Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: yQ39idxQfMZPawltmBf7lRijTtzNIlnYZWhWsJZ2w9U=
Subject key identifier: B0:F4:A2:D1:7B:7E:33:53:47:70:43:FC:D5:B3:B0:CF:A5:DC:0B:52
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 0194BD858C7DB963C261714B40EEB49F762C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: iUpLIqrqjY9npB+rlAftQK2VtCnSRuMKwjYjED7S5Bs=)
2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8c:7d:b9:63:c2:61:71:4b:40:ee:b4:9f:76:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=b0f4a2d17b7e3353477043fcd5b3b0cfa5dc0b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:bb:cf:5b:4c:da:54:e7:15:60:8f:ac:d9:
c1:68:d3:4f:f4:5e:66:08:7d:f9:53:49:2b:89:f8:
a3:90:87:45:1a:15:a7:96:89:07:42:7c:dc:67:38:
61:48:fa:69:9d:ea:83:7d:b9:2a:51:10:f5:55:cb:
01:60:f6:61:4e:c4:7f:8e:03:7b:8c:15:f4:71:b4:
8e:1b:dd:ed:c5:50:45:90:4a:6f:cb:e5:45:40:ef:
4b:a1:47:8d:c1:93:2a:27:f4:43:1f:2a:a4:12:33:
35:30:e3:f1:3b:1a:a5:ce:82:78:bc:23:6a:80:6d:
ef:67:71:52:5a:74:61:62:4f:e4:71:fa:8f:c3:05:
b4:47:98:e9:e7:e7:43:9d:d4:31:c7:29:2b:f0:84:
ee:67:a4:e5:c5:d2:f8:9b:fd:26:f5:0f:e9:71:24:
db:a4:e4:65:a6:c2:75:b2:1f:75:a9:85:be:3b:97:
ea:60:72:c0:51:fa:21:3f:43:80:32:d0:d8:1c:1f:
8a:67:bf:99:23:dd:90:dd:d2:7b:24:25:8b:20:e1:
d1:b0:87:34:ed:28:a2:f6:7d:83:59:d2:53:9c:fb:
ff:40:e3:b4:0e:26:70:da:c0:51:52:25:63:d1:7a:
9f:26:80:48:93:30:1c:9f:d5:d1:d4:f4:33:e5:5e:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F4:A2:D1:7B:7E:33:53:47:70:43:FC:D5:B3:B0:CF:A5:DC:0B:52
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5f:f9:be:f7:5b:2e:fd:4a:d9:e3:86:29:5d:6d:a8:38:f7:
43:24:6a:45:18:f8:bb:1f:78:0e:d9:00:e1:e7:74:30:e3:f3:
83:7e:28:52:e3:22:5d:5f:d7:df:b4:08:06:2a:bc:1d:dd:73:
46:63:9c:78:6a:03:4e:cc:1d:ef:c0:d6:b2:03:17:32:a7:c7:
1c:ef:8f:ee:09:d5:8d:cd:ae:84:99:f7:b1:9d:d3:69:6f:62:
73:90:5b:c8:18:b4:5e:b5:ec:b5:79:37:98:82:15:b4:bd:38:
f4:e1:5c:98:e4:01:cf:6f:c6:3c:42:cf:1b:f4:ae:02:0f:56:
24:82:ec:10:c7:60:32:ca:cc:0e:be:0a:72:ce:4c:ae:16:e5:
96:f4:36:cc:6a:66:39:65:95:6b:3e:d7:7a:01:7b:88:17:2c:
0e:78:b0:0d:7c:a8:cc:3a:68:f8:51:23:74:4b:28:33:43:fb:
75:f3:22:61:be:54:d3:89:95:0d:d9:9e:30:72:44:ee:bb:b9:
cc:93:d9:70:79:3a:6e:fe:38:54:87:74:5c:1e:e9:28:81:30:
b0:83:3a:c4:3e:f1:73:11:08:1d:19:ad:98:7b:8e:12:16:30:
3c:8f:4a:24:0f:e7:92:d4:8f:ad:cd:ef:b5:a9:58:c9:48:b9:
a1:24:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:26:20 2025 by rpki-client