
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
File: eN7biYi8i7Gl-eVfQXJrZURsJew.mft (raw, json)
Hash identifier: 0d1bRY7PWj0hUs1xO2ul5bxRrBSSAFRo9OIGEXCj9Gk=
Subject key identifier: 54:C3:3E:EC:A1:D2:5A:92:7D:C9:3E:F2:4D:A5:AF:1A:22:0D:C1:27
Authority key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
Certificate issuer: /CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Certificate serial: 0194BCA99B603C0A63DCA663D433A4D8980F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
Manifest number: 0BA4
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 4Fu6FN-8k4OplfwUDllrEVsayHs.roa (hash: qUKP8ZgE6fag+umLTQiKLSLQSA6JYp73xHBNizQefag=)
2: eN7biYi8i7Gl-eVfQXJrZURsJew.crl (hash: fnPjw+TTcLK5urCEIvcQ/IoOOB/wdmhFLP/NPFFqa7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9b:60:3c:0a:63:dc:a6:63:d4:33:a4:d8:98:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=54c33eeca1d25a927dc93ef24da5af1a220dc127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:5c:fb:1d:98:6f:1d:81:15:1e:87:6d:14:
b7:70:16:93:eb:fd:61:e0:55:98:5d:43:e2:94:ff:
31:df:8a:dd:8e:9d:96:f1:ea:b5:ef:b8:10:b3:7f:
9f:01:20:ce:7c:24:64:b9:fa:57:02:73:e3:20:72:
ed:ee:44:16:b9:fa:4a:60:14:0e:79:a1:b2:e6:a8:
1f:e1:b6:0d:10:76:69:8e:7e:5b:43:8f:e7:cc:ec:
d9:3c:71:7e:fd:11:69:20:9f:c3:01:26:4b:74:e5:
50:6c:e5:21:ba:3b:3e:b1:c4:a1:c7:bf:1a:e2:fc:
03:15:02:b5:c4:b0:31:db:09:84:62:26:4d:0c:73:
c3:cc:5f:b3:c8:5a:ba:7f:6d:3f:20:6d:99:28:dc:
15:08:c2:fb:b5:d9:54:15:41:17:bb:ff:a3:7f:9f:
45:d0:89:52:30:5f:25:cb:bc:37:65:e1:74:b0:64:
f2:1c:fd:0f:05:e4:e6:00:c1:2b:b5:56:ac:c5:e9:
9d:aa:b2:83:9e:b3:14:16:4e:22:95:6a:23:b6:39:
af:91:74:38:fa:60:4e:78:4f:50:b4:e1:75:6b:b8:
76:37:a4:a1:11:2f:8d:f5:a4:a0:10:8b:e3:71:64:
99:91:6c:8a:e6:0a:35:ea:0e:cf:7c:fa:09:6f:65:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C3:3E:EC:A1:D2:5A:92:7D:C9:3E:F2:4D:A5:AF:1A:22:0D:C1:27
X509v3 Authority Key Identifier:
keyid:78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1a:0a:86:95:1b:b9:f0:23:8f:6f:dc:c8:d1:0a:5a:1e:9f:
2f:97:37:48:90:1e:ec:f6:de:b5:4a:62:1d:fa:8b:7a:4b:8b:
1c:a0:56:10:c2:c2:cf:12:ac:7c:eb:38:d8:15:cc:43:20:2d:
75:ff:04:3e:dc:7b:f3:12:09:8b:9f:7a:08:19:c3:11:16:4f:
2b:fc:99:55:9b:7a:7c:37:07:f6:27:95:41:84:e2:b9:3e:32:
49:b2:30:91:5a:ae:dd:fc:b1:a6:a6:ae:81:29:d6:a4:95:2b:
44:f7:cb:71:b4:f4:07:9e:6d:88:f4:ab:6f:a5:ca:05:43:88:
20:b5:b4:fc:66:e4:2b:4b:44:f9:bd:01:11:f9:b8:6c:14:23:
af:81:a7:cd:fc:b0:71:c3:f1:3c:a5:28:7f:d6:11:a1:db:cb:
4b:c3:c9:1f:f6:2d:b4:30:d1:81:30:2f:6a:a6:d2:9a:ef:db:
ec:75:68:a3:72:1a:70:87:db:08:1e:0a:01:a2:f1:7d:d1:21:
c0:ce:52:cc:fa:47:8f:ab:f2:49:6a:29:02:ef:4c:bb:48:47:
98:10:4a:89:05:94:1a:a0:cd:99:00:5a:c0:d4:d5:a8:88:79:
7c:c4:bb:ee:ec:da:ec:ea:0f:14:6b:cf:ce:f1:4d:21:12:2e:
62:c9:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:18 2025 by rpki-client