Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier: GGVxaBIeHolyik30QhvUwnk+gOFhvmXTc6e4XJNwtZY=
Subject key identifier: DB:43:99:44:0D:10:34:EB:B0:17:AD:BD:EA:54:4C:5A:19:4D:9B:5C
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 0194BC3C77B743ECF27D07FBAD50F3BA6FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: UrjMW8KG9uUh4AqUmjMsZgQjkXxoj3aOaxaHxzIvQTg=)
2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:77:b7:43:ec:f2:7d:07:fb:ad:50:f3:ba:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=db4399440d1034ebb017adbdea544c5a194d9b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:73:8d:c5:95:64:43:43:57:e7:5f:3f:46:
ce:03:71:f6:f9:18:17:8c:19:0b:db:b6:9b:33:c2:
a7:03:a3:92:98:32:18:20:c6:04:d1:1e:e1:ef:7f:
b6:93:9b:74:0a:a7:1a:af:1b:fd:94:78:8f:60:2d:
76:59:6a:c3:d3:94:48:cc:be:2c:41:59:ec:a4:c3:
da:e5:42:5e:a1:10:3c:6f:7a:0a:52:a1:08:81:b4:
2e:15:81:47:3a:8d:23:7a:ea:e6:11:78:a2:dc:83:
5f:08:69:1e:73:ae:a1:66:e4:45:e1:2c:a0:3a:bb:
4d:1e:84:61:1a:93:b0:61:fc:d0:fb:88:4a:56:eb:
b3:06:45:2a:ba:8b:1c:95:41:aa:b9:db:60:3f:3a:
52:fb:fb:ad:c6:a0:ad:3b:11:8f:c9:ea:3a:bc:53:
5d:82:fe:25:92:c9:a1:da:ca:cc:87:85:c4:79:3d:
4f:1e:f4:f0:89:50:79:95:4e:7c:d1:d0:05:b2:da:
39:a3:e2:6d:58:20:f5:f5:a5:70:9c:7f:dc:a4:e2:
77:8b:6d:6d:89:02:9b:35:d3:a6:75:e6:e8:bc:71:
7a:38:ae:30:62:d1:81:26:37:59:ae:2a:94:ca:91:
80:d0:49:53:3c:3c:0d:c3:de:57:de:60:95:d4:bd:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:43:99:44:0D:10:34:EB:B0:17:AD:BD:EA:54:4C:5A:19:4D:9B:5C
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c8:c2:0c:41:6e:ba:ce:ea:91:4f:58:4b:45:86:b8:e8:8f:
55:7f:6f:73:3e:93:10:86:c1:ad:6c:01:f5:de:54:e7:7f:2d:
6f:be:66:93:65:74:aa:f9:ae:80:7b:11:84:8a:03:b4:4e:3d:
4e:dc:4d:6c:1c:2a:47:dd:29:ff:46:b7:2a:fe:27:9a:ca:1b:
e0:15:17:5b:2d:ff:4d:9d:35:8f:93:7c:24:f1:22:34:26:5d:
8b:63:a2:0d:0c:99:15:10:7d:a6:29:80:1d:fc:0b:0a:ef:a8:
4d:08:57:9c:b8:53:9c:96:b2:69:f1:f1:ec:f1:eb:0a:74:dd:
0b:02:89:e9:8a:eb:5a:90:a4:61:bd:b8:5e:73:c5:f0:21:bf:
42:5f:fe:6d:16:12:c3:85:91:66:ac:07:28:4b:dc:53:11:1b:
2f:5e:84:1d:d0:3f:89:3f:75:49:0e:27:72:a7:18:f1:5d:5b:
3c:46:99:6e:1f:82:4d:4e:80:33:f2:2e:39:b9:56:b6:16:92:
34:62:b7:ea:a5:2a:70:66:ca:5e:ef:c4:74:f2:6f:c0:ff:d3:
64:0a:23:d6:c2:33:76:8d:56:a1:6f:a5:dc:5c:c2:44:c8:94:
03:a6:c9:d9:a4:90:8d:00:15:d6:40:e0:c8:3a:14:ca:6e:b2:
78:2b:9e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:16 2025 by rpki-client