Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: 9+VasiApIKcEfqcVV0bRzxCejhlmhUVq1DI6ks7N2d8=
Subject key identifier: BE:40:1E:6E:C3:C6:01:3A:FA:FA:1B:D4:C4:61:39:14:D4:EA:B7:67
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 0194BCAA087114FA9FE32908F0DFB22E1294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: dkbzLRQ65Gd3tDtGt18Qs4NEdFadZ3HJVMSM8G7ZWic=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:08:71:14:fa:9f:e3:29:08:f0:df:b2:2e:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=be401e6ec3c6013afafa1bd4c4613914d4eab767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:3a:65:55:24:5a:ae:b2:cf:d2:53:f5:c3:
70:77:72:9d:8b:05:de:79:7b:30:13:fd:81:3c:bc:
45:99:4a:67:e6:10:e0:5c:28:6e:3d:c1:53:68:06:
33:06:8f:00:c7:33:92:58:dc:e4:6b:09:16:d6:d0:
bb:32:c1:c9:fe:2f:95:9b:b6:64:b6:7e:e3:a4:2d:
6e:1f:2c:bc:79:ab:1a:65:70:08:95:35:b3:fd:6d:
d9:83:79:5b:a7:a9:e0:3f:09:d3:20:81:61:f1:29:
be:c7:5e:7a:fa:fb:89:f3:0f:88:70:ff:97:69:31:
62:9e:ce:05:43:68:a4:1d:cc:f1:54:be:3d:f7:1c:
54:aa:c1:d7:d6:5b:48:0c:4c:34:e9:51:84:08:c0:
38:b7:e2:56:55:40:e6:e8:61:f6:36:b3:99:e1:55:
a5:bd:e2:57:6d:dc:97:81:a9:5b:c4:8e:df:6d:3f:
82:15:31:c3:9d:59:f6:04:c4:fe:74:ae:e2:34:ab:
d6:8b:29:a7:1b:35:dc:23:4f:1c:b7:09:07:20:1e:
65:59:98:25:b7:34:3c:32:ee:f6:d9:ea:b8:09:86:
08:91:e5:86:83:2b:31:a8:8b:63:61:b9:9c:d1:20:
ca:69:7f:c0:97:d5:d0:fe:3c:20:2d:d2:fe:d1:4a:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:40:1E:6E:C3:C6:01:3A:FA:FA:1B:D4:C4:61:39:14:D4:EA:B7:67
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:16:49:7e:15:7e:97:ae:9e:cd:79:be:95:eb:76:11:6b:ed:
d7:e1:cc:47:b5:d2:c5:9e:27:62:cb:56:09:85:19:f0:fc:63:
d1:f1:c2:19:c1:03:02:0f:6e:96:12:49:b7:00:52:c9:90:59:
c0:89:ad:63:e9:29:67:25:67:b2:5a:ed:ee:67:a0:c7:98:9f:
03:50:60:7d:03:c5:80:df:e9:55:a7:04:13:bb:83:6b:3e:92:
d9:4b:8e:11:d5:75:e9:07:4e:e8:80:c1:83:d1:3e:8f:b0:90:
28:43:c9:9e:cf:91:9e:63:7d:11:9a:84:9c:92:9c:43:e2:e8:
1c:ee:62:dc:71:54:56:e4:6e:10:21:a0:84:53:9b:77:63:6f:
49:a4:5a:0b:cb:22:5f:10:df:de:16:4d:45:d3:bd:a4:e8:27:
96:10:5c:f9:a2:f8:47:5d:eb:81:05:bd:04:c4:1d:d3:ae:bf:
b2:d7:b9:6f:68:d3:c8:f7:50:5a:3a:a3:25:6e:fc:cf:ac:52:
f2:4a:dd:79:0f:bc:09:b4:8e:48:e7:ce:c4:e2:b4:55:32:6b:
08:3b:b8:63:ff:84:a8:fe:68:3f:05:18:ed:6d:8b:09:6a:6c:
c4:76:b7:cb:32:11:00:02:f1:0b:0d:ab:3a:0a:57:b4:a2:24:
4e:a9:8e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:02 2025 by rpki-client