Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: 2BPoVu1N+lD0MAKaFlRdPnvTMlNYBTemlh5TRVvBYgQ=
Subject key identifier: 32:6A:2B:E3:0B:44:44:57:AF:69:40:AC:42:B1:32:2C:13:0F:C5:77
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 0194BD4E507C31684340B125916432AC0A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 78
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: wdd4TJuFdm323PJmgrJQ0JhmGIee4/lIeQjXJIBF4PE=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:50:7c:31:68:43:40:b1:25:91:64:32:ac:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=326a2be30b444457af6940ac42b1322c130fc577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:77:e4:a1:83:21:e4:50:01:e3:20:e0:19:
b1:cb:25:24:9f:0f:bd:8d:bc:a6:28:6b:36:51:bc:
a9:2c:5e:dc:ad:00:b5:88:2b:94:1f:2d:fe:d8:55:
9d:01:2e:c1:4e:9b:eb:1f:ec:ba:69:15:8d:29:bc:
73:b9:b1:71:79:df:a2:87:25:f8:33:a2:9d:cd:ef:
c1:84:53:28:88:f0:cc:70:ad:4c:92:55:d5:1d:37:
ac:cc:3b:4a:e7:76:90:f9:6a:44:01:5f:d5:76:04:
90:92:8c:fa:66:0c:39:5f:9e:3e:df:fd:8a:bf:7f:
d1:9d:14:b9:80:c9:cf:37:d7:e4:a2:c9:08:d8:e1:
4c:68:07:3d:2f:b1:74:92:52:c7:8b:37:db:b4:c9:
0e:ed:af:3a:56:fd:66:1b:43:54:35:7b:26:bb:77:
12:1b:43:e5:63:9c:e8:64:f0:20:aa:cd:03:c9:dc:
1a:22:28:31:86:4c:ad:94:cb:90:e0:c0:c1:0f:39:
5a:f1:73:93:d0:f3:2c:ec:20:51:28:fc:57:20:75:
d0:85:62:95:65:f7:17:73:11:b9:0d:9e:b1:de:4c:
51:c4:17:0f:16:bc:f9:48:b2:a7:d9:ba:0d:22:ce:
34:d3:73:ab:b6:b5:0a:5b:d2:20:0c:ff:78:18:d6:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6A:2B:E3:0B:44:44:57:AF:69:40:AC:42:B1:32:2C:13:0F:C5:77
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ec:33:a2:24:92:74:b5:bf:fe:c8:a6:35:67:7d:33:f7:14:
22:e7:c5:73:8e:97:31:89:3a:83:39:b7:51:70:17:a6:03:7e:
bf:d1:ae:fa:21:52:b5:82:2d:fb:cf:da:c2:33:46:45:5c:ef:
f1:1e:80:b3:3b:b6:63:fb:e2:4d:a3:1c:e1:e4:41:75:b7:af:
6e:59:39:9a:df:5e:bd:11:d0:78:21:ed:b5:4e:cf:4c:aa:32:
36:38:88:a0:68:20:ba:57:e8:f2:5b:2d:7d:e6:82:aa:09:cc:
47:d9:f6:24:dc:07:e7:ae:1d:51:a9:c9:f7:d0:0b:9e:f1:9f:
fd:e5:9d:cc:e9:07:cd:b8:e2:3f:22:3d:c0:a0:fe:52:80:1f:
97:9c:ed:6b:72:a8:6b:54:45:19:42:e2:34:78:1e:d4:36:48:
73:fd:83:43:06:85:5d:08:0e:ad:5b:62:90:c6:fe:26:ed:72:
cf:b9:9a:f9:66:13:9e:72:b4:3d:c6:df:fe:8e:f1:c2:fb:7d:
ef:3b:c0:04:10:3d:ee:1f:1f:84:d5:d7:b1:3e:4c:9b:ec:a7:
49:83:26:20:82:5e:4f:6a:14:a2:95:81:15:42:de:0f:86:23:
92:17:c8:f9:2e:56:7c:b2:c5:cb:4d:16:53:48:18:c5:d9:e4:
59:61:ac:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:45 2025 by rpki-client