Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File: EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier: Utt1VPmO9C/aKN7HUE8TCsUtG4Ftp8gjHCcOpqvzlWE=
Subject key identifier: 99:60:5A:A9:AC:7A:4F:35:8D:5C:34:0F:A7:79:DE:E9:D6:B6:61:36
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 0194BC3BF8178E0A972B6100127168C466D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: 2RYqLOOOCbthDUAcjKq8EsDLRUQ.roa (hash: Q1LOM4u7XAO8escJ6IGTLdV2wb9RNCfCJR9rh+j96Ys=)
2: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: WAVRDIkLPRaKtWpBQqySYUMFX57+VNhe+x36i+81lTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f8:17:8e:0a:97:2b:61:00:12:71:68:c4:66:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=99605aa9ac7a4f358d5c340fa779dee9d6b66136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:b3:74:2d:f0:59:32:9f:ba:04:7d:b4:df:
be:0b:2d:b4:75:89:95:a0:40:d3:ab:24:11:64:87:
b1:f0:d5:3b:71:2e:44:e6:06:23:5f:68:90:72:1f:
6a:87:f4:4d:75:ed:81:ea:7c:9e:8a:47:a5:04:ef:
a7:f1:03:9f:0b:6c:b5:a6:7a:2b:51:c0:f7:5b:42:
01:ca:d0:27:dd:5f:14:58:59:82:64:09:9f:98:b4:
94:e5:9f:a8:48:1a:75:1e:ab:c9:72:4f:0f:60:07:
cf:35:6e:9a:97:f9:9f:4f:ca:34:01:e5:7a:ba:25:
68:da:04:b5:c7:3d:d5:86:e3:6f:25:d0:ac:a5:d6:
b9:98:31:18:44:c6:f2:7d:19:fc:a6:e3:3a:ff:dc:
69:30:09:e1:8c:b0:3d:30:70:c9:9d:22:a1:60:b8:
ae:4b:1c:ca:4b:3b:c1:02:cd:8b:ca:83:31:b8:6a:
03:66:80:61:dc:10:71:94:0a:85:0a:c7:ff:88:bf:
09:18:88:cc:5f:8a:c0:1d:3e:af:09:08:37:60:4f:
3f:3f:d2:ea:0d:4e:d8:f6:d5:8e:c5:c8:63:65:6b:
b5:53:1d:a2:50:52:3f:85:8d:69:ea:85:3f:b4:29:
7c:8c:89:bd:38:de:d6:45:94:27:5c:eb:0e:05:ae:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:5A:A9:AC:7A:4F:35:8D:5C:34:0F:A7:79:DE:E9:D6:B6:61:36
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cc:72:da:78:11:9d:d8:37:66:56:ef:fe:8b:ba:fa:0f:d0:
0e:9e:a7:8c:97:f8:d5:14:4f:b4:b9:6d:7e:10:e5:75:19:4f:
12:24:e3:4c:2f:70:b0:f2:e8:8e:36:49:ba:af:24:3f:60:c1:
86:a2:0e:86:e3:94:00:d8:47:68:08:13:c3:d8:b9:a3:54:bb:
ff:cd:6b:6e:46:d2:f0:50:0d:a1:a8:b4:04:27:30:d5:67:73:
0b:c8:3d:bf:09:d8:36:e7:67:73:d3:ea:43:1d:8f:96:8a:a2:
55:e5:04:ca:4e:72:b0:e1:29:46:1c:b2:75:5a:00:1a:f7:3a:
63:43:28:fb:55:dc:bd:81:99:cf:13:e4:ad:30:a3:c8:6a:49:
ca:1b:80:fb:58:ef:38:ff:fe:13:4d:0f:98:5f:39:48:5e:7f:
b1:b6:9c:92:99:0a:d8:9c:5a:99:a4:27:bc:e7:13:5d:49:b9:
6d:ad:24:b9:48:fb:44:3f:dc:c0:e3:a5:f0:6c:82:3b:96:5e:
9d:4e:61:02:ee:9d:70:29:84:b8:2e:44:2b:a2:da:d7:ee:c3:
95:10:ae:db:40:99:52:6d:70:df:5c:32:8c:81:e7:9e:b3:66:
29:a2:82:50:74:1f:a1:36:5d:e0:0f:aa:11:9f:cc:b6:ba:75:
81:af:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:03:52 2025 by rpki-client