Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: K1HMNI05NeWs0UM2gebZMLGDmSNsqDaLzXW5mFE/E44=
Subject key identifier: E1:74:2E:C8:48:87:ED:B8:4C:2E:44:0E:BD:5B:0B:B9:F1:F8:70:76
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 0194BBCECB2E5D1D45CCEDF1499ED98AAF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: jnOdN3OTLWxVWIfbG0GOGWndFjVCGgjfdXWTsW8XFp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cb:2e:5d:1d:45:cc:ed:f1:49:9e:d9:8a:af:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=e1742ec84887edb84c2e440ebd5b0bb9f1f87076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bb:58:ed:5e:95:1f:c8:b2:0b:5b:6f:2b:b2:
0e:87:c4:71:7f:4e:22:17:99:30:e5:f8:4a:6b:87:
f5:fa:bd:d8:99:ef:70:15:47:2c:8a:bb:de:5f:19:
3a:e3:e5:eb:88:35:f0:f3:97:f7:eb:2e:1b:f0:6c:
35:63:f1:1e:65:d3:c2:0e:68:cc:4c:28:f5:bb:58:
32:8c:b4:c1:7a:b3:4c:66:4e:f1:8c:6d:94:14:15:
1a:00:f6:89:b8:b4:96:81:44:1b:bb:90:86:50:81:
da:1c:2f:4c:79:b5:ad:51:96:3c:59:56:a3:06:8d:
ea:c2:8a:81:7a:04:bd:6a:a2:2b:d0:61:bc:a6:4c:
5d:86:04:01:f6:a7:4e:a8:16:f1:c8:c1:02:b0:35:
6f:a0:d0:4e:3d:18:c0:9d:e0:90:1e:99:84:70:51:
2a:ac:63:99:61:8f:e5:85:db:c4:ab:a8:f4:ba:6d:
19:b8:8d:99:30:cc:d4:59:06:02:f1:a9:aa:d4:7f:
3d:57:db:32:0f:27:71:95:f7:ab:78:9c:29:7c:fc:
a0:1e:70:c9:56:95:15:f1:d8:0b:e3:4f:a0:09:1b:
8c:3b:3e:6d:4f:58:e1:c6:93:3d:4e:2d:0d:52:6c:
83:ca:66:c9:09:db:45:d0:52:de:61:db:2d:47:68:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:2E:C8:48:87:ED:B8:4C:2E:44:0E:BD:5B:0B:B9:F1:F8:70:76
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:92:fd:9c:bb:aa:56:84:11:63:46:e2:85:02:62:b9:62:66:
5b:84:f5:79:2a:62:88:dd:37:9a:0c:56:5d:3f:06:d8:5c:32:
e8:23:f1:92:da:b9:cf:e7:bb:9f:06:35:b8:4b:ce:d5:b1:05:
c1:49:05:05:a3:ea:69:06:7b:91:9a:56:d8:8a:87:94:7b:9a:
53:cb:6e:c7:37:cd:a1:a5:0d:2a:bf:60:29:e0:a4:53:2d:23:
3d:b5:a7:d4:18:48:7b:69:d4:fd:f1:7a:5d:ae:8a:78:e0:24:
f2:53:f3:52:8b:4a:1e:d1:2e:ee:d1:90:58:3e:8f:12:2c:71:
17:88:88:53:5f:99:12:95:8c:6c:65:4f:fd:f9:16:63:89:7c:
ad:33:8c:af:90:d4:d5:08:9e:78:03:41:28:46:f7:6d:3a:ff:
2c:59:76:5a:de:a7:fa:2a:67:6c:87:cb:65:e7:2f:1e:7c:e1:
e8:17:5a:6c:17:94:05:3c:a8:8f:95:28:29:e4:5a:cf:d1:75:
2b:3b:a7:b0:00:19:0d:fd:9d:c3:ff:e5:c2:cf:90:44:55:74:
8a:6a:4f:9b:19:d8:07:e3:3a:c3:c0:2d:00:99:9d:0b:b8:5e:
ab:ea:4e:5a:9c:8b:06:73:55:5b:d8:34:c8:68:77:c5:89:24:
40:e9:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:51 2025 by rpki-client