Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File: E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier: BYaDVIMce4RKmDjKerFRp9m2VpjatnNLZ8ic8uZ4ilI=
Subject key identifier: 2F:02:4F:1E:84:0C:7F:C3:93:4D:1F:9E:28:08:12:98:02:23:98:3B
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer: /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial: 0194BD8556424D7A68233C263600D05A8FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number: 019C
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: dtZCgk1vV60b4ebvXyEPZpTTnzordrJigW792ggk2ms=)
2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:56:42:4d:7a:68:23:3c:26:36:00:d0:5a:8f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=2f024f1e840c7fc3934d1f9e280812980223983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:c1:34:6b:c0:3a:07:ac:35:c1:ac:fe:46:
d6:b2:8b:15:fb:9a:ef:cf:81:61:8b:7b:c0:af:e8:
65:fb:ae:84:0a:2d:28:18:e5:ff:f3:cb:64:cc:d6:
d2:b6:81:5d:f2:aa:99:af:06:8e:7b:68:4b:9c:83:
b7:d9:7e:02:6c:b8:99:c9:0b:31:27:df:ca:ac:6d:
10:18:17:6a:d7:e2:0d:b9:3c:93:00:47:2c:16:30:
39:70:dc:0a:14:c6:67:c9:3f:d6:32:60:48:67:f5:
95:2f:ce:45:ea:10:7b:5d:b8:22:71:84:e9:47:a5:
76:2b:67:05:ee:0a:b0:0a:3b:e7:ae:30:ed:08:38:
99:63:f8:5f:f0:52:d1:3c:de:07:ff:a1:c7:2e:a7:
05:46:50:28:78:fe:ae:13:9b:59:6b:8e:7c:e4:19:
be:2e:71:e7:52:16:34:59:92:1e:ca:51:15:af:82:
73:1b:60:bd:c7:7e:98:27:80:52:1d:5b:43:f1:93:
2b:8d:25:05:e2:ef:ba:53:d6:64:fd:30:a7:e0:cb:
34:4f:9a:ea:85:2c:0c:3a:c2:08:86:40:7d:7a:a7:
53:70:a1:18:58:ab:12:8f:8c:0a:71:b6:06:82:47:
f1:b8:ce:f7:8b:21:b9:de:0f:1d:53:49:1b:f3:28:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:02:4F:1E:84:0C:7F:C3:93:4D:1F:9E:28:08:12:98:02:23:98:3B
X509v3 Authority Key Identifier:
keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:e3:fc:b9:96:e3:69:09:55:47:3f:3d:2d:c5:f9:86:35:
02:e3:a1:c2:be:fe:bb:98:0d:3f:f2:db:ee:12:c3:1f:9d:5b:
a5:88:4e:14:26:4b:9f:74:14:87:7b:ad:67:f5:c8:34:fa:16:
f8:1a:c2:30:2c:a5:a6:b1:c8:5d:05:ff:9a:65:e6:8a:34:c5:
8e:de:fc:f5:5a:c2:42:5c:a7:94:ff:47:42:d8:2c:a0:86:01:
c4:10:5a:5f:e7:1e:43:63:05:9a:30:e6:7d:20:8a:6e:01:04:
11:7a:98:7e:ca:1e:e7:3a:a8:52:4f:98:77:56:1f:73:00:72:
eb:e2:59:c0:f1:0c:e6:f3:59:8f:be:46:c3:35:ea:a6:49:13:
38:6e:68:9e:ee:25:63:c2:b6:b1:f1:2c:62:6e:ad:c6:25:08:
df:41:f7:05:33:31:86:58:21:5e:d5:47:23:36:bd:c1:cf:72:
ac:b6:be:21:d1:42:18:29:ee:7d:02:3b:21:d6:91:51:c0:c6:
e4:5f:db:6d:93:cd:de:ab:29:96:8b:19:49:5f:81:36:72:8a:
15:eb:2a:9e:f8:7a:e9:03:d2:62:e4:c1:42:f9:a3:02:82:c4:
14:1d:dd:b5:db:e0:83:fe:6d:b8:74:ae:ec:6b:d7:4b:93:70:
3d:ca:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client