Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
File: eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft (raw, json)
Hash identifier: hjZZF/vWlkmGQ6kJ0ZrYFYKDwdP5H1Flu8urWHRgy5o=
Subject key identifier: 13:1B:D9:F0:E0:67:F5:E5:CB:EB:61:BC:F0:78:59:BB:FF:B7:D1:03
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Certificate issuer: /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial: 0194BC050DB44DC26A522A3864F4E2CC1AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl (hash: GPsaExT6YMpSl36VmdYqblpZDy+BARhBD5RX5JXiCsw=)
2: kvDA2uJCxtsf_iJspEUKkErzpBw.roa (hash: JEVQ/faqvkDHRCLDsyE8tNxf+ZkvCVkbrXJ5aSPcJrs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0d:b4:4d:c2:6a:52:2a:38:64:f4:e2:cc:1a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=131bd9f0e067f5e5cbeb61bcf07859bbffb7d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:46:00:d8:bf:fa:a4:5f:ff:af:64:02:b2:
2c:8f:db:45:d2:24:59:10:d4:f0:e9:71:1b:21:d2:
ba:d8:9e:6e:80:51:70:6a:26:5f:ad:38:02:21:12:
3c:49:a5:48:25:15:ad:a7:87:4b:e1:20:33:60:70:
0d:62:8c:63:02:02:d4:28:10:a1:0c:44:4e:aa:75:
6c:6d:92:aa:5f:2b:24:5e:b1:48:af:cc:2b:82:74:
1d:91:96:f2:bb:40:5e:f8:89:e8:65:39:bb:e1:20:
18:30:7e:b8:76:c7:88:b8:31:92:36:93:8c:d2:37:
c6:91:38:d7:b9:42:fb:3a:68:12:04:ff:b2:18:2e:
b7:ec:a6:09:5d:d2:48:15:b6:3b:ca:a1:ad:4d:28:
21:81:58:41:4a:18:80:b5:68:be:ae:c1:84:fa:b2:
c0:eb:17:a5:c2:a7:b3:04:cd:c3:dd:38:81:c5:75:
9b:e8:b8:37:94:8d:7c:ee:66:61:8f:d0:40:36:67:
66:ea:07:6f:d6:d2:3f:82:6d:f3:23:11:07:6e:c5:
83:7d:97:6e:2e:0b:63:1c:66:32:1c:64:7c:82:82:
6b:16:52:e0:0c:91:e7:02:db:21:f3:55:99:fc:e4:
aa:5a:3d:a1:8f:1b:95:ab:9b:36:08:dd:e2:36:2e:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1B:D9:F0:E0:67:F5:E5:CB:EB:61:BC:F0:78:59:BB:FF:B7:D1:03
X509v3 Authority Key Identifier:
keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:13:b8:f7:46:71:93:93:82:b8:52:89:ed:93:0a:28:c8:45:
66:aa:ae:9c:af:9d:21:28:ac:ef:ac:11:e8:80:5f:d8:aa:4a:
99:a2:62:af:82:e3:a8:c2:3e:2d:b1:30:ca:80:a5:5d:ab:bf:
8b:0a:66:10:1b:43:05:d4:a8:d5:73:75:0d:7e:3b:d0:e6:dd:
31:c4:70:7b:9c:a9:69:96:c6:78:87:f1:43:23:f4:97:d5:3e:
f8:0c:10:db:7e:a3:ff:bc:23:7b:9c:ff:7f:df:5c:2e:10:fe:
41:de:77:b5:a0:c7:d2:97:5c:5e:07:ea:fa:b3:4d:e5:37:4a:
a2:14:95:3c:b6:d5:b2:e5:38:33:88:dd:51:c1:be:a4:bd:d1:
7d:d9:b2:2b:78:52:64:37:da:b5:65:c9:8b:f6:67:69:05:a3:
82:c0:b1:22:0a:14:d8:fa:04:bf:79:62:84:53:6e:f0:06:8d:
e0:b7:33:73:b9:fe:0f:a2:5e:a7:10:98:f1:6f:2d:d1:8c:d1:
dc:ed:33:41:b8:1f:dd:f2:e4:b5:f1:b5:1d:91:fb:24:2f:0d:
f1:dd:bd:fc:95:84:d9:e6:99:a1:d4:f0:96:ed:08:2f:ee:6c:
bc:44:32:4b:5e:7a:83:40:30:a2:14:73:7f:cd:8e:59:2c:35:
ec:92:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:19 2025 by rpki-client