Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: FmDJCV0meN5mjCZo968Kfq9a8XnamSbR3CtEKMsGjTg=
Subject key identifier: 39:35:A9:79:8A:9F:61:62:2F:D2:ED:93:CC:A0:3B:CA:09:76:C5:0E
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 0194BD4E7667A0010A3033A8D2D07304E9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: f/trhrqo6rv8tAosganKd3w6Iy70zTlhFA6UXA6xqys=)
2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:67:a0:01:0a:30:33:a8:d2:d0:73:04:e9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=3935a9798a9f61622fd2ed93cca03bca0976c50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:1b:00:18:03:ff:43:a0:07:c7:13:4d:e1:
09:3a:48:32:0f:a6:67:1d:48:d6:f6:89:fd:b1:2b:
d0:9e:28:63:a0:1d:9b:32:48:51:8d:fc:18:64:b9:
47:7a:1e:ce:34:f0:ca:1c:8d:fd:d1:8c:57:99:8c:
49:27:22:25:1e:55:e1:af:cb:da:f3:4c:b1:d1:9c:
38:93:43:85:9c:39:a6:16:4f:fa:dc:fb:40:27:ba:
72:b2:02:0d:c8:ee:c4:2c:a8:94:2d:41:73:a7:de:
c8:8e:cc:ba:d7:e2:21:41:57:68:ba:39:cf:55:f8:
4d:b4:ae:5e:c9:2a:de:08:63:5a:d7:c3:a9:a7:a7:
21:28:7d:6e:69:40:23:d9:bb:2a:d5:9c:72:10:5d:
81:d2:bf:4f:28:b2:b5:df:c9:2b:ca:9d:7a:b1:b6:
15:74:89:29:f3:8c:f3:af:99:e5:d9:c5:e5:48:ff:
75:4f:32:a8:97:80:a3:61:44:3b:fa:52:22:21:f5:
c6:05:f7:f3:0b:f2:32:35:4e:38:f1:a8:96:37:0d:
7e:30:81:47:d8:0f:40:dc:67:2c:a5:7f:82:eb:57:
2f:c7:f4:c9:bf:8a:2f:f9:57:40:24:94:01:de:f1:
63:7b:5c:48:d2:78:b1:00:51:06:9d:1f:43:16:55:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:A9:79:8A:9F:61:62:2F:D2:ED:93:CC:A0:3B:CA:09:76:C5:0E
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:85:01:e5:97:8d:3f:ea:13:44:09:f3:aa:13:9c:ad:bc:e8:
d0:fe:c7:e3:c9:53:26:f6:07:52:54:72:7a:a9:58:8d:88:be:
ea:f4:5e:ed:03:4b:7f:18:9a:2a:07:e5:53:c0:4b:b8:10:17:
43:57:4d:ef:44:70:1a:68:7f:49:b5:76:7b:8c:79:9f:41:38:
5b:29:30:2a:57:fb:94:bd:c5:2b:77:85:49:7e:5f:71:45:ff:
c8:3d:a4:1e:32:42:ab:3c:98:41:5a:15:10:92:2b:71:bf:2d:
5d:e3:60:24:c0:89:85:4d:2c:2e:cb:79:b1:f0:8f:7f:5a:e3:
7e:a4:78:59:94:16:4e:68:9b:f9:75:84:77:0e:2e:f0:50:f5:
a2:f9:9d:43:a8:3a:fa:ba:5d:e3:d0:d0:40:77:88:e0:02:2b:
3c:fc:7f:fd:c4:81:35:b5:c9:c3:10:ac:a1:4c:3b:a1:63:ae:
2f:ce:c9:e0:97:d0:32:69:ac:13:80:b9:f3:e9:10:cb:5b:14:
d9:b6:68:29:ba:2e:63:35:4e:43:33:0e:84:0d:53:3e:ad:e8:
54:19:84:dc:90:5f:fb:a1:0d:c5:e2:51:e5:47:ab:7c:88:ef:
10:d5:d0:f8:7a:c8:83:60:eb:5b:eb:c6:06:f0:b2:7e:a9:69:
4e:ac:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:08 2025 by rpki-client