Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: F3iJBfx0QFXPyEtysPjqVyjuc8mfxG9N2xCLwOMlPx8=
Subject key identifier: B2:01:70:B9:0D:E7:7D:A1:F8:92:E9:CB:11:E1:8D:8F:F3:BA:6A:60
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 0194BBCEC72B722D22EA7A1BE800B063C946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0B43
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: c4jnWKiyl7CFXkKM888cgi/ngfVdTShpY5pqRUrEgVc=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c7:2b:72:2d:22:ea:7a:1b:e8:00:b0:63:c9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=b20170b90de77da1f892e9cb11e18d8ff3ba6a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:13:c4:de:0f:cc:fd:11:e8:c0:44:ae:d7:
6c:93:fd:8e:2c:ca:0a:ac:4b:fc:35:e1:7e:09:7e:
14:bc:98:84:05:c0:0c:ed:af:29:ae:26:b2:54:1f:
15:9b:6c:24:66:4d:08:36:39:a5:95:d6:a4:84:f5:
fe:28:09:76:43:62:69:ea:d9:7f:cb:bc:fe:25:c7:
90:50:d8:64:9c:e6:68:1f:cf:9c:2b:0e:ef:20:ed:
c4:7f:28:11:9d:71:c0:c5:90:d6:57:94:ee:34:07:
36:c5:dd:f8:a0:08:41:5b:12:c5:e6:98:dd:4a:16:
9d:8e:2f:0d:55:69:24:55:c9:1f:62:95:d5:95:59:
16:8e:eb:8b:4d:51:51:77:59:45:9d:b4:35:a9:b3:
a7:c8:b1:91:7a:cd:7f:b9:91:e2:9e:65:5c:45:3e:
08:d2:d2:31:83:b4:2a:1d:ce:e1:86:e8:91:52:32:
10:df:fc:38:2c:bd:fe:e7:ea:e0:94:87:cb:71:a0:
2f:a0:b8:88:f1:28:b2:ed:16:b4:4b:6d:b3:46:84:
a5:4d:5d:b0:dd:48:50:b0:73:c0:35:84:32:b1:75:
89:fb:97:97:f5:81:ee:b1:87:8d:73:48:b0:7f:cb:
bd:38:dd:b6:c2:72:f0:d7:b0:df:3b:4c:99:fe:7e:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:70:B9:0D:E7:7D:A1:F8:92:E9:CB:11:E1:8D:8F:F3:BA:6A:60
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:41:eb:c4:f6:8c:c6:31:d4:8f:94:71:ec:68:2b:d2:35:
ce:54:7d:5d:c0:5e:db:b1:5d:38:58:fb:1f:f0:ff:35:b4:85:
38:2b:07:ff:99:42:74:44:f1:75:19:7f:28:79:c8:50:ef:32:
86:d9:57:2d:0f:69:c8:af:52:04:e6:05:c1:49:78:2d:87:5c:
64:e4:ab:5e:2d:3b:d5:86:c5:f8:0a:95:49:77:5f:10:9d:8e:
34:a0:fa:bc:3c:c5:9f:1d:f5:36:61:f0:f9:4d:33:4c:0a:7b:
72:4c:af:2f:be:ca:4e:15:6d:99:f3:9a:ca:8f:c5:38:e7:8e:
34:cd:f0:ea:41:d0:fe:cc:cb:56:cf:1c:70:01:6a:25:f8:3b:
3a:73:3c:ce:72:fb:18:f0:9a:59:2d:b8:37:c6:c8:f4:ef:9b:
b8:76:94:60:7f:71:fd:83:31:ee:6c:50:23:d6:53:12:81:a6:
bd:f9:59:04:f8:54:d3:ae:7b:d6:0b:88:f0:d2:70:f7:c3:ea:
91:03:4d:6c:37:e7:25:98:26:cc:91:2e:98:5b:df:10:0d:10:
72:c4:4a:e6:ab:07:ca:68:70:22:ea:7e:43:4b:81:e9:09:99:
86:c4:ba:60:4a:1c:35:d7:0e:c3:e2:cb:f3:4b:24:05:77:ab:
06:76:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:09 2025 by rpki-client