Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json)
Hash identifier: tSVf3qO8STjUwYxdmRaVEQoRTrfYjsrNobE5pR4+ikg=
Subject key identifier: 7B:9D:DB:7A:BC:A3:9B:68:69:40:83:37:07:35:CF:75:46:D3:79:88
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 0194BD4E99352C71F15B2C4BEE34367F550B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
Manifest number: 0A59
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=)
2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: b/sHCMbfXMfKMtm3zueTZYi6HOr0LgWPmzr13HG99e4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:35:2c:71:f1:5b:2c:4b:ee:34:36:7f:55:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=7b9ddb7abca39b68694083370735cf7546d37988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:fa:28:14:ed:bd:25:71:8d:70:d0:1c:04:
44:cb:9e:8a:66:c7:61:7f:d4:19:8a:39:8a:43:91:
28:1f:9f:54:d5:6f:03:5c:b9:a7:64:fc:59:c8:c4:
1d:aa:a3:2b:27:40:51:b8:f8:1c:c1:06:30:e7:e7:
b1:d7:03:c0:42:e2:70:fa:9a:a4:ff:1e:a2:98:68:
39:ff:73:bd:54:72:38:0d:97:9c:90:af:40:cd:41:
64:9c:b8:b3:27:8b:a2:44:75:6f:fc:74:82:95:b3:
2d:f1:c3:06:70:87:6c:34:26:22:72:68:e9:b1:e0:
7b:13:b1:f2:03:9e:d7:82:b7:07:97:e7:6a:1d:5f:
3d:10:a3:d0:b0:a4:b2:62:92:2f:d7:9d:cf:9d:26:
6a:2b:5f:98:6b:ff:99:71:c3:fb:dd:1b:a6:e8:70:
f1:e5:ff:3d:56:ff:98:51:75:f7:30:43:26:fb:3b:
89:ff:44:ba:ae:0c:40:00:55:a4:03:4e:dc:08:1f:
c5:40:56:70:24:b1:ec:f1:0c:e2:b9:c3:e2:ce:f5:
6c:99:ac:a7:04:af:2f:6d:61:cd:7a:54:29:7c:bf:
d1:83:e1:ad:67:2f:99:e4:c6:df:a3:0f:ad:f9:7d:
89:2f:37:5b:17:ee:78:05:f1:17:a8:a7:76:15:25:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:DB:7A:BC:A3:9B:68:69:40:83:37:07:35:CF:75:46:D3:79:88
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e4:93:da:5c:83:26:44:9c:ae:9b:92:a4:e0:3e:b3:b3:13:
26:3d:3b:14:3f:8e:3c:3c:7b:01:bb:07:13:b3:c2:ba:a2:40:
43:ac:f9:cf:31:e5:20:98:78:ab:5d:2d:d7:8b:01:d7:e7:e2:
5e:d4:54:1d:0a:26:24:f2:a1:9f:6c:f4:89:a3:39:76:d2:d5:
5b:34:71:41:22:53:13:77:c3:ec:1d:3d:5c:9b:ae:90:38:d1:
95:76:d7:ff:e8:27:47:cc:c2:19:da:53:5c:99:fc:a7:f0:81:
26:77:5d:9b:ec:44:7a:be:f0:9c:6a:5c:64:8b:99:c8:f1:22:
56:aa:40:ad:93:77:74:0f:75:33:06:17:56:c6:f3:1b:1d:a6:
a6:95:a7:5e:eb:ee:f2:19:5c:38:d3:58:67:fe:ed:ff:38:ac:
d8:52:c1:55:1c:90:03:11:cd:a0:9e:03:82:6a:97:73:ad:b4:
82:61:49:f3:45:3a:8d:ad:59:63:00:d6:e2:76:10:2a:fe:45:
8e:d4:34:85:4a:13:da:1a:ff:d3:09:85:5f:72:79:fd:56:18:
30:96:6b:3a:42:28:1f:05:d4:3b:92:0d:5d:f9:c3:75:d8:9e:
03:53:f4:88:83:d5:39:bb:69:d2:26:79:8f:ab:fe:d9:5b:c4:
16:c3:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:48 2025 by rpki-client