Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: LCBkf5hZtJDlokpvByyScasex2KGPF1M2qaaBx6jhR0=
Subject key identifier: D0:4D:EA:1D:11:D5:85:1C:DA:D4:00:B9:6D:8E:E5:4C:6D:BA:3B:50
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 0194BD85461DC0148FE9C22530B2664D6BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0639
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 5cdSX-zrncWspL0K6fL133Q3uNs.roa (hash: RtUr90lsO7bvirIbH36Twsg4zf98Kyt3Rbxenxpq4mM=)
2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: nqqDdn/qEsqMAimo4gsIRnN4QQZQlWsWNEa+5vuRbNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:46:1d:c0:14:8f:e9:c2:25:30:b2:66:4d:6b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=d04dea1d11d5851cdad400b96d8ee54c6dba3b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:b9:4f:82:8c:b0:ea:3a:65:e1:5f:1b:21:
be:21:a6:03:36:17:10:a0:1e:cb:a4:eb:f1:c4:03:
6a:40:4d:bd:43:57:9e:df:24:a6:ea:23:3c:c7:77:
56:49:97:55:c2:d9:0d:e6:76:d7:f8:5b:69:e8:e7:
ed:04:c2:cb:24:b6:25:18:9f:36:33:73:a5:10:8c:
30:31:61:3d:d8:cc:8f:d9:56:dd:79:49:57:58:e3:
2e:7a:23:76:e8:f3:e1:d1:95:ff:47:e2:ed:d7:2b:
2f:f6:95:04:98:c6:eb:4e:b4:35:34:cc:af:e9:9e:
f2:37:75:8e:d0:e9:58:77:3d:d8:f0:dc:46:21:9e:
1b:ea:53:49:9a:93:18:7d:52:78:0f:39:74:03:29:
c6:63:39:f5:90:21:e1:a7:bf:7f:7e:4a:0b:ff:4a:
71:6e:93:30:6e:68:d6:36:d1:33:4a:89:25:dd:ae:
da:67:22:39:9e:eb:f2:53:ae:0a:3c:cf:83:5c:18:
d5:5a:92:49:2b:0c:a0:df:50:bb:cb:13:a3:cb:6a:
48:40:96:30:80:cb:d4:16:87:05:f0:e3:d3:59:1a:
e0:21:97:70:bc:f2:d2:13:04:0d:44:27:f9:9c:29:
51:57:d7:cc:b2:1f:15:1f:71:50:21:5b:8d:85:9b:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4D:EA:1D:11:D5:85:1C:DA:D4:00:B9:6D:8E:E5:4C:6D:BA:3B:50
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:93:9e:33:d1:6d:35:6b:c7:4b:43:ed:33:e0:96:c8:08:64:
9a:97:68:2e:f1:4e:70:15:a0:46:12:a5:ce:be:ab:81:9b:6f:
6d:0a:92:c0:8c:0b:aa:64:a1:28:f1:4a:67:ca:8e:21:bd:c5:
fd:4d:d1:fa:23:2e:2b:29:8f:70:ca:ad:0b:26:24:fa:e7:8c:
4d:9c:85:c7:1c:71:59:5a:73:93:fc:86:5b:63:49:7b:57:e3:
2f:f4:3f:0d:2d:a5:5d:05:7c:41:39:5c:31:e7:aa:ee:0a:1c:
db:30:a7:36:34:7a:e0:93:8c:79:db:ad:fe:d1:ae:bd:60:14:
9e:c2:3b:48:99:73:28:bf:dd:17:92:d1:da:24:db:ce:47:74:
1b:7d:4e:2e:9b:7b:2f:70:21:ab:e7:de:fe:13:2d:03:a6:03:
de:ea:d2:02:06:37:66:16:a9:ba:83:00:ab:a2:9a:39:de:2a:
50:99:20:84:e5:9c:bb:7f:f2:34:3f:a0:4d:ea:a8:de:b5:63:
46:46:8d:55:d5:7f:13:87:f8:18:fd:4a:61:5b:d5:3f:ac:0f:
35:1a:3c:02:9c:b9:cf:8a:3b:31:2c:c7:dd:50:78:e6:a2:ea:
4e:e4:f9:84:6e:eb:27:45:89:72:26:3f:64:9c:dd:6c:c4:ec:
87:10:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:47 2025 by rpki-client