Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: YZPSTlcmPVIKBEeaHsqZNIJpa+axQIVLGG0RkC+4E4s=
Subject key identifier: 84:D3:B6:4B:8D:19:68:A1:53:95:69:61:B6:46:9A:AE:69:9F:7F:50
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 0194BC04DE88BEA0DF9098EB1F9230C9AF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1050
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: 6oXYRwzmAo+Yd+NEAZtfWxJ45xXDXkDq7E+Vf5L2GP4=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:de:88:be:a0:df:90:98:eb:1f:92:30:c9:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=84d3b64b8d1968a153956961b6469aae699f7f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:4c:c9:05:2a:25:48:0a:4a:4d:d2:ed:9c:
db:ff:74:fc:e1:a8:bb:8c:67:3d:ad:12:10:90:92:
42:10:b5:9e:74:9b:67:44:e9:95:65:b1:21:25:f1:
6c:de:3b:23:8e:24:93:63:63:05:73:d6:64:18:db:
65:66:5b:72:02:a6:ad:8f:79:3c:de:04:b1:89:a9:
e7:67:95:f0:4a:7f:50:6a:2a:9b:d7:e0:a2:5f:e1:
ae:bd:05:de:fd:24:6a:06:39:12:07:69:9a:68:ed:
22:0a:2f:a4:fb:a4:9d:78:11:fc:9a:40:71:3e:7a:
e8:59:62:27:2d:e9:c5:62:bf:fe:8f:97:83:8c:f6:
02:bd:cd:09:28:29:51:ce:31:72:51:99:42:d3:b0:
f2:0b:ba:60:30:46:b7:0f:22:23:e7:85:39:7e:66:
57:ca:3f:1e:b7:a4:21:e0:ca:48:d9:84:20:6c:02:
89:a3:5c:bb:89:4e:27:d9:1a:f6:04:5c:4b:6b:ec:
80:7a:47:ee:b9:df:93:03:6a:bc:14:c4:bd:0c:e5:
31:17:1a:5f:ae:25:bb:8d:da:75:ea:98:74:f5:8a:
7a:5c:8e:17:b6:cc:07:37:57:53:66:22:d3:0e:27:
de:90:e0:34:7e:a0:85:cb:02:d7:e3:ae:a0:6c:3b:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:B6:4B:8D:19:68:A1:53:95:69:61:B6:46:9A:AE:69:9F:7F:50
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:94:ea:d9:99:a5:b5:c4:17:b4:ff:ee:d4:71:06:94:3f:57:
c5:79:d8:f4:ac:90:dd:fc:6d:46:e6:0f:d4:dd:45:0b:85:0d:
c0:51:83:92:b3:56:10:5d:e6:b8:da:64:b5:4d:d5:b4:83:42:
be:cd:60:95:f8:f2:76:69:62:46:ee:3d:0b:38:7b:2f:b2:55:
be:bb:5f:ab:fa:d7:6d:f5:58:6e:9e:f6:f6:8d:27:b6:67:ef:
87:61:15:ce:c9:e5:45:81:ad:66:08:6c:16:1f:5e:2c:e1:85:
9c:9e:76:fb:62:66:02:be:c1:87:13:6f:de:51:34:5b:e9:41:
f3:2a:04:75:38:49:e5:b2:da:39:e4:3f:f9:90:66:1f:1a:98:
eb:1d:db:83:19:cd:58:3d:84:f7:95:bd:88:47:4f:73:7d:2d:
a4:ed:01:f3:cb:9d:c9:f3:7a:5a:95:b7:1c:27:77:35:ae:88:
ca:7f:ff:a7:43:ba:c7:8d:8f:90:23:24:a5:af:e9:dc:9c:92:
11:5f:3e:bb:e8:6a:2e:08:64:3f:32:88:03:bf:00:d5:81:be:
c6:dc:e1:91:a6:a0:f9:37:44:65:87:a6:9f:9b:42:2e:52:dc:
57:bd:28:e0:3e:1f:2a:18:33:58:bb:e2:c3:b2:d1:0c:75:15:
3a:80:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:30 2025 by rpki-client