Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: W1cvSm0vrEXhvS6wL0fiDXDY2WUPGPUvWOXsvzFDYY0=
Subject key identifier: 1C:F6:10:0B:34:6E:D0:50:51:4A:72:82:E8:BA:89:99:DE:FA:CC:49
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 0194BC052052A0848B9CC0EB12784C46552A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 1381
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: Azplvi8U9TYkWmaIipZ0/3BqFrvdy0EZfRZdgtt2tu0=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:20:52:a0:84:8b:9c:c0:eb:12:78:4c:46:55:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=1cf6100b346ed050514a7282e8ba8999defacc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:fb:1c:4e:82:f2:4d:69:b4:78:1a:11:d6:
aa:14:77:a4:73:f8:73:02:15:ff:5e:3f:84:ca:6f:
a5:57:0f:9c:d5:e4:5f:85:4e:5d:db:6d:72:a1:e8:
34:73:ae:95:8e:2a:80:38:91:93:28:ee:82:f8:0d:
01:10:09:90:cd:ee:17:6d:be:6c:c3:7e:ae:71:be:
19:ae:4e:38:91:49:7b:29:6c:46:24:d4:80:84:26:
10:cc:50:8e:f8:7b:20:2e:ae:8d:7a:6d:a2:87:c9:
89:f1:d1:2f:d2:30:43:d9:6f:52:37:95:fc:5d:31:
aa:b5:b5:c8:78:bf:43:a0:1d:da:12:08:bf:45:e6:
05:2e:05:79:a1:f5:1b:3e:82:37:00:1a:0a:8c:b9:
97:56:c9:7d:51:44:54:5f:45:e3:8c:4d:ac:0a:d3:
56:df:4a:86:32:14:c5:e1:38:60:4e:43:6c:37:7a:
fb:dd:b8:fd:9d:a7:0e:21:d5:b9:ff:24:ae:4d:61:
fd:c8:5a:5c:0f:cd:7c:a4:e0:39:8e:1e:45:c5:84:
aa:25:84:d5:ad:13:48:80:82:c9:c8:57:ee:3e:05:
ed:e6:20:fe:6e:6a:1b:50:3c:4f:4b:51:11:ef:4f:
3b:fc:11:ea:53:df:5a:f7:e2:ca:c3:0d:74:84:85:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F6:10:0B:34:6E:D0:50:51:4A:72:82:E8:BA:89:99:DE:FA:CC:49
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:9f:75:53:ce:e4:b9:7b:cd:38:d0:e4:45:44:33:d0:d9:
6f:9a:8c:60:73:80:ec:c8:57:d5:87:7c:f9:79:72:74:28:28:
56:38:c6:db:21:96:76:d8:51:3a:ed:9e:56:2c:15:d5:73:12:
88:a5:e0:1f:3d:44:40:77:41:f9:ab:63:33:a0:03:2a:00:65:
fb:ef:d7:5d:00:6d:c1:c8:f9:8d:59:bb:27:99:c7:60:6b:ee:
ab:e7:18:de:f8:c9:73:aa:4c:96:53:43:ab:73:07:47:27:ae:
25:9b:37:89:fc:66:11:8f:7b:30:0c:8a:21:3f:18:10:ce:d4:
41:87:e9:79:7a:21:f4:c4:0a:28:ee:8c:65:4b:8c:92:69:91:
58:64:5c:c7:cb:92:98:4f:37:5d:b8:f4:73:16:0b:3d:24:07:
5f:04:86:4f:44:66:6c:15:5c:a9:2e:2e:26:dd:23:0c:33:19:
cf:25:8b:3e:c6:c2:a1:b8:c2:3f:74:45:df:ac:0b:a9:ac:6d:
0d:24:1e:ba:d8:ce:00:8e:72:1b:de:53:cf:a5:2e:fb:3e:b3:
55:32:66:77:e3:bc:f1:0b:b7:34:47:b5:17:9a:14:e9:b0:a6:
fa:81:1a:88:35:27:85:52:64:e0:55:f1:7a:37:ed:08:78:95:
08:52:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:04 2025 by rpki-client