Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: DSX8deyxp3mY4/ertiXc4Um/MidWOM8KoaqHHYCMDD4=
Subject key identifier: 09:F0:07:01:AF:5B:52:9E:9D:C4:B4:85:D9:C2:E0:57:B0:C8:8E:AF
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 0194BCE0C9FBAB106B67C8FCD9E40C5DBF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0C9D
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: 7do5ig1ofF8dmh9/ChikyDh0JSAVJ41eBYg5MZ02Xtc=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: VSn5uPQ_--q-Fjr7jf4ofg8u7B4.roa (hash: RsxVnXtG87aKUHx4Akae24ZWXtmFpmo4diVbmXsY5Fg=)
4: sDI9J-YeyeYQVMdJrZIugzYeaO8.roa (hash: Ux6lO/XerfQZvaCfnJt98dM1HZ2ISN1O/8TpFC+olZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:fb:ab:10:6b:67:c8:fc:d9:e4:0c:5d:bf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=09f00701af5b529e9dc4b485d9c2e057b0c88eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:e4:5c:8d:02:b0:0f:f8:7d:a0:35:6d:91:
67:89:f8:fd:4e:e6:e7:2d:18:37:60:18:a1:8d:44:
f1:0c:82:e1:7e:e4:1b:1f:f6:3b:4a:ca:af:ea:d1:
50:8a:6c:ad:ce:8a:5f:dd:ab:63:aa:09:9a:dd:1e:
9d:ca:92:77:fe:f3:75:67:7a:1b:81:4a:ea:20:97:
1a:8d:90:7d:cc:7e:c8:1d:af:98:6c:63:4f:c7:87:
a3:1e:a4:25:2b:2b:a4:fa:b1:8f:19:79:c9:91:87:
7f:78:ee:4b:b2:16:41:49:05:2c:73:fd:47:44:10:
22:8d:27:90:b2:3b:23:67:7c:b6:05:70:24:5e:26:
85:95:67:35:bc:3e:38:cf:95:de:5f:35:57:d8:1b:
ed:c1:cd:f2:b8:36:e7:de:d4:b8:e1:ad:41:66:47:
3c:e1:8a:fc:75:12:79:da:31:9f:6a:e5:bb:72:cc:
45:8c:5d:b3:87:c9:21:7c:0d:84:ff:3b:f0:32:de:
6f:09:f0:68:89:7a:be:ec:aa:ea:99:32:d1:9d:ca:
64:d0:1b:82:98:8a:b4:04:98:a6:4f:31:75:d6:e4:
2e:a3:23:8d:a2:7c:dd:81:64:c6:e1:c3:88:1e:56:
a7:93:6a:d6:73:e6:c7:9c:a0:43:9f:84:ea:4c:51:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:07:01:AF:5B:52:9E:9D:C4:B4:85:D9:C2:E0:57:B0:C8:8E:AF
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7d:52:9e:96:6a:ca:c2:10:8b:16:f6:20:30:7e:ba:42:64:
0a:5c:83:9d:50:5c:fa:45:28:04:84:e4:8f:45:2d:be:25:a2:
0c:c1:1e:fe:a8:fb:b2:c0:70:d7:b1:be:5f:9d:ca:70:46:84:
49:05:8c:1c:ea:b2:8c:5e:e6:87:fd:d7:8a:7a:5a:e1:93:27:
b6:d0:9d:f8:ea:b0:11:84:00:96:f3:3c:4e:7f:e1:90:63:32:
5d:3a:6d:45:41:d9:59:99:d8:57:ec:b1:80:cb:a4:0d:1f:af:
03:e9:19:fd:30:0e:54:5d:95:e3:05:e6:e1:a1:9f:ec:0f:27:
4b:08:bc:ce:2f:e1:74:a3:ea:b7:f7:78:58:d8:50:d7:04:8d:
8f:1e:da:73:aa:92:0b:55:5e:84:7e:a2:91:bc:dd:57:13:fa:
0a:26:5d:b4:1d:fc:53:b5:c3:29:bc:66:03:4b:64:3d:d1:66:
5d:fd:9d:93:ba:5e:11:26:05:ba:c8:bf:da:1a:98:2f:fc:5d:
07:9b:03:c5:e3:16:90:cc:2b:b3:30:cd:26:47:7c:0f:f8:a4:
80:b4:56:9a:04:2e:33:01:87:85:aa:3c:04:4c:e7:19:f2:8f:
fe:74:07:34:75:7e:36:ba:4b:d3:1b:73:4f:48:5c:b3:01:f6:
29:f6:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:51 2025 by rpki-client