Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: +aefGMHCW1ByelObiY34Rsv4KIu5M2RxmGBWb2LlUWk=
Subject key identifier: 4F:A6:75:17:42:4D:49:C7:D9:7D:33:E8:2D:51:29:80:68:87:10:40
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 0194BCAA325E3D6E0958B3A48C208CA09E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: uKCV7L6SsLAreP8bC6LDQzV0u1D5NjYri6+zf7v/Vac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:32:5e:3d:6e:09:58:b3:a4:8c:20:8c:a0:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=4fa67517424d49c7d97d33e82d51298068871040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:f5:5c:9f:7f:15:f6:fe:a7:e4:48:da:b9:
08:81:6a:2e:4a:69:c0:6e:57:eb:c1:00:fe:14:ac:
54:2c:b6:53:f2:bd:fb:6c:1c:0c:43:9f:04:46:e9:
8c:5e:0a:3b:01:d8:08:78:4d:31:e4:1b:9f:c0:29:
15:43:40:2d:93:63:a8:33:e3:2c:fa:e0:86:32:25:
31:ce:9f:b5:c8:39:c7:0e:e6:47:ba:d0:04:af:77:
7b:7e:28:a5:5f:50:a5:e5:fd:2f:f8:38:22:34:fb:
87:b7:53:db:07:46:01:19:cf:35:bf:e5:ce:46:9c:
55:11:e2:b9:cf:bd:25:91:23:3a:83:b2:7a:99:71:
b6:7e:7b:3c:6f:19:89:e5:c6:53:98:c3:1e:0e:c5:
be:06:2e:ca:a7:45:c0:65:e2:5c:22:d2:d5:6c:6c:
7a:d9:b7:d5:9e:fb:67:32:ff:97:ef:8f:04:bc:b2:
6d:c5:61:e4:22:7f:db:d3:98:23:57:ef:f2:89:d0:
25:fb:5e:c8:ff:5d:dd:c0:c9:78:6e:e1:dd:f3:8a:
f3:ce:47:9e:d6:32:d2:c4:b8:db:48:cf:ad:9c:52:
60:d2:11:f4:a0:b3:91:bb:dc:7d:6f:22:cb:65:db:
a0:ba:21:88:ff:09:a7:4c:68:26:ba:d1:f9:6f:6b:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A6:75:17:42:4D:49:C7:D9:7D:33:E8:2D:51:29:80:68:87:10:40
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:19:08:c1:fe:74:38:d1:43:0f:31:df:70:51:42:51:96:09:
e9:d1:d4:d8:d9:fe:9a:c0:36:90:6d:c0:83:68:78:9e:35:1a:
ae:43:21:9d:c8:80:a9:ed:f7:bc:b2:9f:83:8d:ab:10:3d:c3:
58:03:5a:77:81:01:6a:ae:19:51:64:18:f1:ae:50:9d:79:24:
b8:03:a3:2d:4c:7b:1b:c2:7b:85:6c:6e:64:f2:cb:f3:d9:63:
d1:f1:b1:69:7a:6e:3b:a7:d3:d8:7a:3e:d7:1d:7d:55:32:00:
32:cf:91:73:20:3c:41:0f:3a:55:1e:75:0c:c6:c3:26:af:73:
b9:69:03:61:19:2e:70:90:7d:26:bd:73:a0:44:ee:72:b7:cb:
e5:99:b1:ca:25:8e:cc:af:12:92:ca:c2:75:f0:55:1f:34:3b:
da:c4:2d:44:8d:82:68:5f:b5:cb:d1:27:20:83:49:8a:5c:31:
5a:d3:a6:83:24:2c:89:9e:d4:f4:52:b8:9b:16:57:be:45:ff:
8e:98:e8:0a:59:30:0b:7f:b5:dc:52:44:69:1c:ab:8d:5d:01:
54:fc:47:44:5d:9c:b9:10:05:6a:7b:50:de:cd:4d:57:da:e6:
da:a1:09:af:07:ca:d6:07:9d:c8:f4:60:a5:0f:d6:95:81:b0:
5e:7a:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:14 2025 by rpki-client