Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File: E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier: sRjn3AUmXi1tpe59RQvoGMK8eHETTyaRAeFa4sh2aAA=
Subject key identifier: 0D:1A:29:C9:5E:A3:93:F3:D9:2F:B2:8E:A2:77:F4:21:A3:A4:52:9F
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer: /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial: 0194BCA9B25D714E2AD3CD414601EC6F3056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number: 0363
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: 8FXx6e-u5uU4oX7I2qEVdoZijzg.roa (hash: wEhTzMM4+HaPiSo3UljIAbk1aEVV4QI7TvJR33027+I=)
2: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: kv0djFmIxtdPvgWGVjqNI+ymnQpsCQOxvjzYDNCqnqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b2:5d:71:4e:2a:d3:cd:41:46:01:ec:6f:30:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=0d1a29c95ea393f3d92fb28ea277f421a3a4529f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:46:ae:63:d9:b3:fd:19:82:0a:45:2d:9e:
f7:54:95:0d:b3:ec:38:3d:7e:09:c1:ba:7b:72:52:
48:c4:b8:ac:c9:95:3f:34:d3:a7:e3:d1:0e:c6:1a:
a6:f7:2a:2f:6f:31:93:f6:e9:b5:b6:90:bf:11:f4:
f5:4c:8e:e4:dd:23:80:bb:0a:f8:21:e3:36:4e:a0:
32:22:74:0d:fb:31:90:f3:e3:eb:15:d1:7a:c6:c5:
8d:08:ec:6f:57:9e:c7:0b:86:1f:e5:a4:d6:4d:93:
07:54:5c:86:8a:25:4b:e5:07:a7:9a:f8:03:56:c3:
2d:06:2d:16:ba:0f:b2:60:f5:14:d2:65:7e:81:2c:
bc:ae:29:4f:11:bf:5b:3a:e8:54:5a:0c:e2:29:6a:
fb:29:8d:ba:df:3e:1b:d0:5f:76:5f:34:ca:e2:b9:
3f:53:4a:ac:d6:32:9c:b6:71:f4:40:58:bf:d1:d5:
f8:89:fa:c3:a5:7f:69:a9:b2:ab:a8:26:37:c1:4b:
2b:34:8f:38:ae:a2:97:7d:2f:2b:66:c3:23:48:4a:
46:59:6c:be:fa:a8:cc:9e:03:92:aa:e2:3b:44:84:
1c:8d:79:f1:59:0d:e3:04:18:82:3a:17:10:95:2e:
bb:09:86:29:dc:9c:45:b2:f1:83:c9:db:ed:f8:29:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:29:C9:5E:A3:93:F3:D9:2F:B2:8E:A2:77:F4:21:A3:A4:52:9F
X509v3 Authority Key Identifier:
keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6e:87:7a:31:47:7f:5a:a7:aa:4a:2e:d0:a0:0f:55:99:75:
86:a7:ed:25:3c:41:7b:22:9b:99:e3:7b:cc:e6:62:5e:d0:5b:
7c:52:de:59:45:2d:9b:b2:ea:07:e5:d1:3c:22:1b:ea:d8:a4:
3a:b8:7c:d7:11:a0:0b:fb:9f:21:09:54:bb:bd:ee:40:04:14:
07:0d:b1:92:cd:7b:4f:87:89:7a:d8:13:70:82:41:ee:af:28:
6d:3f:76:26:00:c4:ed:07:34:e8:9c:8f:f7:04:aa:df:be:11:
19:ba:5d:1a:32:81:68:fd:8c:cc:01:41:23:f5:ee:27:a5:27:
f4:37:ec:f4:9b:d1:61:a4:24:2a:f5:de:fb:9f:51:69:dc:f2:
9a:3d:b1:55:83:de:d7:0d:78:8b:74:98:85:c5:6b:d0:7d:19:
4d:35:f0:dc:f9:47:6b:75:3c:f4:f8:3b:dd:0c:bc:5d:bb:d8:
83:94:ab:f8:e3:86:c6:35:3c:b6:40:e3:b4:ae:b0:ce:e4:49:
60:98:f0:7a:54:f1:df:97:5e:cb:51:88:82:c5:2e:d5:1b:70:
51:4d:8b:17:dc:3d:f6:ba:eb:03:a3:bf:11:9c:d8:0d:c4:5e:
14:c5:2e:3f:1a:d5:35:ba:cf:c4:26:1f:af:9a:58:74:76:24:
29:b8:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:46 2025 by rpki-client