Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: 1H7/jiuMuoU/nrqAJDAIaO8XaW+x4oZkk79T1fxTR0M=
Subject key identifier: FB:84:AF:08:C3:8A:F2:5F:CB:89:6A:B7:82:4A:70:94:B3:9E:C6:81
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 0194BD859500691970FDFD12871564BDADB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 0463
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: 4KS9I0RswNhvQUhRipCV9Xq0Clq0GICPaCXYUzN3Z3k=)
2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:95:00:69:19:70:fd:fd:12:87:15:64:bd:ad:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=fb84af08c38af25fcb896ab7824a7094b39ec681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:0e:9f:15:7c:5a:02:a0:06:db:eb:6f:9f:
2d:0a:75:54:53:f9:cb:ff:4a:a9:66:a0:d9:31:d9:
86:ed:27:f1:d2:26:d8:09:cf:6b:fe:d5:b1:45:f6:
fb:9d:ca:e4:8d:47:9d:05:6b:9d:ed:02:c4:0f:27:
66:d7:11:77:c1:65:49:5a:a5:d1:c7:8b:17:9b:ea:
e9:47:71:00:52:90:84:93:f0:7f:a8:55:39:47:ad:
51:4a:11:1f:6e:6b:c0:d5:a5:72:25:8b:85:1b:c2:
c0:2f:66:79:75:65:ef:37:9a:ce:48:dc:7a:a9:7a:
a7:04:71:71:9f:46:7e:29:8d:8a:ad:8f:cc:1b:fa:
88:da:53:38:17:6a:86:4c:cd:19:3b:eb:59:41:c6:
c4:8f:60:81:d9:f2:68:3c:9d:47:64:fd:fc:6f:65:
71:65:47:24:ac:b7:25:4b:8e:c3:1e:ce:c1:53:95:
e6:b8:0e:48:ee:a1:4e:03:49:21:5c:a2:ca:42:39:
7f:1c:47:97:55:e8:3a:08:d3:57:8e:d1:40:de:57:
bf:36:fc:00:1a:3b:83:7d:0e:99:53:52:32:f3:13:
59:db:13:31:d9:4a:e3:a9:af:48:57:dc:41:7d:9a:
d6:11:a9:c7:35:ea:e3:c2:27:2d:e1:a9:e7:0c:22:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:84:AF:08:C3:8A:F2:5F:CB:89:6A:B7:82:4A:70:94:B3:9E:C6:81
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:22:08:4f:5a:75:57:34:c5:b2:09:e0:0b:b8:84:39:9e:e7:
a5:99:8c:a6:2c:41:a3:b6:85:00:8a:43:18:29:85:68:f1:15:
f9:8d:9b:22:6d:e3:53:89:96:22:f7:9e:9a:32:7e:df:d9:de:
f8:18:2b:1b:7f:a2:f0:91:6f:70:67:a8:84:aa:bb:b1:f4:18:
c2:48:33:9b:e6:6d:02:fa:1c:49:3b:94:f0:53:63:19:8d:62:
57:38:da:be:cb:05:76:d5:f7:8b:b8:9e:cb:76:64:65:c4:67:
38:66:ba:92:21:09:df:8a:b9:92:34:ff:bb:fe:7e:df:6f:5d:
94:b0:c6:f4:80:99:fc:16:3e:26:19:1e:57:61:2c:2a:d8:0c:
70:ea:0b:ae:e9:ac:77:bd:d5:24:bc:ab:8e:49:75:01:36:99:
19:f3:b9:bf:a2:d4:af:90:da:10:81:32:fb:2e:e9:76:3a:5c:
b2:eb:3d:89:ae:e0:8a:68:dc:99:a7:41:51:15:45:66:a1:8b:
57:6f:04:c2:87:9d:42:69:c1:48:98:49:35:31:df:e2:73:ea:
ba:62:27:ce:77:2f:07:68:45:3c:df:ea:70:5b:f9:e3:0d:fe:
ca:9a:7a:37:6f:58:04:44:03:94:94:3c:30:d3:7d:7e:ae:b5:
c0:50:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:14 2025 by rpki-client