Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: t9nxS3q2VUTW3mtQztWOFbba3SXlrw5+Dh7+AHg0H38=
Subject key identifier: 1C:BB:ED:14:D5:D2:81:47:C9:2B:DB:34:49:97:92:2A:65:EF:EC:D6
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 0194BCA98867A18579DB106FC897929F8CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 10A2
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: wD2ZrJG/THIvEBu1moQn6hGxsoalQuSugT1U7V6pknY=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:67:a1:85:79:db:10:6f:c8:97:92:9f:8c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=1cbbed14d5d28147c92bdb344997922a65efecd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:9a:f8:fb:b5:6f:02:1b:14:a7:4b:a7:7a:
6a:4e:05:05:53:b0:e5:59:c6:28:d3:f0:dd:23:9b:
ae:c2:1e:a7:bf:b3:4f:b6:26:7e:93:fa:86:f5:6e:
8c:01:6c:46:d9:79:d8:15:e1:e3:d0:fc:fe:5b:93:
ee:a2:82:8a:d8:9e:82:d2:59:b5:1d:21:26:37:5c:
42:3b:aa:ea:ae:1a:d1:e7:25:9a:74:42:c2:3e:45:
9b:63:a1:ec:e5:af:98:00:c3:46:e3:a8:1b:a5:5b:
92:3c:37:8a:b3:f0:59:aa:11:b2:0b:83:e0:0e:3f:
b8:da:b3:cc:82:c0:1e:19:25:49:0d:36:79:54:88:
bd:15:e3:90:37:0b:c4:59:b1:cf:d3:34:85:39:61:
c5:e5:97:de:38:0d:34:e2:7d:36:ba:69:49:c5:08:
7f:c3:45:f4:53:41:75:ae:8c:95:3f:b3:49:a1:0d:
0d:46:09:a5:b2:63:6b:8a:a6:b3:36:93:f7:cc:ba:
da:d9:7a:de:9d:4f:e9:9e:62:55:7a:29:ff:84:1a:
5c:b0:ca:5c:bc:58:ae:12:4d:5e:28:c1:90:17:52:
b5:b1:6f:eb:08:c0:31:bb:fb:ab:5f:29:8a:61:fe:
c6:16:36:b9:5b:41:b9:0c:b4:b6:d4:f2:b1:e2:b4:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BB:ED:14:D5:D2:81:47:C9:2B:DB:34:49:97:92:2A:65:EF:EC:D6
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fb:ef:e0:f9:ec:0d:30:b3:1a:78:f2:25:ab:54:c1:51:c0:
27:60:c1:43:3c:bf:ab:b9:60:bc:8f:18:9f:45:cd:f7:e9:f0:
3c:95:af:78:a3:6e:21:a8:7c:b8:b8:bc:07:1a:ee:d4:7a:72:
cf:cc:db:4c:6c:d3:8d:2a:05:b9:09:5b:88:58:29:cd:02:0f:
f8:17:0c:36:b3:d4:d1:22:a8:90:3c:4f:82:e9:b4:ec:50:12:
27:fe:bb:47:7b:61:d0:79:8a:82:7e:19:54:35:aa:6e:9b:3f:
a7:90:73:f4:14:fa:52:3a:f2:8c:33:cf:e3:fe:b6:ae:e7:5a:
c1:fe:fc:e3:1b:ef:45:42:5c:8f:a5:86:e3:89:01:3b:62:e1:
59:31:fa:47:ff:63:08:da:d5:b3:b0:ab:54:bf:ef:3d:1d:81:
4a:c5:7b:8a:f3:35:ec:86:33:76:54:96:23:20:01:05:4b:de:
7f:b5:67:13:de:0d:68:fd:83:85:2f:fa:45:e7:76:0f:49:72:
fd:6a:c8:51:b0:2d:c1:b1:ad:a7:f3:7b:69:8a:fe:ac:1b:44:
89:b4:0c:b3:2f:26:db:b2:de:50:83:9d:01:19:fb:01:0c:91:
b6:c2:81:92:0e:74:d0:4a:7c:e9:09:0b:9f:21:41:5d:05:4f:
b7:40:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:00 2025 by rpki-client