Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
File: EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft (raw, json)
Hash identifier: D+ihQy07wH6uxhjLEA/f5eVYFsOrXJina0MwMV3MiU0=
Subject key identifier: 84:BB:04:A2:77:56:48:1C:41:C7:EB:7E:5F:59:77:71:D6:F6:46:D2
Authority key identifier: 13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
Certificate issuer: /CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Certificate serial: 0194BCE060E71F58CBCE5ABD9FC1D78B706A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
Manifest number: 088E
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl (hash: mQPi0wMb0FkxI96Zl0BceHMkw7JcY4Fk9IUQWhfdW+o=)
2: R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa (hash: oSyFhN1ovW7xy9oFAp6jlzZPhvsjlMjehmNfek88Rzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:60:e7:1f:58:cb:ce:5a:bd:9f:c1:d7:8b:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=84bb04a27756481c41c7eb7e5f597771d6f646d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:d9:65:9c:49:59:ae:62:39:3e:50:84:e1:
1b:70:c0:2c:21:5b:7f:4e:a2:65:8e:c7:0b:81:62:
9b:a3:ea:f9:c2:ae:c5:d9:4a:e1:38:45:53:c2:90:
da:ec:f0:53:f9:81:8c:40:ff:cc:db:86:29:66:9c:
43:4e:93:8c:8f:a9:16:38:06:3e:fa:ba:6e:56:7b:
77:c7:c2:a6:47:64:e9:a4:5c:7d:31:65:f1:89:d1:
65:6e:f2:34:7c:c0:26:4e:23:1a:96:74:d3:a0:0d:
3e:e6:b0:1a:db:78:c9:a0:8c:69:74:42:63:b0:5b:
ad:d7:0e:af:1b:b3:48:38:b3:d1:9d:e3:dc:5e:51:
0f:c9:8b:57:67:10:a8:66:ff:1e:05:4a:29:c8:2f:
12:a2:bc:18:62:a2:a0:55:7a:ef:0f:80:db:ed:6d:
d7:09:fa:2b:aa:50:6e:c6:c2:22:04:c8:e9:50:c2:
8d:3d:f8:09:38:8b:ff:06:33:18:6e:8a:76:1e:ba:
a0:44:dd:f8:19:ee:61:76:bd:99:78:24:6c:8d:65:
a5:be:82:d7:70:02:b1:ae:79:a7:84:85:47:59:a7:
a3:09:9b:fc:a7:a0:f9:8b:e3:fe:1f:1e:a1:82:af:
6c:8c:3d:f1:e7:83:63:ef:05:db:7d:ef:29:25:a1:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BB:04:A2:77:56:48:1C:41:C7:EB:7E:5F:59:77:71:D6:F6:46:D2
X509v3 Authority Key Identifier:
keyid:13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:aa:d5:c8:54:95:93:b5:2a:91:c9:ec:10:3d:38:f8:0b:d7:
8b:51:b8:d9:7a:0f:97:63:de:41:6a:44:80:94:ce:16:3e:39:
30:d7:59:f1:aa:04:de:db:fe:50:dd:91:71:67:2d:86:18:e7:
52:85:29:79:45:dc:44:58:ae:7f:25:b4:be:25:e0:7c:28:18:
e3:fa:3f:3f:08:bf:d2:17:a0:16:bd:76:ea:52:ab:92:9a:24:
ca:03:be:c8:01:e7:9b:e0:4c:d2:cd:c7:59:9a:d3:bc:57:2d:
15:90:e0:50:9d:cd:e0:4c:5b:b2:51:48:e5:05:c8:8e:25:96:
3f:37:85:79:73:35:ec:53:f2:a0:dc:dd:28:25:76:18:76:da:
74:55:11:e2:81:f6:2b:e7:d1:77:c4:b6:f3:a1:df:a0:b3:5e:
06:49:3e:43:2c:2d:9f:ee:06:3a:3a:c9:5d:22:9b:ba:49:9c:
9d:6b:c8:4c:22:7f:e7:ca:7d:27:ff:f4:34:28:b3:1a:68:06:
1b:1a:61:1f:d9:e6:63:5d:f5:b5:e9:14:82:4e:d1:4a:4e:2b:
bc:76:d9:5d:70:bf:26:7c:98:17:06:c8:86:3b:f0:eb:f0:f4:
ac:bb:dc:1b:83:77:9b:89:86:82:78:29:d0:05:4b:33:65:85:
0d:e7:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:10 2025 by rpki-client