Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier: TH+sUW9WbpNu+naWVU3JoSE2e+gI+n/6oVkOKEPv9iY=
Subject key identifier: 0A:25:9A:A7:DF:CF:50:FD:25:31:C9:EE:55:1A:E6:6F:F2:47:18:22
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial: 0194BD4E9CE2EEB83A7BCBFB6F36F28357ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number: 0366
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 20TV3G_zqSwWD9jn85G0oHSYUWo.roa (hash: ln3cpOzlT6bLA9htFrfQ1ndKs7h6RkK+G1oPsD3H/Og=)
2: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: 2rILWTGriE47Uo1CI8Mwj5IvtMSxZH18hg8qWI+C+7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9c:e2:ee:b8:3a:7b:cb:fb:6f:36:f2:83:57:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=0a259aa7dfcf50fd2531c9ee551ae66ff2471822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:8f:aa:a6:4c:e5:7f:26:d6:6d:e4:f6:37:
9e:4b:04:d4:cd:f8:52:d3:e9:70:79:94:b4:ae:d2:
12:dd:cd:dc:fc:c6:ff:fa:17:60:a0:29:5e:c4:0a:
23:b8:b1:c4:e9:4e:ca:a4:c5:4b:1b:97:11:0d:73:
f1:ce:b9:c4:c1:1d:c0:58:f1:34:29:4e:08:e0:b9:
95:83:9e:27:13:83:4e:99:8e:36:11:29:f8:ca:14:
11:fa:36:00:09:76:41:42:d5:fc:fb:00:3e:d8:8b:
53:c9:ee:f1:46:d4:38:41:a6:d5:e3:8c:6e:c6:6e:
b7:da:45:d8:ca:a0:ce:50:66:26:e1:a7:e3:77:14:
5f:12:37:47:5a:80:49:46:70:07:35:89:6a:5a:5d:
60:27:94:df:92:63:11:48:96:e2:e3:70:57:3c:7d:
14:11:3d:2f:8c:fb:2c:0a:8c:b0:25:4b:3a:1f:68:
f2:6e:aa:ff:3e:53:8f:59:8b:71:81:e8:11:ba:b3:
8c:ab:7e:e2:6f:f9:ab:f3:4f:a2:9f:d9:20:35:a0:
2b:9d:f8:14:d3:d8:b3:6a:9d:20:0c:14:e6:3f:4f:
29:b3:00:c9:50:97:98:26:82:00:05:d2:a1:6a:c0:
60:76:e9:3c:e5:ce:da:51:d0:a3:40:63:74:87:a2:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:9A:A7:DF:CF:50:FD:25:31:C9:EE:55:1A:E6:6F:F2:47:18:22
X509v3 Authority Key Identifier:
keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:6c:c6:e2:79:8c:7c:83:c6:8c:b0:00:53:65:dc:b2:1a:
a9:46:3a:5e:ab:23:f8:6e:31:ee:00:55:3f:90:8b:46:78:33:
3c:cb:a0:57:66:ef:e4:e0:52:53:5f:36:66:3a:94:6e:56:b6:
4d:d0:b6:f1:10:31:48:59:a5:2b:17:d7:9a:8c:c8:23:72:43:
bb:c2:50:44:97:fb:af:b4:14:18:e3:5c:5e:b0:c4:fb:a7:64:
0a:14:6e:90:62:17:fb:2d:bf:09:db:bf:c5:a0:46:20:90:71:
5b:06:76:1e:1f:75:3d:49:0d:3b:fc:75:d2:fe:45:92:6b:80:
8c:f7:3d:c8:c2:41:59:ee:68:0c:9d:30:d8:c5:e4:f7:64:9c:
f0:b8:56:e8:80:c5:f0:5e:6d:41:68:85:ca:03:8b:4f:e0:ea:
63:e1:15:96:7c:a5:80:b6:72:68:0a:f5:7e:94:36:76:f8:b5:
01:d3:ab:27:7a:89:6f:df:ad:63:cc:c5:51:e9:af:4b:15:69:
ac:ca:45:3e:10:04:62:58:10:34:54:0e:95:7e:b7:d6:20:d5:
47:bf:c0:95:22:20:9d:3a:c2:a4:a8:16:82:3a:78:ca:96:c4:
c9:0e:df:79:13:22:c4:b2:cb:11:90:6b:a4:8f:54:45:b2:b6:
47:f6:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:08 2025 by rpki-client