Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: Bh8jvlT986B8jdzcn3LRY/cQy/o0qkM+JVxuQtGqhmc=
Subject key identifier: 90:93:C9:10:48:2F:1F:EC:21:AF:87:90:CE:40:A7:D8:4E:B0:47:A8
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 0194BD855279EAF5E1D2C287028D4263DCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: FdRrN4FQnznF76tR9+28O8PsoPVAR5kpZyxCDfYiqXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:52:79:ea:f5:e1:d2:c2:87:02:8d:42:63:dc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=9093c910482f1fec21af8790ce40a7d84eb047a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:58:45:64:c4:bf:f0:28:84:4d:81:7b:45:69:
ea:ec:6c:bd:95:33:7f:20:d9:01:60:35:2e:2b:9e:
1f:3b:54:cc:5b:67:2d:5e:9f:f8:c8:e4:c2:77:51:
09:f6:73:72:bf:3f:ba:2e:7e:0b:bc:bb:3b:1a:d1:
57:ca:a8:ee:ed:a9:a9:6b:02:1b:0d:85:1b:d9:9c:
1a:50:2c:7d:09:0b:2d:2e:87:9d:4a:d1:d4:b0:12:
c9:9a:18:f9:8a:57:dc:8d:c3:67:4e:5d:26:79:97:
cc:bf:a0:32:fe:fa:0d:c0:f4:b1:f0:17:81:67:3f:
21:ce:cd:21:bb:e4:0f:7b:33:7c:de:03:fa:31:fd:
9a:fa:74:2a:46:75:ce:68:59:09:f7:ce:7d:ac:3b:
45:85:0e:1b:08:09:f7:73:ee:b7:8a:38:ae:d2:b5:
40:10:e6:6d:ef:86:a8:82:3f:e9:99:b7:f8:a4:eb:
93:96:a8:61:16:d2:c7:50:21:8b:df:95:54:c9:41:
5f:58:23:78:f5:98:14:41:71:ee:51:fb:6a:fe:6c:
25:4b:d0:96:33:7b:9e:f0:e7:0d:d0:8d:1e:95:9d:
8a:ab:62:b6:71:ad:69:1c:18:75:ce:e7:d7:14:a8:
74:78:73:be:61:3d:64:77:9e:85:77:15:ee:b6:88:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:C9:10:48:2F:1F:EC:21:AF:87:90:CE:40:A7:D8:4E:B0:47:A8
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:63:a4:f3:e5:e1:ae:f0:56:d2:d1:0a:57:8d:79:37:45:e6:
8d:c4:a0:8b:f7:5a:6f:32:1a:6c:4d:e8:c6:c8:e0:a2:d2:90:
7a:71:0f:4e:a5:56:0e:a6:d4:23:e5:49:26:3e:4a:8a:d0:c7:
02:c3:95:a3:b8:40:54:fb:36:40:1f:83:d4:87:d5:73:a3:e2:
81:1a:8b:2a:ba:da:4e:06:fb:b0:e7:3b:db:06:31:51:45:31:
fb:32:ae:a6:bb:a4:71:7c:f6:60:de:31:0e:6f:c8:a1:dc:86:
60:9f:ff:62:e3:cb:a2:b6:ee:b7:1f:df:be:2e:65:6b:ea:8b:
09:d4:ed:ef:47:03:bb:c3:91:9c:16:9d:a5:21:a6:f9:d4:48:
c0:56:99:82:71:62:d8:f6:64:86:60:7b:15:1d:22:d8:ae:48:
07:9b:4d:01:cb:d0:08:90:63:3b:9d:68:cc:3a:eb:f5:ad:ca:
d1:84:7c:f6:5d:92:5f:a1:95:7c:b6:89:45:0d:a4:31:1b:42:
6d:7c:24:0e:d9:3b:51:7d:24:87:b8:0d:cb:64:e3:f2:f0:b6:
59:e3:6c:f3:fe:a8:40:61:9b:58:fd:75:03:71:20:28:6d:72:
fd:06:20:4e:65:7a:37:4f:43:f8:88:cf:64:4e:a1:94:32:6f:
aa:5f:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:44 2025 by rpki-client