Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: 3Qr440Uy0vEdl04b3AEZ5mc1bSKZXRYiR8o4pribnN4=
Subject key identifier: 80:CC:C9:23:D4:61:C8:66:B7:82:36:C2:17:E0:24:AD:4F:ED:79:0A
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 0194BC3BD66547C49D3D684AC3F85C86977F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: xRPJWFgxaDSBkxRbKxHor6BEJXksQ27YqclpiZ5sc0o=)
2: uh0s7nQF6Ch_13wcoEBB1CrHctE.roa (hash: ALTdvaEI8Z2+A2eOLrrx34dYp9qQTeI0QMDzvRKkOhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d6:65:47:c4:9d:3d:68:4a:c3:f8:5c:86:97:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=80ccc923d461c866b78236c217e024ad4fed790a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:fe:10:52:df:95:61:56:0a:c8:bc:15:e0:
0f:1b:a2:c4:7e:bb:43:d8:64:c0:7d:cc:05:53:34:
7b:34:aa:e0:4e:76:32:67:26:36:7d:b8:3a:93:6e:
3a:6d:ce:f2:3f:79:eb:96:a8:17:83:b0:fa:7f:59:
67:8c:9e:36:22:a8:6e:55:a5:d6:39:eb:b5:d9:e7:
4b:84:47:b6:d7:53:df:ee:00:39:36:17:d6:93:09:
bc:29:6a:93:fa:33:9b:c5:90:7a:89:5d:0f:01:2a:
a9:1e:6e:5c:15:75:fa:23:64:54:63:5e:bd:25:01:
d7:49:32:73:6e:50:0c:a4:2e:aa:17:bc:bd:ee:8a:
3e:85:b9:25:45:cb:22:94:59:37:6f:89:aa:66:da:
14:91:bc:88:b4:cd:c0:d0:5b:81:b8:1a:37:3e:ed:
b5:eb:dd:45:75:61:57:20:89:98:aa:9d:69:f0:83:
f4:d0:e2:0a:2a:8d:2b:ac:1a:bd:6a:51:f5:59:14:
28:ee:e5:89:8e:eb:69:82:17:38:5b:37:5d:ec:25:
ea:f9:58:97:66:ea:e3:c9:24:30:ed:4c:2d:b4:ee:
80:a4:61:b7:30:51:67:ba:fa:82:f3:48:22:bf:49:
18:9a:e0:56:37:47:69:78:bc:45:a0:1e:1e:e2:ab:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:C9:23:D4:61:C8:66:B7:82:36:C2:17:E0:24:AD:4F:ED:79:0A
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:94:98:ef:b7:a9:eb:55:b1:21:77:e4:c0:66:2c:49:35:5f:
0d:32:dc:71:4e:5f:0c:23:d5:7a:1d:b0:df:73:de:d9:38:a4:
1a:c4:51:39:6a:3d:bd:67:ba:95:44:f1:94:ca:ff:bf:3d:4d:
7b:ff:6d:fd:86:71:45:63:46:f4:b8:96:96:8b:b5:24:61:5f:
d8:96:cf:cf:7c:93:af:a2:88:bc:dd:be:9f:eb:c7:1b:76:63:
89:c7:85:33:ef:5d:ea:b4:78:52:81:2c:ac:5b:a1:fa:be:05:
12:b5:07:5f:7d:b4:c7:ec:51:06:6d:bd:0e:03:39:0b:d7:8b:
25:75:7a:27:8d:c3:97:ea:97:30:3e:91:ac:bb:e1:77:37:04:
94:a8:2e:70:df:0e:58:c9:bb:ec:77:b5:bf:3c:82:c0:08:0c:
c6:a2:5f:3b:02:3a:d6:11:ed:22:85:5f:37:70:14:f6:35:81:
93:89:f5:ab:77:cf:e3:36:c5:ab:48:f9:80:fd:c5:65:aa:5f:
aa:30:cb:9b:58:77:a9:b2:dc:ab:2e:ae:a8:f1:ce:be:f9:3c:
28:44:43:b4:97:c5:be:7f:32:5b:92:63:d0:1a:3c:1c:ba:60:
a5:cc:b5:48:13:6d:26:95:6b:55:05:f6:72:ce:71:75:5e:9b:
d2:24:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:28 2025 by rpki-client