Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier: tvS8/1t64anCtRSRc1K6oqRKk1itxZX/NI2gmyTHXq0=
Subject key identifier: 57:0E:BE:E9:16:94:77:82:36:07:F0:A0:A9:92:C7:78:5D:4B:3F:57
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 0194BC3C2EA7DE1831257834F8672B1A9D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number: 08D4
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=)
2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: UOJBxwdvfon6SunnQl0mTtc2HaVQgRx+i3hmj+cBxNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2e:a7:de:18:31:25:78:34:f8:67:2b:1a:9d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=570ebee9169477823607f0a0a992c7785d4b3f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:d9:6c:6b:16:59:8a:4f:13:cc:59:cd:c6:
3b:9c:82:6d:e2:a0:98:12:2a:c2:84:da:42:c4:f1:
b7:34:5a:84:8c:20:1f:d3:40:32:70:05:e8:e3:d5:
55:ca:e5:77:1d:27:d9:c9:b3:7d:7c:5d:c0:3c:a5:
45:e9:13:aa:40:4f:8c:bc:c8:37:76:e4:89:92:19:
9e:f5:d7:36:9a:87:33:5f:b7:86:cc:dd:5f:1a:3d:
59:18:d5:57:51:7e:4c:45:09:e6:4a:f6:98:65:48:
44:90:8c:43:97:a9:f0:c6:a0:f1:62:5f:46:f3:bc:
6a:ff:53:4f:99:2c:f1:94:63:e7:a0:46:6f:d9:71:
3e:cd:b1:71:e7:72:be:ee:7f:92:e9:7d:6c:8d:ea:
79:a7:b3:8b:e6:e8:0a:58:13:96:56:da:ee:35:be:
75:72:04:e8:13:c6:79:dd:23:49:01:1d:ee:93:a8:
3a:a3:00:9b:01:c6:c2:7f:70:1a:ee:28:2f:f3:28:
4f:af:fe:8d:bd:ad:40:3d:c7:d2:6a:cd:32:51:10:
25:08:be:68:9f:52:d6:08:3d:4c:ed:2e:9e:05:7a:
2e:47:37:84:be:d9:fc:48:b8:1b:03:5f:af:f3:04:
04:28:53:dd:29:97:f6:ce:1d:98:ae:b7:8e:5d:da:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0E:BE:E9:16:94:77:82:36:07:F0:A0:A9:92:C7:78:5D:4B:3F:57
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:67:93:03:a6:f2:0d:5a:2c:14:d4:46:9b:8a:e1:c4:d2:59:
f9:75:b2:f2:5c:9b:f6:c9:7d:27:50:fa:b6:d5:ce:3a:55:cc:
cf:56:40:4a:14:8e:2a:90:f1:84:5b:65:c6:db:aa:fa:95:04:
fc:53:41:8f:bd:f2:f8:d8:d0:2c:cb:30:da:d0:af:f5:79:d1:
63:79:8c:03:6a:3a:d4:fa:06:8f:a8:37:fc:32:29:94:0e:3e:
93:7a:79:29:b1:f8:5a:6a:86:5f:11:55:32:0b:cb:11:14:4a:
da:c4:6e:10:87:f5:1c:25:11:d7:ec:95:7b:8a:cf:a5:24:83:
11:69:b1:06:b0:9d:1e:03:22:1b:b4:37:0a:30:e2:fa:37:29:
61:9b:74:b7:8f:c2:11:a3:7f:29:18:7c:1a:11:68:67:25:84:
62:97:5f:04:d0:42:89:41:4e:c6:36:92:4c:88:89:a6:8e:0d:
74:e0:df:fa:c1:75:6a:25:4c:2b:3d:b9:c8:4a:39:5a:0f:87:
57:dd:bb:22:a3:42:7d:8e:7a:3d:ab:ed:28:0d:94:b8:c5:02:
99:5b:ee:6e:31:c8:6e:87:98:5d:88:bf:1f:cd:1b:64:ad:04:
59:87:0c:fb:66:28:9b:ab:e7:9b:5a:db:57:13:fc:1b:ea:25:
08:e0:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:41 2025 by rpki-client