Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: i6gNl5FYETLH/mniaE1FV0G72Fis/t4FnPqsJeWg2JQ=
Subject key identifier: 2E:11:F2:07:DA:CE:3A:4F:D0:13:AD:25:0C:F8:9A:09:B0:21:BE:1B
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 0194BC3C03AC8543AF158751778398CCD9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: y0OSf+jsVIjVKUmKZBZwSJuuo6OR0spP8+ouhyjyY8k=)
2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:ac:85:43:af:15:87:51:77:83:98:cc:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=2e11f207dace3a4fd013ad250cf89a09b021be1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:4a:46:7d:ed:53:01:c6:0a:28:e3:18:fc:
b0:4f:ce:76:f5:91:b8:c8:2c:ba:85:9e:28:45:84:
ef:17:28:f1:78:7e:e9:18:45:80:37:55:c3:18:7e:
e6:34:67:9a:74:a1:db:3a:bc:8c:52:93:15:06:63:
bd:0e:29:ef:28:54:8f:5a:40:f3:2b:61:6a:7a:e5:
98:4d:be:f7:77:4a:3a:94:52:c5:98:54:f9:11:e2:
56:37:d1:d8:e6:3f:a3:67:62:81:3b:10:93:36:fe:
f0:24:17:28:31:c0:f7:94:cb:b7:df:13:0c:65:a4:
8c:03:ba:02:a0:24:ff:36:25:97:ef:6f:8e:1d:bd:
ac:52:89:bc:3b:13:07:20:31:3e:5e:da:57:d6:00:
f4:8f:cb:2d:d6:31:54:e2:4f:32:65:45:5d:ff:36:
e3:82:ec:e2:44:40:81:0f:73:75:c2:7f:43:d1:2b:
53:74:0a:d3:2c:d6:21:84:b4:49:8e:f3:15:e4:09:
0b:aa:76:f0:75:f9:51:d2:ec:a9:de:d5:15:68:ae:
07:68:9d:84:f0:3e:4c:22:a4:ff:4c:7a:59:f6:bc:
20:8a:ba:58:2e:50:7d:4b:72:8c:16:2c:1e:b8:3f:
e8:ed:e9:3d:9d:44:8a:63:74:b5:90:1b:88:db:8e:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:F2:07:DA:CE:3A:4F:D0:13:AD:25:0C:F8:9A:09:B0:21:BE:1B
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c8:46:ea:22:25:23:12:1d:dd:7c:81:03:7d:5e:c6:38:05:
ca:b3:85:e9:c6:0d:1d:db:cd:8f:c2:41:6e:9f:19:04:7d:f1:
52:27:77:ab:96:6a:70:7e:5f:9f:9d:cc:82:af:46:9a:b3:f4:
31:93:f4:72:b1:b1:2d:75:b8:1a:02:06:39:d2:8c:ec:16:29:
a4:f7:c9:b0:cc:c3:50:5c:a3:4b:74:ea:5e:43:1c:ca:fd:05:
60:3a:d9:8b:ca:13:9f:43:1a:d7:19:5f:11:c9:61:a9:c9:eb:
23:a2:28:4b:87:64:6c:66:3e:95:d2:55:a4:c7:7d:5e:74:fb:
28:32:fe:db:94:6e:e3:14:99:58:ba:bd:11:41:77:68:37:18:
5d:e6:85:bf:4e:ad:91:6e:63:2c:ab:df:74:93:c1:fd:a5:db:
16:88:d2:aa:24:b0:ad:fd:35:e5:81:d9:61:c8:58:47:cf:c3:
de:b8:b0:61:1d:dd:3c:05:db:67:52:d8:90:0b:28:a9:b4:d8:
72:1f:de:0f:31:6c:ce:8a:38:8f:b6:25:fb:a7:a4:41:8a:77:
ae:d4:d1:73:d7:a3:32:05:44:15:af:27:ee:8f:62:1f:32:08:
9e:cb:20:44:ee:86:44:8e:a6:c8:cb:91:d8:04:78:14:1f:53:
8c:b0:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:35 2025 by rpki-client