Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json)
Hash identifier: ybzC3/oRp/r1Anc8mWCW9BAAfz4gXz66NWZ7RUSS7zY=
Subject key identifier: 41:7D:8F:F8:C9:6F:0D:80:3D:2A:8D:E6:C1:5A:21:A5:7B:C3:3A:B4
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 0194BCE09E2FE28E21DBC7518C6022844DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
Manifest number: 0E26
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: FTtmmRmZ70bKVPg/cB+jOsznY/rhSNqr8adZt5iZjMs=)
2: wCYSBxlEFn9C3bKzEBin_RqzoTU.roa (hash: HuM1kg7JZIqnFeWlmolggLVBCkZTp9UadWTeRelOxb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9e:2f:e2:8e:21:db:c7:51:8c:60:22:84:4d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=417d8ff8c96f0d803d2a8de6c15a21a57bc33ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:73:eb:9c:d9:89:3f:bc:9b:90:c8:28:f6:
05:6c:a5:39:dc:83:39:bb:5a:25:94:09:3f:13:8b:
e7:15:93:7d:0a:b2:88:76:75:b6:92:e4:73:58:db:
1d:e8:70:1d:9f:f2:8c:20:18:9b:bb:4b:e5:ce:c7:
1f:84:73:8e:af:3b:88:f6:1f:7c:24:3e:e0:04:01:
45:65:29:1b:04:94:72:64:e7:17:2a:8a:19:bf:26:
70:b6:66:f5:eb:65:e8:27:1b:d4:19:77:bc:ff:b9:
57:ef:2b:35:8b:5a:14:a3:2e:20:96:56:bc:e6:0c:
f8:36:ab:6d:55:b4:80:38:67:7d:13:66:4b:cd:c1:
43:32:5e:d9:99:4e:b7:1c:48:39:7c:36:11:a5:9c:
2f:6b:ed:cb:7f:38:0c:5f:a8:1f:82:79:76:e6:19:
d2:ab:0e:74:5a:97:d0:19:9e:29:03:bb:92:bb:7f:
1a:a0:c4:d0:3b:65:83:d2:e0:01:36:5d:89:51:45:
b8:82:b1:60:e3:d5:0b:0d:4d:8c:74:ce:ef:43:b9:
96:a3:b8:40:da:1c:ac:f2:b7:22:67:b3:58:a0:b9:
32:61:a6:0a:91:37:77:de:2d:29:67:95:dc:92:eb:
5b:dd:86:b6:55:f7:90:44:b0:55:c5:9f:88:91:66:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7D:8F:F8:C9:6F:0D:80:3D:2A:8D:E6:C1:5A:21:A5:7B:C3:3A:B4
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6e:de:e1:3a:eb:70:be:ec:8a:df:42:3f:6d:c9:77:4b:3e:
ab:d8:da:47:7b:60:91:23:e9:73:15:ce:96:6d:39:18:54:c6:
00:c5:27:5d:7d:c1:3e:c7:02:66:e3:85:eb:6a:68:7c:6c:c0:
ec:50:0f:35:e4:0a:c7:b9:8b:a3:94:8a:55:a2:a5:eb:76:16:
d8:7a:2c:15:a9:1d:e7:7a:7f:25:43:92:d1:ef:19:2f:14:01:
e5:85:d9:81:f6:04:b1:f9:3f:f7:b1:d5:3c:78:7f:b3:06:eb:
d9:27:b6:2c:8a:a7:74:2e:71:3a:5c:af:69:1a:ed:00:8a:68:
5b:dd:17:48:2d:0e:d0:f7:2d:b5:1e:03:1c:f7:8d:b1:a0:8b:
f4:d6:b0:f7:96:dd:fb:a6:43:11:a4:ad:96:9b:d1:e3:da:37:
16:1f:46:8d:db:2a:5c:17:cf:75:6d:f7:0e:fe:c8:0c:28:2e:
53:eb:1c:22:c5:9a:cc:50:bf:09:10:96:44:ad:f8:a4:dd:c3:
2d:2e:3e:ec:18:6b:97:8b:e4:36:d7:91:bc:0f:be:43:e4:20:
8c:27:9a:3f:e3:bb:e3:64:fd:39:7b:98:cf:f1:1d:a3:19:27:
80:17:55:bb:44:25:e5:45:1a:95:00:9e:61:df:c2:1d:4c:20:
34:56:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:39 2025 by rpki-client