Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier: istLmm7C/4LLX3O25CQzNvt+NSXbE5LwVXt741agk+w=
Subject key identifier: BF:68:50:17:71:F8:3F:2F:47:66:0E:01:E0:C7:86:59:C1:66:30:20
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial: 0194BCE0B705F1E422C6B9FF35DEF13907BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number: 06D2
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: PG51rP9P/8efE+5jSnckoBbl6bP3vjEzxEgVAQU8wlc=)
2: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (hash: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:05:f1:e4:22:c6:b9:ff:35:de:f1:39:07:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=bf68501771f83f2f47660e01e0c78659c1663020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:11:87:e3:3f:bf:d6:b4:21:01:90:70:da:
d5:65:09:cb:14:76:b6:de:01:fd:0d:8f:3e:8a:fa:
d6:1b:61:40:2b:05:5b:9f:24:a4:bf:46:d5:f4:7a:
d8:9e:23:0f:0b:c7:dd:19:d9:2b:54:d0:37:6f:e6:
4a:9e:1f:64:c3:9a:ec:85:16:b8:d0:3e:d7:6f:28:
aa:ef:5a:13:a0:15:f3:fd:a9:11:21:90:cc:64:ec:
a2:e8:39:2b:33:7f:70:58:fe:40:ee:89:6a:a5:00:
f8:83:d6:b0:0d:b4:c0:c1:5a:6e:ed:d8:7c:10:4f:
1a:28:b4:6d:44:70:d6:46:67:27:0e:ad:48:69:cc:
bc:36:02:d1:2b:f0:6f:ac:2e:fc:94:6e:5e:91:38:
1b:8a:ee:33:56:b0:0f:bd:f2:cf:0d:bb:67:6c:28:
f3:e6:f6:03:78:05:d8:aa:bb:4d:37:73:1a:e1:ca:
16:97:a8:1e:dc:07:2f:65:22:b6:31:d8:2a:9f:c2:
ee:83:6e:4d:72:07:f0:79:01:1d:5d:1f:60:b5:f4:
6a:04:bb:bd:38:96:08:d4:d8:d7:30:28:13:4b:4b:
82:7e:79:43:99:96:8f:b7:87:88:1b:21:a7:f6:49:
65:e5:c3:33:4a:b2:4b:03:9c:e2:b1:df:12:04:d0:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:50:17:71:F8:3F:2F:47:66:0E:01:E0:C7:86:59:C1:66:30:20
X509v3 Authority Key Identifier:
keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fa:1b:c1:4d:ec:43:6e:c1:0c:6e:56:00:ec:b7:79:ec:f1:
48:25:b2:ca:9c:81:00:d6:aa:a5:14:d7:6c:5f:c8:75:54:ff:
0b:f4:16:9b:6c:5a:a4:13:3e:46:c7:47:cb:db:4a:17:e6:71:
24:57:45:72:54:2e:79:23:c1:ec:97:e2:40:17:ec:c2:28:48:
9b:41:b4:c3:e5:2d:33:f9:f8:b1:1d:69:15:c5:01:5e:5e:40:
c2:a3:f4:11:b3:1a:99:78:72:fc:46:b6:b0:ba:d1:c1:4a:36:
17:02:f1:7f:2f:f7:ab:35:88:28:80:9f:5a:13:cc:f5:e0:36:
29:3a:d0:f9:90:cc:0c:1c:48:a6:1e:26:09:33:de:6b:23:e2:
eb:dc:03:60:c2:53:41:5b:7f:3f:01:07:e9:ac:16:26:8c:20:
e1:f4:5c:ae:af:77:b5:e4:3f:e9:2f:18:f0:cd:d0:66:fc:96:
90:43:94:d1:07:f3:af:7c:76:99:f7:9a:81:3d:8c:fb:cc:3e:
8c:10:54:6d:bd:0e:87:d1:ec:53:01:5d:ef:78:d6:0a:a4:ae:
26:18:d4:df:ea:81:53:68:34:65:91:47:04:a2:09:10:88:95:
a5:c4:3d:fc:d0:e2:9f:a0:4d:a5:54:b3:eb:0b:3a:a4:58:78:
78:bc:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:58 2025 by rpki-client