:27:46:c1:c2:54:d8:0b:6d:0b:03:
2f:f9:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:58 2025 by rpki-client