Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: IZqgJjomoUjCyT7q0oQKPTX8LZHNheSRl8I259yFA80=
Subject key identifier: AE:3E:54:48:8B:8F:44:1F:08:33:5D:48:2A:99:1A:65:87:D8:14:CC
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 0194BBCE1B711702B6E2BC0E9F8B52779736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: m3OSggBmXR0+3nvMdbpgaAeuT/3+0ebEG28THjSZE3E=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1b:71:17:02:b6:e2:bc:0e:9f:8b:52:77:97:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=ae3e54488b8f441f08335d482a991a6587d814cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:7a:84:ad:e5:53:ce:28:07:a8:be:d8:39:
4d:4b:08:6c:63:36:a1:5e:f9:9d:b4:1c:9e:1a:92:
4f:f9:b8:4f:90:d1:77:e8:30:9c:f7:32:4c:77:dc:
e8:05:67:11:74:cb:46:5b:2d:c1:b5:3c:ad:9d:8b:
95:8e:22:5b:1c:87:11:77:39:1f:ae:58:14:a8:e8:
8c:4a:55:0d:50:c7:45:53:e3:e4:68:bf:d8:94:0f:
bf:9b:32:5d:d4:48:b1:4a:5b:19:f1:fb:5d:5b:b7:
b8:67:55:d8:33:55:65:5b:8d:ae:de:91:f3:76:54:
db:64:f8:e2:b3:73:bb:dd:27:87:1e:68:72:f2:4c:
05:7d:95:8a:fc:93:fa:08:53:3f:ff:6a:e8:15:35:
7b:8f:5c:5b:71:25:09:9b:ce:ab:b1:e5:13:33:94:
9e:ea:71:29:d9:49:bd:64:57:29:71:53:aa:e8:9c:
ab:bf:1e:7a:7b:cb:a3:43:3c:a7:75:7e:76:68:d9:
97:75:2e:f5:eb:3b:da:ad:c0:7e:08:d1:8a:b1:bc:
e0:83:42:0f:e5:01:34:b1:a3:7e:37:d8:19:b7:f6:
71:a1:bc:34:20:94:d4:a4:fd:21:d2:8f:aa:15:65:
48:d1:3e:aa:32:b2:45:3d:87:42:65:b7:1a:e7:43:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3E:54:48:8B:8F:44:1F:08:33:5D:48:2A:99:1A:65:87:D8:14:CC
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:53:b9:d4:4e:95:ea:29:68:19:8f:54:fa:6e:30:0b:6e:
61:17:39:19:3a:f8:d0:e1:9b:42:3b:3d:c7:36:c0:0d:84:2f:
78:13:7e:0c:e2:ae:85:19:9c:06:5c:91:3c:45:b6:53:a6:f9:
1f:74:77:f2:a8:66:2d:f4:cd:1f:d2:5d:58:38:2d:96:c3:b2:
b6:de:59:5f:6a:ee:c3:93:d6:16:cc:a2:fd:81:3b:b4:bd:7f:
ea:c7:50:60:f4:6e:7f:88:b8:16:59:86:8b:a2:7d:45:3a:37:
bf:fe:e1:12:d4:5e:29:67:ff:81:4b:74:79:06:a9:ef:be:08:
eb:36:85:d0:a8:dc:c7:6a:cb:ec:ca:b2:6f:17:98:eb:8a:48:
32:cc:e3:30:41:18:fa:99:fd:18:16:f5:39:45:ce:25:7c:1e:
9f:48:1f:2d:41:4d:80:bd:39:fe:f8:a9:5a:f9:07:ed:88:b6:
f0:ce:07:5e:30:2f:f3:70:9f:e6:a4:cf:4d:72:de:e5:c2:61:
c0:78:d3:06:95:ba:b4:e2:12:ff:4e:e2:2d:f5:99:df:67:3e:
7f:19:19:46:71:8d:7f:48:10:8a:8d:32:3a:aa:82:8b:26:fc:
9d:dc:0e:d6:f0:ca:3b:12:ea:9c:bb:29:97:70:68:d0:8b:b1:
39:b6:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:30 2025 by rpki-client