Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
File: eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json)
Hash identifier: tXRUJlg9D98keEMoySx9EyCdMTi6RYaLjYA8ZxdR8+A=
Subject key identifier: 35:6D:9E:FB:BF:B7:41:AA:F0:EE:CE:50:74:25:6F:29:21:A3:73:35
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Certificate issuer: /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial: 0194BC04D9D80A8FD7B24EA2613254BF4150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa (hash: ZKT/8JUqtRAisTydFecUdHw72JiTE01MYJo6LVg8rWw=)
2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: wx/983G0+QWLZi3X1rs1brlLAgsxyAOlbtxns8YFfVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d9:d8:0a:8f:d7:b2:4e:a2:61:32:54:bf:41:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=356d9efbbfb741aaf0eece5074256f2921a37335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:6c:0b:e4:45:07:cc:f2:6c:1b:40:c2:3e:
e3:57:6e:06:8f:1f:61:09:78:41:90:c4:19:e8:ce:
e9:c3:c5:45:08:f2:a6:36:98:27:3c:fd:63:18:34:
b8:b4:cd:c8:bc:4a:16:eb:b8:16:58:80:69:85:44:
4b:7d:30:78:a5:8e:53:ed:12:c4:0d:b5:5f:a3:dd:
54:d3:2f:73:4d:12:04:1f:d1:59:ef:7e:b2:1a:29:
89:6e:98:3b:27:1e:53:b8:c5:09:5f:44:ca:47:09:
36:4e:b9:90:6e:98:c8:bc:7a:08:43:c9:f5:0a:f1:
12:84:4f:93:74:94:36:9f:f3:f3:2a:7b:46:65:e4:
8f:76:93:96:cd:94:9c:d2:c5:9a:81:56:a5:0b:36:
eb:b1:b6:62:0f:82:8f:55:1c:6d:a8:87:c4:0b:da:
12:e9:1f:2e:e7:c3:02:8f:76:3f:be:92:98:80:de:
1a:ce:2c:1e:c3:ca:38:35:5f:0a:ed:de:40:8f:0d:
b8:70:d4:80:ee:60:9b:c3:04:90:bb:73:0b:df:ea:
1b:51:22:f0:44:f8:66:23:eb:9e:a3:c3:bd:bd:0a:
9c:9f:1c:bf:c4:38:ed:b2:44:63:e3:22:96:94:2b:
10:08:d4:d3:61:e8:2a:51:93:4f:d3:af:06:42:75:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:9E:FB:BF:B7:41:AA:F0:EE:CE:50:74:25:6F:29:21:A3:73:35
X509v3 Authority Key Identifier:
keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3c:d4:99:bf:6f:b4:24:1c:c7:b4:d4:4f:db:ee:ab:3e:b1:
f2:6a:3c:47:c3:c0:b0:83:6e:df:0a:27:49:1c:c0:40:02:ff:
a5:a0:a2:32:1c:03:67:01:5b:e7:91:40:33:09:5b:05:1f:43:
28:3d:89:d9:97:64:ad:7b:84:ee:6f:70:cd:89:8f:f6:bb:af:
25:1e:44:47:cf:4f:19:e8:18:ef:08:81:31:d8:29:7d:28:de:
33:02:58:6e:19:59:5f:e7:14:72:b3:d1:df:bc:32:1e:dc:74:
31:df:84:12:0b:68:49:c9:ca:62:94:54:1a:90:f9:e3:1c:88:
ac:b8:71:f7:0a:65:97:0c:e3:22:66:f0:27:a1:db:8c:95:3f:
9e:3f:17:47:dc:a1:64:83:da:3a:00:09:11:52:d0:2c:59:65:
a2:a3:31:1a:9e:f1:3e:01:1a:3c:23:3d:4b:23:64:e5:78:2c:
28:78:07:78:1e:15:15:d1:69:b7:a0:7f:88:45:89:09:a0:1b:
65:9a:c3:01:7f:91:37:e5:5e:cf:90:92:d5:f6:a2:7b:f3:f1:
a2:15:df:bf:18:46:3d:eb:63:47:01:b1:f5:e2:b2:2f:e7:c0:
b5:c8:9d:05:3c:4e:f4:e5:48:d4:e9:ae:74:4a:10:4c:7e:c3:
bd:d0:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:28 2025 by rpki-client