Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File: eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier: cgVtlsOOz2E5W28TVGWS/74PM/hRUsOD2G8YBrLAKpo=
Subject key identifier: 9D:30:DB:97:E8:25:DD:34:3B:7F:79:02:8B:B9:0E:8D:74:99:CE:A5
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 0194BBCE4687549A0DA2714725BF5E8FD64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number: 12D2
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: R0qJBQzaMA2ce4KOZ3SUGrxykumZV0uotWrwYQFb1tU=)
2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:46:87:54:9a:0d:a2:71:47:25:bf:5e:8f:d6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=9d30db97e825dd343b7f79028bb90e8d7499cea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:d3:fe:63:a6:ec:0f:b4:90:b9:45:27:f8:
45:2a:03:3b:cc:91:e8:e6:6d:f1:86:d7:0a:f0:f3:
0a:8e:39:d1:ee:79:35:1e:7b:31:c3:83:5d:04:1a:
17:8d:3d:26:e7:87:12:fa:c2:91:1e:b6:e5:e4:98:
22:fd:c7:50:31:1e:21:4f:2d:bd:f9:aa:a9:ba:34:
ff:2f:51:94:11:79:77:16:9f:70:74:60:0b:e0:ad:
4a:a0:3b:37:52:74:13:d3:ec:8e:1f:55:43:a0:3e:
22:8f:c5:4c:de:9e:a7:fc:d9:58:fc:4e:6a:f8:5a:
e8:37:83:3b:9a:99:4f:33:ef:1b:52:fe:18:ae:20:
4c:11:08:27:a7:25:5f:4e:76:d2:f0:5b:5e:a3:c6:
c0:cc:61:20:e9:e6:bd:f6:08:63:4c:4a:2a:c5:89:
a2:11:21:11:f5:ef:53:ba:8e:4e:60:38:87:8b:3e:
04:c0:8c:d8:f8:23:22:84:d0:80:c1:98:d9:f6:29:
6c:39:d6:95:0d:55:d2:e6:30:4e:6d:cf:4d:71:53:
94:ac:e5:da:42:91:f8:7f:12:37:a4:5c:91:db:55:
8f:a2:08:5d:b6:ed:94:04:e8:c3:33:04:5e:13:8f:
8c:82:ee:4a:63:fb:16:90:15:6d:75:04:f2:e2:a0:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:30:DB:97:E8:25:DD:34:3B:7F:79:02:8B:B9:0E:8D:74:99:CE:A5
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a4:4e:9a:bb:5f:f2:4c:cf:e6:85:f9:74:4d:43:26:9f:8c:
eb:60:1f:bc:be:31:78:71:a8:d8:50:bd:15:b1:3e:32:0b:55:
30:2e:f5:d1:82:b9:70:30:c1:5c:02:ec:3d:d8:4c:76:6d:b5:
51:44:3c:b8:a0:5c:11:34:95:c2:5d:cc:4d:6c:97:83:88:84:
4e:84:07:24:bc:04:c5:48:5c:24:21:51:9e:ed:3a:d5:a1:41:
23:20:9f:57:f4:51:c3:0b:a1:da:7a:53:63:da:98:48:67:6a:
73:5f:73:a7:e0:8f:72:a0:33:a7:2d:72:e3:f0:19:7b:de:f1:
1b:c5:46:1d:08:42:e4:1b:70:ee:8a:0b:26:9e:ef:9d:c2:da:
c0:32:8f:49:6b:e1:d5:55:63:77:1b:4d:0a:b1:b9:7f:64:a6:
86:86:ae:a4:1c:a5:65:10:97:40:c1:fb:d5:e6:c9:b8:ca:d4:
fa:8b:99:34:7b:d7:ec:f5:b0:f4:3d:8e:9d:82:aa:08:8d:8c:
03:b2:1a:3c:a9:6c:17:ea:b7:4d:5d:de:be:f1:60:d3:74:f9:
92:ea:04:70:38:c2:97:44:fe:6d:ee:69:04:b9:c5:a9:79:85:
71:b8:04:74:fc:74:cb:e5:b6:d6:d2:3e:2b:bc:08:ee:3b:9c:
eb:4b:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:56 2025 by rpki-client