Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
File: elmlzGH-vbkW1GJLvowQiXNTsME.mft (raw, json)
Hash identifier: dj+MIO8P2F6jPtPkeRIOuQGaYQGQUdXrfV1MkXwv0uw=
Subject key identifier: 1A:89:7A:8B:64:72:94:BB:72:2E:76:49:85:10:0B:0D:E0:4B:47:17
Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Certificate serial: 0194BD8599A366C07255E86FBB1DF0AD060F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: DhgKv9EWttCPWimr0cMYdix-VFM.roa (hash: jt6Z6pHhL+jbqX5CBAxAInUF4d0Kgk2CfxAQbj8DhrM=)
2: elmlzGH-vbkW1GJLvowQiXNTsME.crl (hash: FjP3d6U695GM4N7R1bi92ki0hnCLhOf0jRYCiuQwOXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:99:a3:66:c0:72:55:e8:6f:bb:1d:f0:ad:06:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=1a897a8b647294bb722e764985100b0de04b4717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:82:26:1e:e5:20:df:d2:47:59:d9:26:01:
b8:bf:66:65:b3:ba:22:1e:70:1a:7d:5c:31:1f:a1:
40:3d:97:6b:b6:c4:36:a1:e9:cc:ae:f2:ad:73:8d:
c7:8b:13:98:a8:f0:73:55:e2:22:17:41:49:4a:70:
36:ea:fc:28:cb:dd:64:5f:3c:91:16:a0:45:ac:40:
01:e7:50:bc:e5:e8:90:0a:83:81:62:91:1d:69:16:
cd:b4:ed:cb:c2:31:f3:5c:64:5f:6f:c9:2f:c7:8d:
31:16:43:d3:c6:75:1a:b3:94:af:31:f1:2a:18:3d:
cf:4a:d7:8b:61:22:84:f0:f1:8d:9e:96:cd:cf:ae:
53:04:41:20:aa:2e:f1:5f:26:21:26:ac:7a:ba:50:
3e:93:6d:9c:34:68:75:b7:9a:83:50:de:46:df:fe:
eb:1b:e2:a3:65:89:12:6c:78:1f:1d:c0:12:0e:00:
19:9b:9c:81:76:1f:7c:fc:58:50:43:36:c8:27:9b:
28:08:04:31:d2:42:42:4f:2d:e2:17:a6:90:0c:1a:
00:c6:74:dd:6e:55:4e:4d:3f:e9:fd:25:de:75:f8:
35:74:e5:21:d8:ed:5f:0e:2f:15:a0:22:d5:d6:4e:
58:ac:a4:55:d1:f9:38:33:55:70:7d:e3:67:66:e5:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:7A:8B:64:72:94:BB:72:2E:76:49:85:10:0B:0D:E0:4B:47:17
X509v3 Authority Key Identifier:
keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:74:56:7e:f2:87:8d:6c:ad:96:c5:36:78:87:e7:41:ba:4c:
05:db:0d:c1:a2:b4:74:7d:f9:0c:f6:99:92:37:6c:37:d7:fb:
af:38:60:f8:ac:25:f8:dd:c3:b4:3f:b3:54:8f:23:62:b1:1e:
13:02:ab:81:03:e6:0b:eb:97:85:76:2e:7c:f5:d1:27:34:7f:
b3:1d:39:16:89:69:06:99:d9:e8:ec:e2:86:0d:47:47:12:88:
e0:78:60:56:35:58:9a:20:e1:a2:85:15:ed:45:25:5a:c3:c2:
ac:c6:cf:d3:b0:21:c2:0c:c1:14:b3:7d:f3:47:76:76:8b:33:
70:65:f5:ac:94:f8:2a:af:9e:33:ca:2b:44:7b:c2:09:14:94:
3a:2f:d1:9a:b2:ed:60:74:73:ae:8c:2e:d2:4b:b3:1d:27:b1:
8f:3e:59:ee:45:73:18:88:ab:28:ad:ce:5d:e8:8e:b0:24:f1:
29:18:00:77:f8:02:9a:ff:a1:95:30:23:b7:d4:8a:41:7d:6e:
73:12:a1:34:88:2f:b3:65:16:13:f3:92:32:44:ac:b4:4d:3b:
ee:d5:ea:23:5a:7e:44:fc:85:7a:06:e2:38:89:76:bc:cc:f1:
ca:7b:7c:b6:94:e7:0b:9d:bf:f6:6c:c5:b9:dc:4e:8b:6c:c5:
b4:63:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:45 2025 by rpki-client