Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
File: ehDuIoBzMoosIIHLsqls0SZNvvE.mft (raw, json)
Hash identifier: cKGKmMwmGOTYxQBZAry/D12M0Fhn3GqVZwCRyOpvnPk=
Subject key identifier: A3:DC:9E:4D:64:05:B8:FA:98:16:FB:C4:40:7B:52:A7:A3:95:9E:6C
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Certificate issuer: /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial: 0194BCE0D037B508EF0C43BE2DAF19A61297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
Manifest number: 0413
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: 9SFdi7V4q-05lNgfIa-K_CLlxc0.roa (hash: Kxe5R+STpor8dRXj7m0AfgFUBqqAzp8M8cMC2zERYAE=)
2: YOoATeftAqa3NPiX4GaHabwS1wo.roa (hash: DFj5QH8pLrMMR4sLFXByWiOjYdjY2qX4JxhZH4EeUc8=)
3: ehDuIoBzMoosIIHLsqls0SZNvvE.crl (hash: DfLtIsoWRLcKu/I25nepN0oSyQNms4tdLjgIf/rvcCQ=)
4: iId92xKtiFHP1gLGCJzcRznJ-x8.roa (hash: K/cBgrLnI3n5D0y566D4mvg3caFRpTqECvwpfj65k50=)
5: nGtIZ1A0r3xiykXpIIhUDVqM2rM.roa (hash: GlsG6Os9dw7nPxzZGJzrKgTYWqeKyXt9Ngu3pmbbKe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d0:37:b5:08:ef:0c:43:be:2d:af:19:a6:12:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=a3dc9e4d6405b8fa9816fbc4407b52a7a3959e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:aa:27:f8:a8:45:cb:e9:55:b5:4a:65:8e:
f9:77:b6:d0:9d:81:93:f5:7c:85:9b:ae:c7:50:39:
de:97:b3:6f:f5:c7:e1:64:eb:5f:2e:fe:a6:77:22:
ab:25:67:1b:01:c0:d2:dd:8a:96:f7:6e:39:e1:61:
60:96:b5:69:ad:fc:d7:71:b4:3d:38:e6:44:a9:fa:
a0:3b:26:64:fc:25:c5:59:f7:1d:97:66:3b:f8:e1:
19:2c:fd:9b:86:5e:70:22:d0:68:f9:31:75:a9:ce:
2f:78:49:22:5c:89:60:1f:fd:ad:98:33:0b:07:77:
c2:5f:45:ee:6e:61:db:bd:b0:d5:0e:49:4e:0f:c2:
b4:bf:34:41:7a:eb:30:82:d6:7c:06:16:50:b1:60:
87:8c:99:57:bc:76:bc:49:84:c1:82:cb:92:4a:00:
77:a2:a8:63:11:ad:b9:80:70:96:4b:f5:9f:52:bd:
a9:8a:8d:af:09:67:1c:66:35:8f:25:47:e4:8e:ff:
27:44:5f:cd:a3:01:2c:6d:35:f3:37:5c:5a:e8:82:
5f:c9:9f:9b:bf:65:8e:10:ac:4f:cf:82:1b:ee:3f:
c1:91:b6:92:d9:14:cd:fb:5e:99:7d:92:fd:f2:91:
9c:6b:2a:a5:ed:a9:bb:9e:14:b6:88:47:ff:a8:a0:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DC:9E:4D:64:05:B8:FA:98:16:FB:C4:40:7B:52:A7:A3:95:9E:6C
X509v3 Authority Key Identifier:
keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:97:2b:01:18:b6:ba:a4:73:41:f9:35:a6:db:03:d7:03:6c:
33:5d:8e:e7:66:fb:66:68:d2:06:e7:c9:31:5c:45:f0:21:b6:
a2:f8:6a:3c:cc:48:dc:9b:61:29:83:89:1d:9e:af:03:13:d2:
13:f8:82:24:c1:d6:aa:c1:18:4e:e5:9b:33:80:66:dd:0c:d5:
90:19:fe:b0:83:24:ee:2d:3a:b1:c8:31:c4:6b:b3:db:21:fa:
49:23:90:0d:87:05:db:89:52:a1:4f:3e:3d:3e:29:e2:ef:31:
91:8b:d8:91:ca:d8:4a:1e:98:28:ea:df:c9:07:c8:39:53:17:
7c:bb:29:d2:cb:fd:47:fd:8f:2d:e3:f8:33:59:5c:bb:e2:ed:
4d:e7:88:e8:51:b5:ba:f7:f1:72:9f:15:54:50:da:17:fa:eb:
66:0a:41:bb:6a:bc:3a:03:e2:b7:45:37:9d:89:0b:b7:23:11:
55:15:3b:90:c3:d8:82:3d:05:58:d9:24:e0:60:7c:b1:c5:29:
da:0a:bf:44:45:74:59:8f:2a:79:d0:d9:5b:8a:34:bd:b3:05:
ab:60:4c:26:94:bf:3f:13:52:4b:55:b0:db:08:74:cd:3c:cb:
25:11:a7:46:a0:0b:47:8e:c5:e3:a4:40:ae:8d:8b:30:53:d2:
22:6a:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:10:44 2025 by rpki-client