Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier: RR3XtpVVLg0ktLcCKDl0tkBg2I++qnbGP1UQng5FWW4=
Subject key identifier: BE:68:5E:DD:D2:2F:CF:21:6F:AD:A1:B8:85:90:3C:81:92:1C:1B:F4
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 0194BC3C1AACD40508C43E16E0B3B0A4C808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number: 0BD7
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: co/EcMsi7hshlJZXH8aJ9IA74MJl9YtCuAGNnaUSjW0=)
2: lTwE90XrCNGA5eJTFjnSjOK1bSM.roa (hash: /sO0aTlcuRH7YD2SVxbEfIzYX6MelmZ8Ycirgk+wG1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:ac:d4:05:08:c4:3e:16:e0:b3:b0:a4:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=be685eddd22fcf216fada1b885903c81921c1bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:bd:b0:ac:e6:ac:91:04:e8:1e:1b:60:59:
ca:f5:84:54:11:9c:e1:64:ee:57:a5:46:9c:9b:08:
d5:a8:e6:87:96:c7:55:44:b1:47:7d:4b:8c:b8:8f:
63:4c:35:5b:5b:28:2d:ab:3d:6d:b3:28:1d:a0:f6:
f1:ea:0c:ba:06:e7:d0:a6:25:8a:f3:ab:23:15:69:
c5:89:2b:4b:f1:df:3e:ec:7a:5a:e3:14:10:7e:4b:
d3:f0:fb:fe:75:64:6a:00:60:36:b6:b5:8f:b7:ae:
53:2f:bf:6e:1f:bf:fb:18:05:1b:ab:66:d7:10:34:
17:f1:f1:8a:c0:3d:d5:6d:ea:a6:c9:ca:fe:70:80:
0c:3f:85:f7:74:0a:19:ae:c1:32:5c:28:54:1d:3b:
26:3b:d8:e7:2f:e6:f8:e6:46:f5:00:59:c0:18:3c:
a8:23:2e:70:5f:a0:c1:19:12:7d:a9:85:8b:58:58:
a1:7d:de:fb:66:bc:d9:ee:b6:33:67:78:2e:c5:9e:
b9:6b:82:ba:78:48:d1:e4:cd:29:06:5c:6a:ee:5e:
84:68:62:5c:3b:c5:7d:81:6a:55:be:58:90:3a:1c:
eb:b4:c3:fd:45:bb:25:79:f4:c6:d0:77:38:24:e5:
bc:83:5f:2d:0b:05:c5:3a:55:43:06:1e:61:80:aa:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:68:5E:DD:D2:2F:CF:21:6F:AD:A1:B8:85:90:3C:81:92:1C:1B:F4
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a4:53:54:22:ad:88:bb:84:44:88:50:fc:e6:db:ce:16:42:
f7:c2:13:97:ab:90:da:aa:09:df:17:0c:55:2b:0f:a6:3d:93:
ba:f6:68:c7:e5:a5:e8:16:57:96:27:36:59:61:ca:4b:33:94:
c4:f6:85:5f:78:1b:a8:22:f3:1f:b4:cb:14:7c:38:e9:2c:3a:
0d:d1:91:fc:2a:5e:5d:ec:9f:c6:7a:9c:f3:60:c2:95:7e:c3:
8f:f7:94:84:77:66:ce:f1:dd:d7:9f:7c:1e:c7:c2:8a:13:c1:
32:e8:fb:6a:b0:51:bb:bb:ef:07:2f:39:44:cc:a6:be:5a:44:
be:a6:05:d8:51:36:24:71:5b:6b:23:eb:bf:af:33:9d:e7:a9:
82:38:0f:25:7c:f0:69:46:5f:77:c9:1c:a5:7e:c3:2a:f5:f6:
a8:ad:79:8f:dd:d8:89:a5:bb:cd:1a:e1:81:12:63:9d:cd:8b:
62:72:1c:c1:a7:83:21:7d:91:3f:f6:96:58:43:29:7b:3a:5a:
aa:de:14:3a:59:1f:c1:91:9f:7f:b1:4e:a2:8e:52:9e:42:8e:
99:c4:15:fa:9b:b7:12:9b:12:ae:e1:6d:09:c6:d8:3c:fd:65:
60:21:8b:c8:3d:7e:ab:42:0c:3b:42:f3:74:98:9a:67:9d:94:
18:10:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:51 2025 by rpki-client