Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: 2iZ26Ac6N7x1KzSzbXG8wEGR1VD7PUHr8P11o58F6Lc=
Subject key identifier: 90:12:27:DC:68:29:C3:CA:34:D9:0A:51:5E:ED:3F:F0:BA:36:E0:30
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 0194BD180438CF32365E4263EC87E691F26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:55 +0000
Manifest this update: Fri 31 Jan 2025 16:00:55 +0000
Manifest next update: Sat 01 Feb 2025 16:00:55 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: 2VwL71OEzLHeaxcDqYhB41g1ysOBcYyfgXh6m+wH7ik=)
2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:04:38:cf:32:36:5e:42:63:ec:87:e6:91:f2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Jan 31 16:00:55 2025 GMT
Not After : Feb 1 16:00:55 2025 GMT
Subject: CN=901227dc6829c3ca34d90a515eed3ff0ba36e030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:ee:47:bc:41:ea:3e:44:d5:58:1b:4f:b2:
7c:6b:d2:ae:1f:4f:bd:89:26:bd:c9:ef:c4:4c:33:
ad:c2:c1:2b:03:eb:c0:d8:9a:e5:22:f0:cb:94:51:
a8:6e:5d:de:3f:6b:8f:73:e8:a1:e5:fd:f1:e7:92:
94:36:38:5b:66:51:3c:81:96:d4:8b:b4:7d:6d:29:
fc:1e:3d:9c:ae:ac:2d:1d:2b:f3:a6:63:5c:4a:b0:
10:58:c2:ec:b2:f1:85:47:ac:6c:d6:89:3d:1a:30:
4a:a7:eb:0b:5a:37:e9:07:0c:2d:01:b9:c1:9c:8c:
14:bd:4c:95:cb:8c:cd:e1:67:d3:63:75:59:2a:5e:
78:11:f8:da:e6:30:1e:9f:53:85:e7:1e:0e:bb:78:
f4:bd:6e:54:b9:30:1b:cd:5f:d2:05:10:c0:6b:f5:
8c:17:5c:75:1f:99:06:cf:96:a1:b8:be:e5:4b:f4:
0f:6a:f4:84:35:76:d2:8d:91:f1:1f:78:9d:15:cf:
03:fc:d8:0d:8a:8b:2a:38:f5:36:c6:16:e1:e8:22:
87:81:1f:ca:91:68:d2:36:c3:e4:67:03:52:04:7f:
28:08:ae:ff:4c:19:b8:4c:91:2c:07:11:97:b6:03:
48:01:f1:fc:68:41:f8:27:4c:bc:a8:a5:45:3a:02:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:27:DC:68:29:C3:CA:34:D9:0A:51:5E:ED:3F:F0:BA:36:E0:30
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d4:2b:67:37:1c:76:0b:2f:e7:f6:35:d1:0e:d2:69:ce:a0:
57:eb:95:87:13:bb:78:81:d1:34:5c:1f:78:58:ab:7f:b3:90:
9e:e9:f5:9a:0d:23:6b:e3:42:6f:1c:2e:11:f7:9a:e0:1b:06:
ec:e6:2e:d8:13:e3:06:bf:26:6f:16:4d:c0:27:63:9a:39:af:
28:17:15:59:70:2e:cb:b6:d4:22:7c:81:d2:4d:f0:c5:55:46:
ca:fd:d5:e8:25:9c:0b:3f:57:3c:1c:c6:ed:53:b8:e6:86:b3:
53:5b:4c:92:17:c4:bf:08:87:d5:8d:4f:a9:94:8a:ab:ae:19:
1a:cd:1e:7c:c4:78:ed:e6:c6:0b:77:42:83:b9:93:7d:14:14:
64:22:7b:90:d6:ea:d4:b0:cb:be:6c:72:1b:97:e4:9c:56:72:
8b:4b:8f:2c:1b:4f:c6:de:13:72:e6:0f:a9:0d:aa:c6:55:9e:
ec:74:ec:fb:1e:85:04:39:fb:c4:ea:73:26:b6:7b:53:80:fc:
57:a8:68:f5:3e:c1:ca:92:f8:78:30:59:a6:26:2c:38:11:1e:
2f:08:41:6b:04:16:a1:7f:7a:59:d0:0e:5d:32:ba:8a:02:c4:
62:80:78:b4:90:e8:ec:83:f8:54:42:e2:99:35:1f:f6:5b:f7:
94:4b:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:54 2025 by rpki-client