Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier: zHogxMM616UrDWndknNZWf1aMXaKXejN4Sy6Jm0fz/A=
Subject key identifier: 01:D6:FD:36:D8:99:BE:1F:51:2B:A7:7B:48:9B:9E:3D:22:6D:D2:11
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 0194BCA9A23C515E43C80417E627ACD0C98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: 6yE_967aOtyT7SA3eu1HAmy1ZXE.roa (hash: Ft4GA1hEti4msbpisEL13lGMrXqm6xv7Y4COm/rasXg=)
2: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: 0lQlxZ31Vvmj0W6RG+TMC1v/h1lTNW7C4JQaFPywXlw=)
3: slEa5UmLy7uclTfFj-q9FjlKerU.roa (hash: 5+Nl0WOxV28qBWNFtIb46w9H3Fv63geuF1o8ltl50q4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:3c:51:5e:43:c8:04:17:e6:27:ac:d0:c9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=01d6fd36d899be1f512ba77b489b9e3d226dd211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:f4:01:5e:7d:d5:d4:fc:df:04:66:95:91:
64:a4:e4:9e:88:a2:d2:e2:32:82:c5:1f:33:bc:02:
01:15:56:61:93:76:5e:86:8a:6b:84:9e:54:d9:37:
a4:fd:70:27:69:ab:d3:b4:8f:35:18:83:87:96:00:
f6:64:11:bf:e0:71:e8:46:9b:bb:28:8d:dc:6e:03:
cd:45:c5:2c:60:64:53:e4:c3:fd:d6:a7:d9:db:95:
0a:d9:dc:ea:0b:f8:f4:56:a7:16:e9:59:42:04:cd:
f3:f8:46:3a:27:5e:a0:f8:87:e7:f2:a6:da:57:e7:
39:3c:d1:d3:d7:a6:58:30:ba:9e:6f:d6:f8:fa:ae:
2f:88:6d:68:77:76:8c:54:03:e8:64:ea:ea:42:e6:
06:a6:d6:7a:2e:00:4f:48:3e:d0:25:99:9c:11:4d:
e7:ca:cb:7d:98:a5:cc:67:1d:64:a7:39:7a:2e:f8:
b8:6e:ee:22:97:89:68:e1:bf:3f:40:0b:a6:e8:c4:
0d:38:d9:f5:63:bd:11:c4:af:8a:2f:db:40:06:9b:
cc:8a:58:25:2b:07:a5:f2:94:19:8e:ca:b7:8f:c6:
88:a6:cb:83:f2:af:76:13:30:21:ea:a6:5d:8c:83:
1e:04:80:25:77:8c:34:d8:38:86:8a:d8:e0:ea:4e:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D6:FD:36:D8:99:BE:1F:51:2B:A7:7B:48:9B:9E:3D:22:6D:D2:11
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6a:7a:2d:6f:2d:a1:1d:9e:99:3f:ca:0e:be:9b:84:02:33:
7a:01:81:dc:b9:4c:7a:a3:84:5f:43:40:6b:30:b4:59:39:9e:
f5:d2:f8:ee:80:fe:30:9c:ee:bb:1a:df:37:97:4f:07:a8:f1:
c1:fb:af:b9:a2:bf:6b:ff:76:03:86:06:27:2b:37:f6:0b:ce:
21:f4:ab:fd:fe:d7:0e:0d:d0:71:e1:b6:13:b8:5c:1e:c1:8b:
7c:08:82:5f:56:2d:52:98:81:fb:5e:40:da:6c:12:8c:11:b8:
8f:0d:b7:75:36:de:12:5e:74:9e:d1:a0:4d:6c:bc:56:1b:24:
aa:5d:6b:af:2c:40:4b:1f:68:ff:44:b5:b5:ab:19:e0:21:17:
d2:6c:ab:1d:43:22:06:e1:96:5d:5e:7e:7f:1c:eb:db:c1:12:
0e:f4:db:56:92:55:8a:ce:f8:56:d5:20:eb:39:b6:f8:c9:10:
af:87:1a:5c:79:77:c0:35:b4:db:c9:07:7d:5e:33:1a:d7:4c:
57:bd:25:52:d6:4a:57:6b:1b:82:10:bf:4b:1e:4e:c1:46:42:
ab:be:00:dc:3b:70:b9:93:4e:72:95:62:72:a9:87:95:3a:31:
fa:fd:09:06:de:97:96:80:1e:9e:08:57:ce:41:3e:d3:31:81:
9a:4b:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:39 2025 by rpki-client