Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: CH8dbAci8NJVOHQqiE41RHPLqjzPAxrhwNqXXxUobb0=
Subject key identifier: B5:D3:CE:39:3D:7A:52:1C:F6:A4:EE:1D:97:36:46:60:6B:D5:E0:BE
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 0194BC72BE06423A417F9F06FB1A904C6230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 1168
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: aX+9NkEFKaXhw1SKMyofz5cay8Civbfxq7BkRwNEVFA=)
2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:be:06:42:3a:41:7f:9f:06:fb:1a:90:4c:62:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=b5d3ce393d7a521cf6a4ee1d973646606bd5e0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:51:16:5b:17:c8:ef:6a:fc:91:aa:54:c6:
08:1c:94:01:e4:64:ca:4f:92:18:e4:fa:54:8f:67:
11:78:df:1f:a6:cf:d7:6d:e6:77:10:7e:b1:9f:91:
50:fa:4c:09:02:db:1b:7f:26:e6:aa:d2:31:7a:df:
64:6c:fc:0c:a2:51:fe:3a:8f:ea:2e:14:39:67:d9:
5b:6d:38:45:79:f3:30:81:6d:d1:06:4d:81:5d:c8:
84:4d:9c:62:57:4b:f8:f3:b4:3e:e9:ae:1f:1d:75:
8d:ca:29:15:7e:22:c2:34:1b:7c:ff:39:77:5f:1e:
61:ab:e3:75:28:c1:59:08:5f:21:d4:7a:e7:4e:ad:
71:4d:88:9b:39:83:d3:75:ed:bc:93:44:9f:9c:58:
37:d1:da:fe:3f:98:ee:9b:1b:56:3a:8b:7f:d7:46:
2f:fa:25:b6:be:27:a4:2a:e5:a1:6f:81:d8:32:e1:
07:cf:aa:50:bf:d6:99:86:49:a7:4c:ec:21:0c:01:
10:8d:02:0b:70:42:86:a1:60:c0:e9:35:77:92:72:
d7:a6:ed:a5:85:d1:94:dc:25:c5:c4:a8:1e:f5:c9:
57:22:bb:c5:ab:6f:fe:1b:b6:06:3d:3a:45:08:91:
cf:e4:58:2a:0f:83:e4:ba:d3:d8:cc:ef:38:ad:c5:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:CE:39:3D:7A:52:1C:F6:A4:EE:1D:97:36:46:60:6B:D5:E0:BE
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:95:b3:77:a0:cd:0e:9c:2f:cf:8d:a3:2e:8f:20:bb:bf:fd:
a0:b0:59:2d:7f:8c:8b:60:2c:71:dd:12:7f:0c:9e:da:dc:32:
fa:00:68:86:0d:40:d2:9c:4f:78:a0:1d:04:bc:23:20:cb:b1:
32:0f:ad:77:e2:8b:33:6a:a0:73:6b:e1:d4:2e:8e:3d:56:e4:
38:87:d6:86:bc:5f:4a:65:2d:7e:7f:29:c1:6b:32:ea:29:cb:
dc:ad:1b:8d:32:21:13:73:b2:a1:c9:ef:30:cb:6d:5f:a1:3d:
25:0d:eb:a3:2c:39:dc:f7:19:8b:24:58:39:a4:d0:b3:fd:71:
91:2a:26:db:bd:b3:5e:60:19:42:17:44:2a:b7:d2:ff:7d:a2:
1c:b1:9f:c0:bf:dc:98:41:b2:33:56:3e:5c:be:d8:e0:1a:e2:
ba:af:ed:87:34:0c:d8:fe:29:7d:b5:62:dd:cf:45:af:11:25:
04:2c:8c:30:db:68:2b:0d:c5:19:b2:03:2a:72:aa:1a:8e:af:
59:78:d1:bd:cb:fc:4e:a4:7f:90:12:e0:33:38:ab:f2:75:c6:
4b:cd:62:13:6e:6c:9e:d0:6c:1e:1b:dd:10:82:d3:3e:2b:3d:
4d:53:4c:e7:87:40:64:1f:28:97:8c:d9:a9:a3:12:9d:e3:5e:
fd:de:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:04 2025 by rpki-client