Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier: aw88+1fQFU5lU3FnwSri5B3ALGL6QbDj+4zhswGkFSw=
Subject key identifier: 9E:C5:1F:B0:6C:7F:16:8D:37:30:9F:E1:48:DD:A2:CA:C3:B8:B3:DE
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial: 0194BCA99709DE08320F04C999D43DF57372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: IhTlJYOB3cQI+wisnWNPHRIcCjvSnZwrc8T/izKuBR0=)
2: 90qeQZqwuh0oi-oH9Ho2Hr4JeqU.roa (hash: yAfSfLIB/wlDkdhF0bN4I000INgGh/D9HhTP3okCxDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:97:09:de:08:32:0f:04:c9:99:d4:3d:f5:73:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=9ec51fb06c7f168d37309fe148dda2cac3b8b3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:e1:1e:3d:cf:b2:ec:2e:d2:0a:b4:9f:ef:
92:34:95:0e:5d:23:d6:e1:fb:a0:35:9b:91:36:57:
e5:8b:d3:28:de:c2:4e:42:c4:8a:a9:03:04:c2:a5:
f0:79:29:94:3e:90:49:cd:01:bc:e8:3c:14:34:22:
a4:49:98:e3:3c:90:d6:20:02:39:f4:18:97:58:2d:
99:2e:29:06:d3:32:10:be:bf:0b:f3:79:1e:27:6c:
c2:b1:c5:e9:1f:16:e1:73:71:59:ab:43:54:55:a1:
46:8c:32:88:c6:af:5e:af:ec:b5:a9:06:55:7d:ae:
05:c0:aa:9a:73:11:af:46:ca:3a:1e:85:21:de:e8:
7a:d4:8d:a1:2d:87:3a:a6:c2:07:8f:33:e1:4c:a3:
7f:85:82:81:d5:6e:41:27:99:61:4a:dd:8d:c5:f6:
a5:42:90:b2:e0:70:ef:f6:69:db:0d:8e:32:a2:ab:
e2:90:2b:f9:78:d1:57:87:92:7e:24:07:9a:a8:e1:
2f:23:5f:8b:10:8c:df:f5:b9:4f:08:01:a9:a0:47:
b4:a0:66:10:38:33:f8:81:44:86:dd:5a:d6:56:e9:
e3:45:6b:03:16:a8:bd:ea:e0:b8:9e:11:b3:ef:a5:
e9:40:f4:81:da:05:02:f7:42:8a:3f:89:14:41:96:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:1F:B0:6C:7F:16:8D:37:30:9F:E1:48:DD:A2:CA:C3:B8:B3:DE
X509v3 Authority Key Identifier:
keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:02:95:28:ef:09:d9:60:19:16:40:3e:18:da:3d:f8:47:d6:
9c:83:25:b2:55:75:ef:1e:e9:5f:b7:86:65:f2:4d:2c:04:72:
64:32:1b:93:95:88:bc:76:50:48:6a:28:69:eb:e0:a7:4b:40:
b8:47:55:de:75:0c:69:a3:a5:f9:1c:fc:75:f6:de:60:9f:9f:
e7:18:cd:77:ce:e8:0a:cc:11:5f:5c:e2:38:97:c3:73:77:2f:
b3:3e:79:26:7f:44:4a:0d:e5:19:52:01:37:81:46:0b:19:6e:
c2:6e:1c:ff:e9:2f:97:ce:86:a3:82:3f:10:98:5a:9e:41:e5:
b0:3b:9b:22:d0:c8:02:3b:94:78:02:b1:e2:4b:cf:a0:51:44:
c1:cd:c4:c3:0b:72:ca:e6:7e:4d:42:e6:40:7f:ce:55:5d:eb:
57:5a:e0:2c:7a:0d:f1:13:0d:57:d4:55:ff:7f:a4:99:0f:71:
f7:d8:a4:44:d1:f2:f4:14:cb:13:f7:cd:f8:6f:3c:da:d6:ed:
6a:2d:03:31:94:0f:39:e6:20:56:89:48:e4:10:bd:26:55:15:
3d:38:0e:ff:7b:60:46:a6:77:f1:54:5e:35:46:48:95:5d:38:
28:10:be:d9:20:4d:f1:15:cb:aa:c2:6c:95:ff:a2:4a:ed:f3:
65:dd:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:17 2025 by rpki-client