Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: As9wYIakqazR0UJpZmouKhUWSE/Bb8L6SP+P8+BXtyA=
Subject key identifier: 94:24:A3:BF:6F:CC:04:28:DA:32:65:3A:47:C5:A7:6A:DB:13:41:EF
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 0194BD853703EFA871AEB6F257AC89369E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: W2XQEhctk4dcB+frAZtHinw+e0eCXRQGVSL0Yz+uHzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:03:ef:a8:71:ae:b6:f2:57:ac:89:36:9e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=9424a3bf6fcc0428da32653a47c5a76adb1341ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b1:6f:7e:18:b4:d6:ce:cb:82:ea:55:0d:43:
93:9c:ad:8f:bf:78:34:32:30:60:73:e0:97:39:9e:
e2:41:7a:69:11:c8:75:ab:88:ed:fd:8d:19:9f:8b:
88:24:f3:a6:a1:3d:57:42:41:90:f2:82:0d:2b:43:
21:5c:71:0e:53:a6:25:62:59:b1:72:b8:52:05:af:
fd:ae:96:2f:d8:c1:c8:c9:a5:e7:e7:10:de:e2:f5:
56:cc:75:bf:8e:fd:7f:9e:78:ac:74:63:05:9c:4f:
f0:2f:f9:e9:64:1c:e1:74:32:78:0f:68:04:e8:34:
10:9a:3f:3b:99:17:d0:d8:72:f3:fb:6c:87:de:1b:
cf:a0:a6:08:98:35:db:58:77:91:69:90:83:2f:8d:
54:4f:dd:d2:33:2d:d4:66:92:8d:fd:cb:bd:bc:1b:
cc:17:f2:a9:71:74:bd:5a:30:7a:71:a7:50:92:2a:
0c:30:e0:0e:4b:73:f6:19:6b:30:cd:4a:b0:01:a8:
33:37:7b:69:61:dd:bc:6f:9a:f7:e4:fc:fd:a7:cd:
5f:78:29:da:40:cf:57:fd:62:b2:0a:a3:a3:1c:c1:
d0:e2:0d:4a:05:5d:05:af:13:5c:f4:54:76:21:57:
74:27:8a:29:8b:b0:0b:79:2e:07:ef:5e:08:67:63:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:A3:BF:6F:CC:04:28:DA:32:65:3A:47:C5:A7:6A:DB:13:41:EF
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:e7:cb:54:7e:dd:c7:43:91:dd:a8:2d:a6:fd:d6:a1:af:
fd:86:b4:39:c5:92:d6:bc:a9:92:d2:69:a7:70:95:17:70:49:
8a:fb:62:28:10:cf:1d:7e:2b:b5:6a:d3:af:f0:b5:db:34:53:
19:87:3a:7e:0f:19:aa:04:cd:26:38:1d:5f:7a:ff:08:9e:ce:
0d:30:a5:3c:a9:b1:dc:1a:b4:96:bc:0e:f2:04:2a:c8:59:b3:
1d:13:67:79:ad:1c:76:1b:7f:e1:7d:1e:16:4c:f0:76:ab:b2:
9e:94:86:68:73:45:22:4c:33:c2:77:be:71:c0:7f:a2:16:4a:
0c:4c:40:4c:35:8a:8b:a1:4e:75:8e:94:69:79:5d:07:0c:4f:
a8:2f:ce:d7:01:fe:c2:8f:e4:e6:9b:f4:f5:8e:c2:f3:5b:21:
20:95:ea:52:62:13:6b:54:32:c6:a2:ce:8b:ee:40:bc:eb:b8:
c0:59:48:e0:b2:5a:41:13:bc:a7:85:22:84:2c:c6:29:02:3f:
da:09:e4:5c:16:4d:44:17:6e:b2:a0:07:b4:5a:7f:19:d3:04:
8c:01:44:a9:a9:68:d7:64:90:74:07:cc:47:72:a3:9b:ed:e3:
7c:94:8c:fb:26:41:8a:74:a6:f9:36:a1:b1:9f:7f:c7:13:5d:
77:72:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:02 2025 by rpki-client