Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
File: exvey6lE9-4Q6QaRMR_A-ENDa6E.mft (raw, json)
Hash identifier: OtHapjoPDQyOtQPAfRdaHkxV10FeATSAUp9Lkvr8Z38=
Subject key identifier: 5F:50:80:9C:17:F4:70:4B:2A:47:EC:8E:52:A0:71:2C:B6:71:05:79
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 0194BD857625FE0E00A5FE81A4BB279AA294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
Manifest number: 055A
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: exvey6lE9-4Q6QaRMR_A-ENDa6E.crl (hash: 0H0yILtM5OHPqkkjtDr9Pl3gOsSl4uzRNBGy/qmS3ew=)
2: p3ouJa5WotBTtG9rxbNqqhfzBYg.roa (hash: kTmkPX1Jdi5RhEYTfljPIIJgOzH/X6Sy3ISos0vDrFY=)
3: yK4KCrl2qXYXkgzounrk4gTzQIw.roa (hash: /zHj7081UkbXIi4O9LzmDeNT5cduqZ+oq+6eaXAh/xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:76:25:fe:0e:00:a5:fe:81:a4:bb:27:9a:a2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=5f50809c17f4704b2a47ec8e52a0712cb6710579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e6:cd:32:62:f7:53:19:13:ba:4e:ea:b5:d6:
e0:cd:48:37:e3:a9:03:e7:df:f3:84:df:f7:bb:b7:
b5:30:50:9c:cc:19:83:0a:e8:01:0a:1c:59:98:8d:
7a:73:cd:7c:4d:47:1e:9b:17:22:d3:2e:3e:a7:c6:
47:3f:37:47:bc:d6:1f:5c:72:35:cb:0e:d8:95:72:
76:77:63:0b:51:9a:81:89:0b:73:f6:df:46:fe:c2:
15:dc:e2:e6:5a:bf:00:23:c4:0d:c0:36:bf:14:94:
fd:fe:96:25:d6:89:fc:ea:f6:cc:5c:f9:13:5d:47:
39:a2:ef:2d:aa:f4:7e:65:0b:8f:b6:fa:4f:31:83:
4a:a7:8e:c5:99:82:ce:59:91:89:db:9f:c8:9b:c6:
fa:d7:d7:47:88:41:ce:d8:e8:4b:42:bf:27:d6:ff:
b6:7d:0a:89:46:19:7f:18:3d:32:83:d6:4b:28:98:
15:d9:71:85:e2:f0:dd:e9:52:ec:aa:62:52:e7:3a:
50:7a:d1:89:2f:6b:c2:fd:c1:cc:c3:a1:da:45:08:
71:53:c5:03:dd:0b:27:64:b4:30:d5:97:29:3a:04:
05:00:b3:02:48:74:80:ed:d7:b4:0c:ed:26:7d:fa:
8c:81:d1:ee:21:db:be:f9:1e:44:76:50:cd:52:a3:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:80:9C:17:F4:70:4B:2A:47:EC:8E:52:A0:71:2C:B6:71:05:79
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3a:db:bc:c6:e1:3d:22:a9:63:ca:ba:59:2b:0e:a4:95:7b:
e4:b7:d6:95:ba:d7:18:20:9b:5b:c2:8b:54:3a:fa:8b:72:48:
77:52:28:1d:66:47:91:04:14:d2:fa:1c:28:c2:b7:a4:6e:47:
70:33:4f:cc:76:6e:10:c1:88:c4:5a:d4:b9:ed:2d:8c:30:5f:
1f:92:9b:db:b5:35:09:7a:93:fc:64:c0:75:b0:39:ce:89:64:
51:c7:f6:a6:02:f0:80:36:ed:78:6e:a3:f6:dd:b8:8e:66:64:
f4:17:f4:76:0e:55:2a:d7:26:b4:b6:97:d5:c1:9d:24:53:50:
4b:95:7a:e7:4b:4f:4b:7d:30:36:65:0b:86:16:9c:d4:6f:95:
df:30:4b:f9:af:43:0d:f6:6d:d8:b8:e2:66:bb:70:1f:2a:22:
07:c7:33:52:ab:2f:72:11:bc:cd:ac:a5:f4:1f:20:e6:2e:4f:
4d:25:67:4b:9b:67:0d:ca:45:42:5c:9b:68:6e:da:a8:11:45:
81:2e:8d:cb:27:fe:71:99:30:5b:de:3b:1a:5d:44:2e:d8:d1:
70:62:da:53:47:df:d6:92:bd:80:a7:c4:b0:04:77:47:b8:d5:
3f:e3:2e:e2:69:9a:fb:c5:02:fc:00:8a:59:06:47:74:b1:a1:
d0:91:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:14 2025 by rpki-client