Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: hpOVtPTQkXya1IHJFOzsSlBNWwh85/Q5uCnS8Zk7rqM=
Subject key identifier: 41:6E:AF:29:57:9F:8F:3F:78:5F:9E:54:7A:9D:03:9B:81:40:32:E0
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 0194BBCDF5BEDD3F028F32E6E809232E2779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 0EA2
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: EyXyZh1NMVmQSwOvgsi_6X0fzdc.roa (hash: zdUTP+PrB9t/KpvAQvCmMyip6WSChLUYJHZuuaMU0rs=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: 1ytM+v/T36cNzg+J6Vh32MiLX6iuO0NjYWygXBObd3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:be:dd:3f:02:8f:32:e6:e8:09:23:2e:27:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=416eaf29579f8f3f785f9e547a9d039b814032e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:ae:df:53:b9:08:d2:ce:ec:09:f0:74:1d:
50:cf:0f:fb:96:9e:53:0c:f5:ce:2c:f7:c8:87:cd:
b7:25:79:da:b2:85:67:33:aa:d0:2f:19:cf:f2:31:
ab:b3:a4:99:d8:4a:40:65:2e:bb:b2:dc:98:9c:59:
59:e2:25:02:9e:87:a8:d2:47:05:a0:a9:7d:47:03:
88:79:96:60:2b:bc:ee:07:b7:2a:53:37:95:f6:a0:
f0:77:bb:4f:b0:5f:e5:45:b9:85:af:40:9f:39:03:
46:7f:81:b1:9f:43:ef:74:27:94:bb:66:a8:7a:47:
e0:5f:06:46:02:bf:42:f9:db:eb:39:f1:e0:37:95:
3b:33:8f:47:a0:1d:3c:4a:88:82:e1:8a:52:69:82:
3d:eb:f2:46:4d:fe:29:2e:47:a9:94:63:23:d8:15:
95:54:38:28:c6:3b:cf:94:86:5e:54:16:3d:40:9f:
61:e7:df:4b:5e:50:26:7b:6a:7b:e7:d9:40:6b:a6:
d0:b0:88:29:f8:44:6b:6b:14:04:8f:65:6e:eb:0f:
75:ab:d8:04:bc:32:d7:0a:56:06:b6:66:53:ea:85:
9a:90:a5:97:ec:7c:94:91:b0:98:08:52:39:ec:19:
d8:99:5f:84:3d:b0:d3:d0:74:8c:c8:86:ec:9d:fe:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6E:AF:29:57:9F:8F:3F:78:5F:9E:54:7A:9D:03:9B:81:40:32:E0
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3b:39:b2:0b:36:87:6a:d2:8c:8c:f2:23:8e:98:dd:af:49:
25:3a:a5:bf:50:a5:01:3f:c5:72:3f:bf:31:28:57:ce:ea:e8:
0b:2d:69:84:ad:4d:32:af:49:75:16:27:29:1e:91:39:c0:94:
d6:1f:97:36:af:97:4c:49:b9:5b:a4:f7:60:80:66:3e:81:0e:
4e:fd:f5:fb:a6:6d:a2:42:c5:0f:78:6a:9a:60:82:c9:c1:42:
1d:5f:9e:31:09:b7:6b:b4:f7:7e:67:7c:cd:56:7f:dc:3f:06:
22:bc:a0:dd:d2:0a:e4:08:a4:30:72:fd:64:e3:eb:31:d6:23:
3f:ec:4d:3b:75:19:c3:cd:33:6d:ac:8a:ba:ef:34:c5:4c:74:
4e:75:3f:dc:ef:8a:52:32:1f:d2:28:fc:d7:7f:6b:4c:2c:c4:
7f:6a:f7:d6:e2:35:9d:5d:c9:33:bf:04:b8:0b:21:70:9c:09:
33:cf:c8:75:8f:f5:bd:6b:46:6c:bf:01:02:fc:68:7d:f4:0a:
d9:7e:0b:d6:dc:33:92:21:41:f0:1e:e0:ce:09:d8:bd:71:1a:
0c:2a:e3:17:b4:3e:48:c4:35:0c:7a:9b:f6:80:b5:be:45:9f:
ca:16:84:66:b6:73:c8:6e:f7:0c:8d:39:8b:96:f3:44:05:1b:
e2:d2:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:19 2025 by rpki-client