Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: cDodpt4kkJHBzC4loSqFOjp8FyrkdT5/8OxVgfMXaRY=
Subject key identifier: 26:49:CF:AF:A2:F8:CA:7E:B9:B9:4A:07:C3:05:1C:94:AF:A0:FA:EC
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 0194BBCDD029AAC6FADE880CC0A864B8A7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 023E
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: BEG8jt30VDtvH3Cea2t7qkYl26GUIzXvDUfl1/DGiYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:29:aa:c6:fa:de:88:0c:c0:a8:64:b8:a7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=2649cfafa2f8ca7eb9b94a07c3051c94afa0faec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:cb:9d:c0:51:53:ed:04:9c:b3:07:42:37:
eb:68:5d:72:8a:11:9b:d2:ae:a4:bc:d0:4f:37:07:
4b:93:53:ff:77:ba:ca:fa:72:30:ca:1d:ae:e9:8f:
d1:44:1a:89:93:2f:c5:91:66:56:3f:5d:17:ea:ce:
e4:e2:05:12:cd:ca:4d:89:b0:89:18:3d:ac:a2:82:
e2:fc:09:be:d7:1a:d1:82:ae:e3:2b:42:4b:4e:f9:
31:30:84:06:58:29:a8:74:24:cd:35:98:8a:14:33:
32:c8:ec:22:12:58:ff:96:69:96:bb:a8:ce:0e:0f:
c6:04:01:30:96:3f:5c:98:ee:67:b4:5d:c7:75:2f:
bf:a0:64:83:51:bd:1c:32:71:3a:32:24:26:a6:e0:
af:94:b4:84:1d:61:41:9b:1c:11:b5:ec:d4:1f:60:
38:d8:1d:66:50:ed:5b:fc:2a:96:62:f7:f5:50:0a:
85:6b:b4:e7:23:1f:f8:7e:2f:22:f5:a3:82:5f:c7:
c4:ed:b2:ad:c6:91:cf:e8:38:dd:38:b3:73:8c:42:
61:dd:49:e9:23:8e:20:26:9b:4a:5f:da:22:0c:be:
e5:5b:12:27:b2:31:df:d4:7d:b6:f7:e5:29:92:53:
dd:69:a7:75:55:fa:54:21:38:dd:f3:80:bd:3c:0a:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:CF:AF:A2:F8:CA:7E:B9:B9:4A:07:C3:05:1C:94:AF:A0:FA:EC
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:33:60:de:40:52:40:3c:fe:6e:15:91:26:35:fe:d0:e5:6a:
dc:7d:ca:4c:6c:0e:bf:31:f8:3b:1c:68:6c:66:14:c7:65:b7:
2b:7e:b2:a7:5f:25:c4:63:39:aa:bb:d6:3e:de:0a:a1:97:fb:
96:0f:7e:09:47:3c:97:7e:f3:83:19:8c:be:3a:f3:4d:94:95:
df:aa:77:7e:45:9a:52:15:5a:b0:e2:29:cf:7d:85:97:2c:e2:
00:32:98:05:b7:b4:6e:37:e2:f5:47:15:e4:7b:ca:52:44:2c:
47:f3:31:5a:e5:67:93:81:f8:25:29:20:bd:28:2f:21:0b:83:
b4:17:55:75:e4:26:3d:ca:42:1a:63:a0:1c:29:e6:22:9b:6b:
52:05:38:ec:79:92:40:0f:7a:7f:e2:15:5d:c9:83:ec:c0:63:
b0:00:63:14:2c:0b:20:ef:f0:4b:a5:cb:e8:15:96:0b:25:b0:
65:bb:0f:89:48:71:06:6c:27:3e:d9:a0:4b:82:1a:e1:83:aa:
41:63:53:0e:80:bf:fd:34:db:d8:0c:d0:70:ce:45:a1:59:3a:
94:55:9e:0f:be:da:5a:8d:5b:a4:cb:0d:84:bf:d2:f3:18:5c:
d9:cb:45:13:7e:8b:65:75:10:9c:b4:8c:d0:4f:62:e3:ba:a1:
52:64:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:29 2025 by rpki-client