Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: zhjgL//slNjceIKVTlAu+uBvt8hivsrhMBHfXpaJUJ8=
Subject key identifier: 04:8F:A6:49:6B:EE:12:9F:03:CC:6D:54:2B:BB:72:29:33:92:6E:8C
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 0194BD4EA063E341EECBDCA16F0A08F8A85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: ODSZg2mY0UuHOaX6lVBGobvDyVn6G8inO1vE9wWOq9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:63:e3:41:ee:cb:dc:a1:6f:0a:08:f8:a8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=048fa6496bee129f03cc6d542bbb722933926e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:1d:77:9f:66:e7:1f:cc:c1:ef:6a:4d:f0:
6b:c1:1e:01:8c:81:35:ac:ab:42:29:77:88:bc:d7:
81:99:0c:13:d9:7b:6f:93:4b:1e:74:ae:e0:8c:71:
aa:61:38:8d:37:10:f8:01:02:e2:df:09:fb:6c:ba:
fa:e1:cc:49:3b:59:ca:0e:e6:18:4c:05:90:fa:c0:
fd:fc:d2:60:e5:2b:43:7b:87:b5:5b:4e:e0:53:ec:
ac:09:ac:c2:2d:d2:52:77:2f:9a:a1:78:ec:e7:20:
d1:07:d3:b2:b8:47:d9:0f:7c:0c:d2:19:d8:e4:7f:
55:b0:a2:04:48:4d:f1:2e:b8:ea:1c:55:82:3a:56:
9b:08:44:67:47:91:cc:ec:39:a3:87:2d:ff:14:d0:
ac:7d:41:1d:d9:b7:88:d5:2e:0a:dc:fd:61:42:97:
d7:74:dd:44:25:c2:c8:11:14:25:77:b5:84:aa:41:
14:40:b5:04:2e:6a:23:cf:97:64:f4:77:e4:33:04:
5e:69:5e:05:0f:38:fe:4c:0b:7f:c9:9f:8e:26:5d:
3a:07:c6:33:9c:a7:8f:d0:96:7b:17:ac:32:a7:51:
c7:1d:dd:5e:c1:b7:04:d8:b9:fc:4c:63:8a:d8:c1:
94:6c:08:20:40:05:8b:d5:25:19:00:82:d6:f8:a1:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:A6:49:6B:EE:12:9F:03:CC:6D:54:2B:BB:72:29:33:92:6E:8C
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5f:18:d9:4b:07:29:cc:f6:3c:7a:d6:76:b8:4f:86:9e:46:
e8:65:74:dc:8c:be:c6:a2:80:ee:3e:ad:e0:dd:f5:81:1d:78:
fa:c2:4e:ee:1a:94:e7:31:91:ed:71:3c:cd:01:56:42:d5:e6:
15:ff:85:52:46:b4:33:c6:c7:b9:62:33:aa:52:01:5f:d9:00:
84:24:1c:73:20:3c:76:70:97:21:f7:8e:5e:ee:91:f9:1c:ec:
06:a2:28:02:ab:33:02:01:ef:4e:50:84:c7:f9:50:e4:05:e9:
25:79:ae:14:d0:87:44:a4:ce:7d:e2:67:57:3e:0c:0a:be:74:
01:fb:37:33:75:66:e9:83:fc:70:0e:b8:b4:53:c9:55:7d:75:
67:dd:96:97:9b:4a:d1:f8:74:57:59:e2:8e:ae:52:7a:bb:b2:
2d:3a:1f:94:ca:6b:1d:c5:a1:99:1d:54:47:ce:c6:62:e3:a2:
91:a6:15:0e:f5:83:9f:f9:97:91:f6:6b:a7:09:04:a3:b9:9b:
b0:ba:de:b8:5c:c6:6d:b8:96:c9:0a:f7:a1:5e:4e:4d:02:1e:
35:4a:ff:80:2d:0b:06:1f:a8:52:b8:c4:2d:93:76:e4:f4:1c:
02:a1:08:1d:ab:80:2d:1d:11:aa:95:57:f3:f3:c7:56:12:bd:
ab:92:d4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:09 2025 by rpki-client