Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier: YJqr/LJAsiGWkD7HUqAZ/jafBKKTZ5JSHnS+LXIcLpU=
Subject key identifier: AE:4C:78:DF:9B:80:6B:5C:C2:AC:30:F6:9D:28:C7:92:47:73:E0:90
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial: 0194BD17985E6465B72F54001B46F951B46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=)
2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: Wfe9UhD27LM+GEol8xA2n0uUJPf3JzF2jeRysK1v0Ic=)
3: agbtSicI43NC6Jt3Dyg7zhODLDw.roa (hash: qOHK1QywiFv2fjHbJPWGkkwFV1PwQ5Q7cQqyIJ4j8G0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:98:5e:64:65:b7:2f:54:00:1b:46:f9:51:b4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=ae4c78df9b806b5cc2ac30f69d28c7924773e090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:f1:08:da:fc:50:c3:7f:e4:42:8d:e1:ff:
c5:d9:ce:c8:e3:29:a0:be:bc:76:fb:05:35:51:6a:
9b:16:5f:5f:9f:79:e9:9b:e8:d6:5d:0a:2d:29:c3:
fd:eb:ca:82:46:84:a9:20:b8:43:15:87:b3:c6:6f:
b8:a4:fb:3e:16:90:02:a3:48:f9:a1:b9:9f:9f:a2:
a8:99:77:5e:9f:ed:28:c6:df:2a:4b:73:88:dd:01:
e2:54:2c:9b:3f:79:c7:f3:b0:15:a5:5e:49:ba:fe:
33:5d:38:42:26:38:0b:3d:16:3a:22:de:71:12:9f:
c6:1d:89:60:8a:6d:6f:9c:8a:cf:ed:c4:03:be:ad:
7f:c9:f2:ad:4e:31:14:f9:f4:ba:25:18:69:ed:43:
b8:ae:7d:d1:a7:32:fa:0a:fb:1a:ca:51:6e:57:8f:
7c:9a:2c:55:19:0b:eb:04:f5:8e:22:23:cf:ee:ea:
93:d0:a1:53:82:a4:4e:ac:ab:73:83:9a:82:87:5b:
6d:09:ad:78:da:07:91:49:f8:46:58:ac:7c:0b:28:
bf:5c:b6:3f:22:dc:16:65:cb:aa:a6:28:ad:31:9f:
7b:03:df:38:93:71:78:b3:e5:40:13:33:82:1d:e1:
86:5f:04:0a:3c:65:8c:a6:f1:dc:1d:f0:41:fb:c5:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4C:78:DF:9B:80:6B:5C:C2:AC:30:F6:9D:28:C7:92:47:73:E0:90
X509v3 Authority Key Identifier:
keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:91:5b:bb:89:80:05:96:6e:8d:44:a6:13:37:9a:99:3c:17:
1d:c3:f4:9e:67:f1:48:9a:f3:e3:f5:c1:87:e0:91:ee:26:82:
90:98:4d:33:4c:f7:ce:bb:f5:0b:db:08:18:8a:a9:c4:c1:8c:
b2:4f:54:41:9d:cd:5b:40:ef:d3:3d:7c:78:59:c1:ac:ef:81:
69:3a:e9:d0:6e:a5:63:ac:9b:c4:95:89:25:d4:2d:94:1e:a8:
df:59:82:9e:aa:d2:27:2e:9f:72:bc:89:e1:76:cb:d9:7b:bc:
e7:ce:a5:cc:a0:03:b8:a2:51:4e:e2:b7:87:34:c8:80:13:f8:
a9:4b:3d:fd:fb:e7:14:90:3a:27:88:bd:b7:e9:3f:fc:97:1c:
61:73:2e:41:6a:b1:c7:be:bd:05:c8:28:f2:b3:5c:13:a5:fd:
a7:80:01:53:7e:3a:6a:ac:6f:de:c5:84:51:9a:1d:45:04:30:
2f:4b:c7:ed:65:1a:15:7e:bc:c3:77:06:e2:8f:ca:34:7e:2e:
8a:3e:e8:97:cf:87:08:f9:a0:91:0e:fe:01:94:e5:bc:71:be:
52:42:06:54:3b:19:82:99:c4:52:f9:a5:1a:d9:52:44:9e:8c:
47:bd:c7:45:1a:22:b8:7e:f8:75:55:a9:f0:f1:9f:2e:0a:3d:
c5:79:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:36:04 2025 by rpki-client