Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: gt8rLi1P/n/ISqymMDGSD5lRukM4DU3QibEguBGCTko=
Subject key identifier: C0:42:EA:F0:46:14:EF:7D:5C:90:01:DB:A5:43:24:EF:15:10:9E:C1
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 0194BD858B789969086D15E6CDAE2EE064DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 042F
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: L3gVEYY-SNWWzxbViYwIk4pbExk.roa (hash: 7OeYXRKEQzoTeSepGK6jCDC4REoaBlzhDjxELJRYDKc=)
2: aitzywJ0j_dARhrfoxNyxBJoyQk.roa (hash: dC62hnkZaqFuyH9e5I1F2VTnP1nJrO3yupT8VEw+fvg=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: m+dwUTBE8EL/Qu9AiwG8I9UNu95PnEHDN/kMGHleiVQ=)
4: nYyTzI4wXbdYu948I9jdt28hAiU.roa (hash: JZ1SpvEjxZBTPHKIWDf1snwk5k6ZrolIHB7OLNEhoHk=)
5: roSBaoRvAnTIt76C3C33nUHwU3g.roa (hash: l3sqdOHSiVFg15vNcDdfbgIjlCa4lIwHlmQgrqAJ+sQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:78:99:69:08:6d:15:e6:cd:ae:2e:e0:64:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=c042eaf04614ef7d5c9001dba54324ef15109ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:6a:b0:2c:91:fb:ef:22:4d:b0:0f:62:90:
aa:27:e3:bb:70:49:cc:7c:e2:4d:6f:5a:3e:4b:62:
86:b4:f8:da:02:e6:e6:cd:d3:9e:8a:8e:d4:fb:a5:
31:8a:d1:1a:68:82:6b:2e:c4:d7:93:19:1f:ff:ba:
6a:51:7e:63:81:60:02:d2:53:3c:f6:45:39:21:1c:
be:ba:f1:65:ae:33:29:d7:af:a5:7d:c7:72:10:dc:
65:7f:16:93:14:43:5c:da:5d:c1:3d:5e:56:3f:da:
81:10:a7:bb:59:1f:2d:11:9c:2a:ee:88:7f:39:19:
3a:61:06:71:7f:54:ea:5d:31:b6:18:a5:08:f4:c8:
f0:da:e8:c0:f2:7e:0f:3b:2b:e4:60:f8:76:34:be:
1a:f0:02:e3:37:c1:9b:fb:e3:38:f2:2f:c4:57:85:
92:7a:5e:b5:6b:96:60:1a:af:99:5c:9d:be:5b:06:
cf:5c:d3:ff:6f:19:61:bd:f2:30:c9:71:34:30:e6:
30:69:67:a1:a3:2a:2a:07:cf:c7:95:9b:8b:fc:57:
23:31:cc:40:1b:5b:b8:81:e8:d7:39:93:12:15:7c:
ca:3c:2f:f7:03:58:f1:f0:86:c3:a9:43:8a:23:ab:
44:67:f3:e7:40:99:a4:ea:76:c6:4d:de:4c:2b:49:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:EA:F0:46:14:EF:7D:5C:90:01:DB:A5:43:24:EF:15:10:9E:C1
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:da:e0:41:9a:dd:e3:8f:7d:57:ac:de:08:1e:34:35:41:
13:86:fd:97:dc:b3:31:6f:63:3a:85:b8:31:53:bd:3d:0e:50:
85:d4:b0:7c:d2:44:30:2f:e3:df:80:37:8b:3f:4d:21:2e:fb:
b2:3d:e3:ee:69:c0:ef:d1:cd:16:e7:78:c7:a3:7f:e3:42:23:
c0:3f:4a:47:2c:16:da:b1:2c:ab:cc:ac:b0:3e:fa:e9:48:87:
a6:9d:5b:ef:76:7a:5b:9c:5e:b3:35:d7:ae:46:31:5d:88:31:
85:34:8a:b7:27:71:25:2d:6e:8d:f9:4d:aa:ec:f9:36:bb:43:
6a:c6:8c:0c:4c:90:ee:d7:b7:10:cf:07:f1:c3:11:fb:10:20:
cd:76:11:1a:1d:16:1a:9f:40:b6:65:a4:a5:26:d3:9f:2f:b0:
a7:91:0c:5d:25:b4:40:33:4e:b0:8f:26:4f:f9:2a:02:a7:4b:
18:f7:30:8f:64:b5:79:57:36:32:92:6a:be:16:de:49:cd:40:
0c:91:72:ca:bf:e1:40:c0:32:3e:e2:77:27:8a:a0:39:eb:17:
8f:bc:b9:2c:e9:8e:98:1c:fe:b2:a4:3a:00:56:82:e6:c4:fd:
50:6c:b7:01:8f:33:ce:90:32:fd:c7:8d:0e:3b:dc:86:02:6e:
c8:a8:07:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:00 2025 by rpki-client