Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
File: EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft (raw, json)
Hash identifier: ZmHxpXwwv4o1o/EKjyDvKiCCAOt3EcJ44RjUZRk0IKE=
Subject key identifier: 00:9A:A8:B5:A7:62:90:EF:E2:99:32:A4:C4:2C:65:5C:91:93:65:7F
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 0194BC04E6BDA56C09DF01FC29A14B0CC580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl (hash: mVa/7KAkv7jEvBJ15gQRs2toGd1ljMv8RxEevlc6FMk=)
2: KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa (hash: dw0fO1xhc9eufYQ0WpteBCztc0/BFVhz2enclISvMos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e6:bd:a5:6c:09:df:01:fc:29:a1:4b:0c:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=009aa8b5a76290efe29932a4c42c655c9193657f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:08:98:5b:b4:3c:39:71:2c:00:9a:a6:f6:
98:60:0b:0d:0a:6f:c7:54:fa:a8:9a:dd:cb:e5:b0:
71:e8:b5:0c:0e:48:67:a8:59:81:59:d8:34:91:cd:
35:1a:09:c9:74:b2:aa:1d:a7:aa:8f:59:e4:9e:f0:
3a:cf:56:69:ac:5a:26:d9:13:7f:b4:06:72:ed:33:
55:de:16:56:6d:43:8e:59:6d:a6:f9:83:ac:96:ba:
21:5f:dc:f2:6f:a5:52:4e:a8:ac:08:45:69:7b:77:
ee:17:fd:6a:73:55:60:54:9c:18:37:62:87:6b:11:
32:9f:e9:cf:56:3b:29:f2:99:2e:9c:28:8b:4e:db:
05:5e:3b:27:5b:c4:64:52:77:9d:ee:4e:0a:89:b3:
d2:32:e5:57:84:f7:5d:af:de:2c:1c:49:fa:79:09:
95:59:ed:5e:fc:ca:be:cb:3f:8d:26:8d:1b:2c:87:
9b:a4:95:81:18:27:d4:eb:9e:c0:27:a7:96:36:e6:
36:79:fc:2d:f4:3b:fc:ea:30:bf:11:93:26:f9:4c:
59:b1:ba:b0:2b:6b:ba:ed:b4:d8:75:f7:38:17:06:
94:65:9f:be:cf:5a:0a:13:2c:79:f2:25:96:06:df:
07:ad:1a:6e:ac:a8:00:40:35:12:0d:3d:c8:bf:4d:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:A8:B5:A7:62:90:EF:E2:99:32:A4:C4:2C:65:5C:91:93:65:7F
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:88:ab:b2:3c:45:c0:b0:68:92:c7:e3:ee:3d:ca:8b:c2:a0:
e7:15:e9:e4:54:3e:01:66:69:f4:aa:26:c3:f2:e3:56:48:35:
b0:ab:0f:02:44:44:0b:c9:05:86:b1:07:97:ed:1f:b3:24:5d:
be:8d:37:a5:06:e4:65:6f:d0:bf:d1:b0:e7:d2:aa:39:10:d9:
f3:1e:15:05:a4:24:65:33:2e:38:44:88:9c:46:e7:0c:0d:ac:
96:5b:e0:31:c4:42:59:92:f7:e7:1a:7e:80:01:22:77:be:ac:
a0:53:af:04:1a:c2:af:e5:da:62:c4:f6:c4:b4:2e:4a:71:5b:
b7:f9:bc:00:49:71:b6:b0:cc:d9:2f:fa:4f:fc:2c:40:f7:ec:
c7:bb:6c:9c:75:b9:c3:ca:fe:da:19:af:7c:0a:ef:12:ef:68:
cc:c1:e1:23:26:45:7b:a0:0e:81:c4:00:6d:7a:b1:2c:1f:f5:
e7:b6:c3:6b:f7:e1:d7:7b:29:9b:d1:f3:45:9e:71:7e:7b:e9:
c2:44:49:e0:8b:57:a8:f8:f1:84:2d:0c:11:c8:07:7e:09:5d:
01:40:9b:66:b2:05:1b:47:cd:69:db:9e:f4:74:5a:19:36:a0:
aa:cb:42:0c:3c:0b:1d:4f:b6:64:6e:a4:67:ed:97:68:55:6c:
e2:b8:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:42 2025 by rpki-client