Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File: eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier: um3u6vHo5m3JB/2eii+bLAaPfxv+6tU1lN7rRTQ/xE0=
Subject key identifier: 1C:D1:F5:D0:51:25:35:68:68:E2:DA:64:8C:60:4A:D2:04:94:30:67
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer: /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial: 0194BD17F543B9F924E896ECB23673BFE258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number: 0311
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: zLRBcHHgA38T9Rd60he96rC8XGWQsLztHDamMYzWhUk=)
2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f5:43:b9:f9:24:e8:96:ec:b2:36:73:bf:e2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=1cd1f5d05125356868e2da648c604ad204943067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:a4:f3:fd:65:23:da:d2:35:ef:ec:5a:1d:
85:d6:4e:c5:45:04:6b:0d:a4:a4:5b:1a:44:04:ab:
57:29:67:a4:da:eb:99:7a:3a:bc:b3:5e:e0:97:c0:
e1:61:a2:2b:e6:74:86:5c:bd:9d:4e:2f:8b:a8:11:
18:cc:1e:26:89:e5:fb:ba:3c:a9:1c:1a:3b:7a:b8:
25:b8:74:50:5a:c1:ef:be:ff:4e:28:41:51:ee:b6:
f6:6e:00:88:f4:ab:b9:98:4a:6b:20:0a:e7:69:66:
ff:4a:a7:42:97:9e:7f:32:5e:55:eb:b8:1e:d7:df:
9b:22:48:b5:18:ff:7b:5b:b8:d0:bb:f4:92:fa:22:
92:41:f7:65:f0:a3:87:5c:26:6c:6a:0d:9c:73:72:
92:19:83:fa:50:ac:49:66:b5:a6:7d:6c:50:e0:dc:
94:06:83:68:bf:63:fd:74:89:ee:88:3a:3f:01:ae:
d3:00:e5:2f:07:24:2f:5a:4d:e2:a6:d9:af:ce:bc:
46:46:76:21:82:f8:1a:8f:aa:1f:10:cd:97:1e:f7:
34:77:78:ae:81:42:0e:4f:19:f0:b7:0d:61:61:d1:
14:7f:17:5e:70:32:03:23:2d:05:32:5f:84:1f:e4:
2c:d3:19:68:50:1a:db:78:68:21:a3:bc:6a:4c:d6:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:F5:D0:51:25:35:68:68:E2:DA:64:8C:60:4A:D2:04:94:30:67
X509v3 Authority Key Identifier:
keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2d:44:17:fa:3b:a0:0c:0e:90:a4:1f:4f:2a:d0:da:be:aa:
0e:fc:8a:b3:41:82:7b:ec:50:59:e6:55:96:3b:83:ac:83:ee:
11:e6:2a:ba:0b:87:d3:a1:16:88:ac:ca:5a:41:aa:ab:cb:71:
96:6b:3e:9c:0b:d4:aa:80:68:22:e9:e9:e8:bf:0a:de:09:5b:
66:52:c9:b3:c9:1a:d9:76:6d:f9:c8:fc:33:f2:4c:e2:21:65:
ff:3d:9d:63:20:31:51:df:d6:d0:b8:b1:3f:49:44:d8:b7:aa:
9e:74:27:a7:ab:1e:f2:d1:41:66:e6:00:84:a4:c3:43:00:95:
30:66:a9:68:84:07:0a:43:42:62:51:bf:6e:1d:a2:18:5d:84:
14:ce:6e:b0:3a:b2:e7:f2:bc:41:f6:bf:b0:d6:e1:24:80:59:
6a:3f:a9:60:5c:bb:9f:ea:14:ac:1d:3b:f5:0e:0d:de:2e:36:
6a:b5:75:48:bf:c0:a1:91:b4:5e:55:33:ac:a2:5f:f0:23:8e:
13:ef:15:fa:a9:54:f5:c4:5f:fc:3b:93:68:67:0b:26:c2:79:
25:52:50:c2:a1:95:c5:ca:ca:c9:21:a2:98:3d:03:85:c7:1f:
28:ef:b7:3b:dc:60:5a:89:ac:0d:5b:59:de:05:b2:be:42:99:
03:8d:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:54 2025 by rpki-client