Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
File: eodGp2zag2kAnSiUHvFWI5xqY6E.mft (raw, json)
Hash identifier: DQQQ4OMzeM2hQ5tK1fHD3DWFkKaiWZtT88cIqja1TnU=
Subject key identifier: E8:C8:F2:BE:BB:D8:A5:15:C2:EC:1C:AC:69:77:3B:98:16:33:FA:05
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 0194BD85A5E0C20FB87AC17EFE5615C46AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
Manifest number: 1318
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: eodGp2zag2kAnSiUHvFWI5xqY6E.crl (hash: DAR+h8wEWIuLD+MsCYKi9rUgZqUqrOn2qQIQBv5Frdw=)
2: ju6MpsCOk05edYExNfmCSGKzrRg.roa (hash: iZB9V7Ifkd73LQL+uQTxgfYU+Ifx0lrSNkJTOQL6728=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:e0:c2:0f:b8:7a:c1:7e:fe:56:15:c4:6a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=e8c8f2bebbd8a515c2ec1cac69773b981633fa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:f1:98:72:ba:f0:e0:81:c9:a0:5f:52:9f:
64:a0:02:07:0a:5a:a8:01:25:96:1f:89:68:4a:0f:
10:43:34:48:1e:39:4a:fa:2e:0b:bb:d0:e3:9b:ec:
04:d4:6c:ee:41:36:5c:29:b9:99:50:3a:99:cb:c1:
38:da:a0:46:80:32:22:6c:0a:31:d0:32:64:52:f2:
f4:84:7d:97:8c:d6:47:90:8e:ec:73:37:26:a8:cc:
73:ea:93:55:fb:e9:00:83:7d:4e:a9:1d:b9:67:01:
90:38:1a:22:d0:ba:34:ec:38:d4:d6:7b:f5:ef:f5:
76:6d:23:51:79:bc:f8:f5:32:d4:a2:16:f1:0a:bd:
b5:39:7c:81:4d:96:12:40:91:89:30:61:61:ab:70:
91:01:0d:1d:e9:59:56:e0:c3:e8:b6:6d:29:ab:41:
3b:f9:b4:20:78:da:55:b9:95:e0:9e:a5:30:21:94:
22:7c:da:4e:e4:d4:eb:16:cc:26:89:f3:25:83:4b:
6d:97:7d:50:25:27:4a:3b:68:b7:af:42:ce:41:90:
eb:a4:f7:d0:9a:d0:63:1a:4b:00:e6:cf:0e:57:ce:
24:93:7a:68:e7:01:fd:9e:7e:db:25:8b:ea:95:1b:
15:57:46:13:69:e7:b9:11:b3:d5:ee:71:23:1c:c4:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:F2:BE:BB:D8:A5:15:C2:EC:1C:AC:69:77:3B:98:16:33:FA:05
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:03:ef:a7:05:c7:16:6f:b4:b8:b8:1a:84:35:d8:d1:59:57:
13:e4:c6:a6:53:b6:37:d3:cf:4b:18:a5:c0:d5:42:6e:a8:46:
d3:71:0e:dd:a1:06:93:9c:21:23:9f:e3:16:01:18:de:9b:94:
2e:d3:8c:30:20:1e:51:c7:ac:15:48:f0:a4:8e:40:7a:4e:88:
fa:85:6d:80:8b:32:86:74:d8:b3:b8:1c:a5:2e:99:24:58:2f:
5c:ae:11:f7:42:fd:90:21:10:e7:0a:ed:e1:40:bc:2c:7a:4e:
ed:15:57:84:75:4b:12:c5:b9:8d:f2:31:64:9f:53:b2:f1:a7:
9a:62:b3:6b:54:c9:32:ea:a8:9b:42:c0:92:0e:ab:0d:78:52:
9a:fa:37:f0:01:22:ec:82:66:25:f1:52:19:14:ef:55:c9:96:
75:10:0d:66:b7:6c:ed:e0:db:5a:c8:ac:0f:ed:61:a0:8d:00:
8e:52:e2:3d:16:c3:75:b7:e7:5c:aa:bf:e8:4f:b9:e7:a5:88:
c2:63:e9:a2:86:1d:48:b4:3d:57:c1:48:f5:41:41:60:d4:6f:
13:8d:25:da:25:eb:1b:e4:34:c9:ea:13:30:b7:b0:80:8b:15:
0e:94:8a:9e:a1:b9:20:79:db:a6:18:46:86:35:af:f7:65:1e:
ed:e9:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:09 2025 by rpki-client