Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File: eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier: azDbtsf36a8Ks2CQzdyDHJwfAA3Ws6yVvch7NnsuES8=
Subject key identifier: 80:86:46:B5:8F:29:81:F9:16:1A:CE:FA:65:51:E8:D8:71:15:65:43
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 0194BC3BDF33BBC8EAC07750F311A8D1429C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number: 0298
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: 4b9rby7Ocmf4HBhfhBWMC2Xy/tMzBHKlydDmb7329lQ=)
2: goX035Hv0elR2rCiATveFLxA4oU.roa (hash: HjIa5HxfoLHz1fNA8faR+9nXcT/qazkCcjt+nSvQMlE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:33:bb:c8:ea:c0:77:50:f3:11:a8:d1:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=808646b58f2981f9161acefa6551e8d871156543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:56:03:d3:a7:93:27:90:32:17:63:45:f7:
23:a8:e9:e5:63:e4:25:a0:3c:bc:23:bd:02:b8:b1:
d9:c4:1f:30:c7:eb:23:0d:c6:80:88:8c:68:bb:9a:
e9:9f:7a:d2:7d:2d:fd:2d:56:1e:b9:1b:72:1e:0a:
08:93:82:79:1f:99:b3:02:20:66:f6:42:0c:dc:a8:
4c:33:b3:52:ea:cf:07:93:52:fd:31:0c:0d:31:68:
a0:21:b1:57:cf:49:6a:0a:50:a0:59:73:86:ca:74:
bd:99:10:c2:85:df:2a:92:79:3c:af:cd:85:31:50:
7b:92:13:7f:5a:77:40:78:85:ee:30:df:e9:c5:0f:
b4:f7:63:0c:ed:04:ea:37:10:d7:04:a2:5a:fc:49:
c1:ff:ab:f0:71:ce:7f:e1:e6:24:a3:90:da:db:df:
ed:e7:f4:54:d1:87:86:97:93:cf:c2:cf:d6:4c:0b:
56:93:a2:cb:ca:20:90:1d:45:7f:43:58:20:65:00:
7b:da:b6:dc:4c:51:f5:54:24:9c:fd:a6:c3:2f:ab:
1c:eb:88:ee:02:02:45:ff:3e:33:d1:f6:8a:c2:95:
20:1c:1d:b0:ea:88:a4:4b:c9:16:c7:3a:8b:b4:a0:
27:76:ee:aa:0e:5a:2e:65:ac:4d:c1:45:9a:a7:b1:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:46:B5:8F:29:81:F9:16:1A:CE:FA:65:51:E8:D8:71:15:65:43
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:22:e0:9f:9d:6e:77:cf:13:e6:99:11:09:49:70:37:7f:59:
66:d9:94:19:06:ce:dd:d6:2a:b8:05:73:af:0a:42:ce:21:fa:
43:c3:70:dd:3a:ca:af:83:9e:aa:79:3a:34:f2:2b:0b:86:83:
0b:69:5c:d0:fb:a4:3a:c2:2b:89:26:aa:74:b2:9e:75:8e:21:
78:21:58:1d:13:5d:08:d8:61:12:24:97:e3:14:6b:9b:8a:6b:
f1:5f:56:35:02:f7:24:78:a1:ff:43:62:bc:b9:32:68:01:26:
ca:5b:be:c5:a1:f9:36:88:1e:35:93:03:07:96:28:1f:93:a7:
44:1a:5a:a1:60:0d:46:40:ec:0e:9e:87:71:43:3c:b0:9a:af:
ee:8c:80:30:70:06:87:f8:fd:c6:ac:12:ec:5d:ae:60:fb:21:
86:18:67:09:83:b1:b3:88:01:1b:f1:ee:7a:05:fb:62:2f:56:
8b:0b:e8:d9:53:ab:4e:9d:18:15:63:f8:54:0f:03:b3:ae:60:
ae:08:bb:f8:d0:d9:04:be:cb:de:5a:05:09:63:35:56:02:f0:
79:cd:cf:ab:34:0d:af:06:f9:70:82:bd:95:1e:05:34:d4:c2:
ae:5b:72:4d:8e:6b:30:44:fc:1b:bc:34:fb:c8:3c:11:1f:47:
a7:2f:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:56 2025 by rpki-client