Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: qD9K3wbnvrBovVnwjOceZ/XnfmEKGhu5KflgsVJq/+Y=
Subject key identifier: D1:74:4F:01:30:90:91:59:4C:83:7B:AD:FE:B1:D8:2A:B0:96:66:82
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 0194BD4EC12B7335B5E67B5DEC95E787CDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 044B
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: 4VrpxoKtKjcecOyBQWWwD+zyYic0MzfRQDzmXh/eYXA=)
2: ipF9E24heTTHKXSVvskKJfklFf0.roa (hash: 7F5wbYoOgCCkCtg8OSspdrjSA0Y3Il9u90JdksRzii8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:2b:73:35:b5:e6:7b:5d:ec:95:e7:87:cd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=d1744f01309091594c837badfeb1d82ab0966682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:74:db:12:c6:70:56:4c:5a:7f:c9:9d:c6:
69:91:45:72:79:0e:7c:df:68:33:78:10:ab:fc:98:
1a:05:be:4f:8c:87:73:a5:2c:20:4e:31:bf:c1:f1:
15:c7:25:76:2f:4e:81:0b:2a:cf:ac:72:f1:89:52:
cb:91:96:b1:04:80:0a:93:f7:8b:0b:da:d4:cc:ed:
3e:f3:c0:71:4b:4a:d6:aa:06:fe:ab:ec:34:14:70:
36:26:d3:51:e8:f0:04:22:b8:20:c6:0e:41:27:4c:
8e:27:90:47:65:b7:82:7b:47:68:80:ff:b4:43:b1:
bb:7a:68:03:45:c8:9a:e4:8b:a8:13:07:a3:77:37:
e3:75:cd:a6:b7:f6:7c:bc:e9:90:9e:92:8b:b9:c3:
7b:a7:70:a1:44:ca:d8:37:6e:f4:55:8f:30:7b:d9:
36:db:d4:c0:59:40:50:ea:ca:ef:f0:2f:71:f6:b1:
b3:7d:1e:a5:85:9e:be:0f:03:d4:f2:43:33:99:86:
46:8b:1e:b7:57:c8:46:ba:dd:23:fb:ee:1e:b9:ad:
f9:60:7d:69:63:f4:84:bb:3d:27:af:db:11:5f:35:
d4:57:a5:6a:c0:92:1b:f6:d8:14:dc:f1:f5:e4:a8:
48:87:90:b5:77:08:57:b1:24:8a:09:f1:9f:cf:02:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:4F:01:30:90:91:59:4C:83:7B:AD:FE:B1:D8:2A:B0:96:66:82
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0d:7b:84:56:ca:c1:6c:39:0b:bc:4c:97:38:a5:c2:f1:00:
e4:45:e0:c2:67:ff:44:0b:07:fd:e8:30:da:c1:06:9c:14:2b:
73:b4:81:07:10:2f:af:cc:43:ed:69:78:8c:be:a5:a8:ba:ed:
b9:54:4a:54:67:31:29:50:f9:e8:ba:49:17:21:84:5d:94:c4:
e0:3e:a8:de:f2:38:8b:1b:ed:c5:13:7b:a8:c0:ac:27:9a:1a:
66:76:ca:c1:fb:51:fc:46:f4:48:b0:1c:7a:40:ec:fd:e1:47:
6c:48:8e:47:34:fe:63:f1:c0:05:74:1e:79:d9:7f:ed:75:d1:
44:bc:4d:53:b7:88:14:41:97:74:54:d7:5f:4d:db:2e:cd:8f:
29:03:e2:ab:5d:c6:2f:44:8d:d1:14:80:67:db:33:5c:89:66:
8d:f0:db:0f:e8:ab:d0:86:ba:7a:87:27:83:df:17:db:04:b2:
ba:83:38:c3:72:02:bc:08:b2:1b:03:33:a0:e5:e9:83:25:0f:
6a:02:44:c1:31:bb:08:9f:3e:54:65:32:e0:71:aa:1f:21:49:
99:38:f1:27:43:37:1f:f3:f9:ca:7a:ec:23:d6:d9:11:61:55:
7a:58:5d:16:06:2d:1e:6f:5e:04:12:84:2f:78:82:be:be:d4:
39:ec:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:40 2025 by rpki-client