Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
File: emc1t6VToWgMEa3T5Iw2NbU5eco.mft (raw, json)
Hash identifier: waXYdcnwjhgc8zDMTNGf2oyP0BG7spktmj2shJXmYKA=
Subject key identifier: CF:E0:BE:FC:5B:76:A3:04:E3:B7:88:B5:01:0D:0F:6F:64:9B:6A:2C
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial: 0194BD4E74CA6CD10A0378C5ADAC581BB8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: YwW9PmhG8M67os_ETzB_lC8b6dc.roa (hash: KXc6a/HjHbtUphkQiVnt5ftECmown2oFzOkxnqPkL0M=)
2: emc1t6VToWgMEa3T5Iw2NbU5eco.crl (hash: YFNck8Nu3tMDyc9A5TWk8noN+YVRRx/OVLRePJtWUoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:74:ca:6c:d1:0a:03:78:c5:ad:ac:58:1b:b8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=cfe0befc5b76a304e3b788b5010d0f6f649b6a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:8c:9a:32:58:73:f2:0c:81:5f:ba:a1:21:
be:34:9e:ff:59:c5:62:15:2b:f0:e2:19:27:d8:9e:
95:b9:2c:3f:2e:66:de:e8:7b:60:a0:1e:68:39:1e:
c1:ac:a8:76:55:3d:a6:e3:43:d2:b2:13:f2:b3:8a:
dd:25:b6:62:40:a3:0f:1e:de:fb:26:d6:3a:ab:dc:
b7:e8:ec:45:ad:e1:97:b7:ee:17:9a:71:65:d6:3a:
b0:92:e1:2e:f8:b0:e7:30:16:0f:92:4a:b1:5b:95:
4e:52:19:8e:81:a8:a4:81:00:08:18:c8:54:04:c6:
08:4c:03:d0:70:14:cb:67:69:f0:69:31:f1:58:30:
57:e1:6a:bf:98:6d:d8:00:f5:90:76:d0:dc:11:a0:
0d:7d:60:69:0c:ee:c4:33:9e:45:6b:88:d6:48:4a:
9e:eb:01:7a:23:df:4b:68:f8:b5:c1:b1:aa:ba:ec:
8f:2a:db:67:31:07:73:99:f7:2d:39:09:fa:1b:93:
2d:11:0b:42:65:c3:82:66:ce:6c:95:2b:d3:e0:56:
17:fb:e1:b9:52:38:93:8b:c0:2d:e7:50:a1:1a:f4:
d2:92:52:0b:1c:4f:65:25:59:9b:96:29:ee:0e:9f:
24:f5:c9:a9:fd:27:55:b6:04:48:7b:73:64:11:9c:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E0:BE:FC:5B:76:A3:04:E3:B7:88:B5:01:0D:0F:6F:64:9B:6A:2C
X509v3 Authority Key Identifier:
keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:1b:96:fe:c7:cf:bc:de:c1:1d:0e:77:af:01:50:e3:f1:
14:1d:c7:97:28:19:f1:c5:e7:39:c4:58:98:23:79:79:bd:21:
ce:2d:f8:5c:e3:18:7a:b6:b2:68:27:b3:96:ab:fa:0a:3b:69:
ea:53:df:f1:b3:bd:cd:6b:7a:08:9f:4e:be:4f:b2:c3:1c:8c:
37:c4:f3:f0:54:1a:f8:3b:f8:d6:f2:87:25:a5:97:99:dd:f5:
01:b3:ef:e3:cc:9e:ad:d0:69:65:ec:58:4b:b6:41:67:e3:b2:
61:7f:d3:7e:b0:49:3f:f4:09:03:a0:6d:9e:0b:5b:4b:67:c7:
26:5c:32:18:e2:b7:ad:34:e7:0f:41:89:04:e8:8a:91:87:1b:
9a:68:9a:4a:60:b8:6b:81:00:d7:95:6a:54:45:92:5c:ac:eb:
8a:07:b2:66:4d:e4:b8:96:1f:25:f7:c0:42:45:ac:96:d9:3e:
4f:4d:37:9b:9d:db:6f:c8:52:4f:67:b5:cc:65:0a:dd:7a:80:
1d:cb:50:71:47:07:b5:79:38:f4:38:44:e5:d8:2a:bd:8e:60:
a6:26:10:2e:67:d5:da:3a:4a:1d:f7:65:13:b4:3e:46:e4:3b:
f6:50:23:2a:b2:54:d6:a4:7e:76:b9:82:13:aa:db:39:12:b5:
54:2a:85:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:13 2025 by rpki-client