Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
File: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json)
Hash identifier: eO8sia6ZUx3sUtpoLB9fcn+6GgNe8ye0u9rph9Qn9k4=
Subject key identifier: 80:90:DD:78:FC:0F:F8:08:C6:6E:AF:9F:C1:B9:F0:B9:FB:90:D5:27
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0194BCAA2F9124B72375BC9F5B1621867F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
Manifest number: 0F3E
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: FBEnJYIwtkGj5Vv+kO/a/QDimsbyx+0AdvMacA9Gz8M=)
2: HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa (hash: tXi7iyniS0PtgxKru69nf5MitATyW1mHStve5TknjLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2f:91:24:b7:23:75:bc:9f:5b:16:21:86:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=8090dd78fc0ff808c66eaf9fc1b9f0b9fb90d527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:3d:50:fc:02:a3:1e:23:30:42:71:48:34:
42:4c:e7:9b:e1:79:d4:be:71:ed:49:dc:b5:70:d2:
26:ff:c4:06:39:2b:22:e7:69:29:4c:b7:90:b5:a3:
c8:f4:70:b4:36:3a:88:0c:a3:51:78:3b:4e:3c:a3:
c6:f3:67:e9:86:e9:1a:a3:12:7b:b5:e8:88:62:b3:
0e:9d:be:b7:e0:15:e8:fe:8b:b2:44:3f:cf:17:ef:
6c:19:b9:88:ed:d2:d7:5f:ca:da:65:ea:37:31:a0:
1d:14:ba:bb:2a:b7:bb:74:53:45:da:ca:d5:06:36:
90:78:1a:ce:b9:69:d8:96:8e:47:de:27:ff:8e:15:
1c:5f:25:e1:43:e1:7f:36:c2:86:0a:37:de:fd:73:
7e:e1:ba:c5:51:1c:46:37:60:09:a3:f2:89:14:63:
c7:cd:78:27:29:d9:8e:62:74:f6:cf:77:07:50:90:
2f:2e:37:d4:4d:76:e0:73:f0:04:64:d9:42:9a:01:
63:dc:8f:8e:be:c4:44:38:4a:29:27:fd:21:07:71:
10:a7:af:3f:89:49:7d:1d:27:e2:e9:46:b9:f2:be:
76:35:ed:fb:42:44:48:91:d4:46:73:2a:c9:de:35:
dc:a1:3b:85:fc:a5:50:70:04:e9:d6:f6:1a:53:9d:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:DD:78:FC:0F:F8:08:C6:6E:AF:9F:C1:B9:F0:B9:FB:90:D5:27
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:32:03:63:69:54:ef:d2:79:f3:be:87:17:44:9e:2e:b5:20:
92:9a:9a:e9:f1:7c:a6:ee:e1:59:94:39:5c:9b:82:97:75:23:
6c:8e:7d:bd:a3:91:db:13:57:f9:b7:27:00:0a:fa:9a:2f:7a:
3c:ab:f9:bc:1b:80:ac:1f:96:ff:55:fe:04:8e:1b:a1:e0:2c:
ba:81:2e:9b:10:51:70:19:ac:f9:c5:ff:c0:57:9f:4d:5b:a8:
b1:5c:35:88:42:a5:b1:19:e9:1d:23:8f:cd:0c:78:c2:ce:3d:
d4:0c:cb:15:82:f9:3d:53:29:02:20:50:21:bc:b3:62:57:09:
a2:09:5f:ed:b4:e6:da:87:1e:fe:e1:76:ab:dd:f9:37:a0:28:
f8:90:a0:85:f3:07:f5:d6:5f:d4:e8:80:de:20:db:1a:92:2d:
0a:92:6e:f9:b0:bc:50:98:a9:e9:d4:a3:86:c0:59:8f:64:29:
49:82:0f:41:c7:aa:df:1d:2d:27:1f:2d:63:c3:64:9c:a9:42:
85:4f:3c:7e:80:be:13:a9:40:a5:07:13:0b:d2:de:3d:b8:c8:
e6:9a:d3:01:07:e5:da:61:99:d8:a0:8d:62:bd:33:7f:4b:14:
b8:c5:f9:ee:79:91:9c:2f:07:aa:b8:4b:86:0e:2c:f2:15:33:
46:f7:c5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:38 2025 by rpki-client