Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: 9UxTDITxdDzXlQvTCu8G864kTj4iHiDA63KgEBFOQQ4=
Subject key identifier: 21:2A:29:FE:E0:41:73:F2:F4:96:85:4F:DE:9C:75:94:48:23:A1:8B
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 0194BC7284DAEDAF13CA46911D71A9FA899C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 0285
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: 1OsZTnWpsS6ao0L0oaopZu/4RSo5L8iXhMgX5PKK/iQ=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:84:da:ed:af:13:ca:46:91:1d:71:a9:fa:89:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=212a29fee04173f2f496854fde9c75944823a18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:5e:ef:ed:5b:21:ba:79:c9:9b:b8:b8:ff:
9e:8f:60:42:82:44:ac:6b:ed:40:3b:4d:d3:45:b9:
a6:07:47:77:f1:db:88:0f:3f:60:2c:77:05:b6:04:
7b:7e:9a:c0:7a:7d:66:d5:13:0a:32:48:7b:d4:e2:
5f:ff:01:06:b2:21:0c:c8:f3:96:46:45:51:05:5f:
8f:3c:63:e4:95:5c:5d:e1:14:10:b6:72:3f:13:68:
bc:bf:7c:f1:77:fe:ea:4d:94:b7:59:64:85:8d:7b:
0b:ef:c9:9f:d6:43:67:97:df:29:6b:f3:68:1c:45:
07:61:86:e3:fc:6d:ba:84:bf:aa:6f:00:3e:a8:f2:
7a:57:a9:d3:21:ba:2f:4b:29:9f:37:d3:68:ac:3b:
8c:1a:92:7b:60:59:4e:a7:69:97:ad:47:fe:4c:d8:
52:60:d8:aa:a8:41:b4:75:5d:71:de:3d:bc:c6:79:
c0:c0:1e:b3:7c:d6:d7:c1:20:7b:2b:4c:ec:ed:b6:
a4:f0:0c:2f:f9:f6:af:10:dd:6b:5c:a1:8b:59:aa:
74:d6:02:35:ce:7a:ca:27:91:88:cd:64:9a:e0:f6:
14:86:60:f2:31:58:18:10:7a:ba:ff:ae:71:0e:c1:
e2:19:56:f5:b2:26:3b:00:11:72:5e:f9:4c:89:8e:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2A:29:FE:E0:41:73:F2:F4:96:85:4F:DE:9C:75:94:48:23:A1:8B
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9e:7e:51:c5:ac:8c:f8:3f:e9:2a:fa:65:9f:a6:02:49:7f:
a2:42:d6:16:1f:1c:b2:7a:69:36:e5:46:1b:24:95:db:ae:a0:
c8:3d:0e:bf:55:1e:26:66:64:ac:d7:0a:55:b3:cc:1e:41:bd:
68:a8:a1:a3:4b:68:99:46:92:19:21:3e:19:61:5f:dd:3b:d4:
4d:70:32:8c:88:53:89:ff:ec:da:db:20:fe:7a:0a:c1:47:ec:
9a:bf:e7:e0:a8:8d:2c:a1:c3:81:ea:0f:7e:98:12:0b:42:28:
2e:fd:ae:58:2a:43:0f:c9:e5:52:0f:15:14:3c:83:2b:18:68:
e7:76:ac:c5:a8:34:59:be:54:43:e2:06:41:16:47:c4:69:96:
ee:57:87:d5:4e:51:06:e0:b6:1b:f0:4e:d3:e4:1d:cc:03:7c:
39:27:cd:88:16:0d:b8:6a:1a:32:2d:8c:72:ac:cb:4d:71:b3:
80:3d:5f:62:a7:2b:49:dc:26:af:90:bd:04:da:eb:ae:fa:ba:
ed:ef:bd:df:d2:af:51:bb:ab:9f:20:60:27:00:64:83:3f:e3:
36:29:7c:e3:1c:4e:67:ff:cb:b0:85:06:7d:66:e5:ec:fb:c8:
b6:26:19:98:24:ea:54:50:10:e9:86:72:11:ea:1f:35:99:d6:
f7:11:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:05 2025 by rpki-client