Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: xL2fiiqCd7+79G0ReOHnBVmBg2aC/BAYxOPm7CU6DGw=
Subject key identifier: 6C:CF:6D:D3:C7:AD:7A:FC:97:1C:80:F2:77:4C:E7:32:6A:34:40:AE
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 0194BC3BBCE126AF0CB9DE575E49DE9C351E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 4B
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: UaJ39ojoWo2J9cdVlPSzNFcVz9ir6CE1ayH7AqaNBoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bc:e1:26:af:0c:b9:de:57:5e:49:de:9c:35:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=6ccf6dd3c7ad7afc971c80f2774ce7326a3440ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:7e:99:17:8b:f4:53:e0:35:21:ce:bb:60:
aa:95:a3:2d:c9:a0:9b:c7:68:e2:3f:b8:dd:b6:51:
4d:87:c7:ee:f3:5c:a1:98:c7:1c:ac:a3:33:49:e1:
7a:67:98:a0:40:45:ee:3c:16:90:f5:bc:df:89:08:
c4:29:0f:73:09:82:60:f8:93:ac:12:bd:ed:eb:d6:
91:8d:2f:de:3f:21:4e:fe:2d:44:b0:e6:86:49:e6:
20:ee:d0:f2:65:b7:3d:b2:62:66:69:96:44:14:25:
e1:07:4f:5d:2b:fa:80:3e:1f:b6:0d:f5:28:43:7f:
b0:f0:88:0e:ce:73:bc:27:11:08:8d:cf:39:04:05:
44:f4:c7:4a:8b:47:6a:5f:89:b4:2e:ed:82:30:42:
1f:63:4d:9f:56:34:9e:9c:df:3a:5a:e9:d8:d4:f4:
07:c0:1b:69:94:66:2d:1f:39:7c:29:dd:75:1e:da:
67:b1:e8:63:b0:e8:94:33:77:f5:60:1e:10:9d:5a:
1e:24:98:37:c6:1d:9a:67:7e:14:bc:67:ef:6e:fa:
af:8e:64:20:49:4c:3f:1a:5b:e0:a7:3b:0a:51:57:
4d:08:e1:e9:ff:95:77:aa:69:be:b3:52:f7:7c:6d:
60:d2:97:c7:b1:ef:9a:07:1b:f8:ee:a4:1e:13:eb:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:6D:D3:C7:AD:7A:FC:97:1C:80:F2:77:4C:E7:32:6A:34:40:AE
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f2:d5:fb:19:7a:95:88:1e:22:c6:ed:e9:b1:ad:41:51:ad:
e9:14:fc:f0:fd:de:a4:25:af:04:bb:9b:d2:b1:2a:b7:8d:0b:
b6:ac:ef:b4:01:d0:96:ea:b2:c3:22:6b:9e:ed:ca:d1:9a:57:
bf:75:2f:23:27:6e:1b:cb:0c:c4:8a:5a:fd:6d:ef:c1:a4:cf:
8a:45:0d:59:94:40:e0:ba:3a:81:f9:6f:c0:c6:79:ee:0c:f1:
8c:bc:83:c8:97:d6:6e:2a:5b:71:a7:f7:45:9b:44:82:67:78:
4e:7a:2f:a4:fb:a1:e9:03:b6:2e:f0:bd:69:d6:12:e1:1c:c0:
d1:c2:f4:27:dc:d5:57:c5:59:16:43:90:e0:99:d2:e0:72:33:
1e:a2:86:fa:73:48:e9:83:22:6a:25:6e:ed:d9:1f:32:ac:07:
63:72:39:98:54:22:19:ca:d4:83:92:63:ed:12:fd:ac:bc:d7:
87:ca:90:f5:0e:15:ca:12:cb:0d:9c:48:6d:65:53:f0:83:b6:
c1:fe:9d:40:f2:04:d3:4c:95:bf:17:7b:5c:db:84:4c:5b:23:
e8:f9:1a:3a:a0:10:fc:1d:8c:85:c6:5b:ea:17:c0:e9:f2:41:
f5:0b:35:8e:e3:bf:1d:19:42:ad:7c:7a:a1:a8:9a:8c:f1:02:
d7:15:2a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:57 2025 by rpki-client