Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: NF/Q4TzL4lgkr3sbscgbzuXyIU/+9sXki8HAq3U6ND8=
Subject key identifier: AC:E9:D9:C9:BF:E1:3F:89:1E:48:CA:91:3F:62:C2:FC:94:3F:6A:C6
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 0194BC72EEFFE10BAE360DE93CE4AE8A3610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 0ECF
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: c2wPARCYM7nXnG25B+FKSa5xogNlLjyFs8Jm39LC6V4=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ee:ff:e1:0b:ae:36:0d:e9:3c:e4:ae:8a:36:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=ace9d9c9bfe13f891e48ca913f62c2fc943f6ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:0b:81:53:c5:fc:69:95:ed:fc:7a:f1:7a:
76:2e:56:68:46:32:c7:fe:bb:63:1e:1e:fc:d7:a0:
00:15:56:9c:86:48:3f:eb:ce:a8:cd:73:96:5c:42:
23:31:5b:33:ac:82:0e:02:b4:6d:7b:24:6d:8a:cf:
1f:d7:68:2f:fa:34:a5:32:04:d5:5b:5e:51:ce:b5:
dc:65:59:8e:c2:67:4c:3b:10:e2:5a:8a:07:8f:02:
31:f1:ab:0b:8f:8f:cb:39:d8:50:15:32:16:9f:53:
9b:f2:d9:e2:1b:b3:11:12:cd:bc:72:2d:71:a4:bb:
3c:7a:44:f6:ca:14:98:27:7f:7e:54:b8:49:e4:5f:
dd:55:52:88:63:df:4f:95:93:da:f5:fd:fe:f3:13:
aa:9e:ce:5c:08:ba:0a:e6:bd:36:6e:27:30:f7:a3:
0f:a5:dd:94:45:fc:9c:95:56:64:ec:c7:e6:07:a1:
62:00:25:20:c5:85:d3:d7:e4:3c:be:9a:5d:f6:d0:
be:4b:f7:0f:b2:b0:56:6e:70:d5:56:f6:cb:8b:9d:
dc:3c:b5:81:17:b0:8d:6e:15:ff:41:3e:85:39:f6:
79:e0:c2:fc:00:69:6d:6a:c6:67:87:07:6d:20:53:
4d:94:d1:4c:15:8f:52:0c:6c:87:fd:c2:d2:a2:fc:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E9:D9:C9:BF:E1:3F:89:1E:48:CA:91:3F:62:C2:FC:94:3F:6A:C6
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9e:c0:17:7a:b6:a8:c7:f5:b7:c8:00:80:c2:2f:e2:ba:0e:
a9:0e:91:15:5b:e0:0b:86:05:57:47:5e:63:20:bd:fc:5d:b2:
f7:e7:de:7f:8a:63:8c:1a:cb:fd:60:ec:42:6a:17:de:7f:b3:
6b:b5:4d:fe:0f:ad:2d:14:8e:01:da:2c:6e:d9:f9:20:2b:c4:
ee:da:e1:aa:92:ba:c5:0f:70:c3:f9:6c:5d:28:ac:a3:15:1d:
e0:58:51:65:fa:ed:68:10:d4:01:97:a1:5d:e7:5a:42:4e:b0:
e9:15:17:7e:38:82:bb:7d:e9:d4:65:38:6b:e1:a3:55:5b:b6:
ea:69:27:2c:1f:d2:b5:d4:f4:6e:89:a3:df:6e:8b:88:17:4b:
5b:e4:ec:b6:4b:b1:f6:26:6b:17:2f:58:17:96:7c:af:25:68:
f7:e2:b1:8a:fb:0a:d3:0e:c8:62:3d:8f:4c:b3:d1:55:e4:20:
44:95:f1:28:03:ef:68:72:7c:05:72:d4:68:2a:dd:76:67:ce:
6c:fc:4f:0b:1e:bf:02:b8:c5:7f:3e:2b:62:93:ff:95:68:ef:
3f:5c:f3:90:06:e2:2e:12:45:17:f5:58:47:93:aa:fc:d9:c3:
72:10:75:f6:8d:2f:5e:47:0e:7e:fc:8a:d7:f4:52:9b:20:ea:
be:16:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:03 2025 by rpki-client