Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: ivUdkVo+AhdQAbDnAwZden+K/p2Z8UdgJo0UbM3dKWE=
Subject key identifier: 79:89:4B:BA:7A:75:4F:3E:49:8E:88:60:B6:2B:95:74:AF:4D:D3:6E
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 0194BC72AE2F6BBCC11D94DEC77EA19AB818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 124B
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: 4bKq4JoBKht6V/7VIpERsViwiVH1M/bbwziIetowTsQ=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:2f:6b:bc:c1:1d:94:de:c7:7e:a1:9a:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=79894bba7a754f3e498e8860b62b9574af4dd36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e0:f1:25:fa:fd:87:12:b6:79:1c:51:8f:90:
2c:4f:fe:25:13:7d:07:6f:9a:61:7c:a0:e6:6e:1f:
9d:bf:66:7d:68:4d:79:f0:9c:64:9d:7d:ed:65:f6:
c7:19:d4:e9:a9:ae:42:29:e6:c9:31:db:ce:de:50:
e9:bd:6c:16:b4:2f:e7:70:0a:52:ed:cd:83:c5:58:
aa:59:7c:16:9b:4a:ec:37:55:04:e4:58:b0:7e:21:
07:7c:41:b6:49:d7:f4:15:fb:e4:c5:8c:35:1c:ee:
a8:cd:32:11:ad:47:ab:41:3b:b5:07:fe:50:dc:11:
2c:22:2c:2e:d8:3d:0d:7a:58:90:bd:46:bb:3f:cf:
f2:72:51:06:7c:aa:33:d6:1a:ee:ab:43:c6:17:5d:
36:27:45:ab:60:61:9f:f7:26:a8:8f:90:64:f1:fc:
39:b2:89:37:07:6a:16:ed:79:7e:73:65:54:94:ad:
fd:63:b6:7b:ed:e6:26:f0:91:f5:48:3f:a7:5c:22:
f6:c0:52:ab:cc:4f:75:ce:44:54:b1:1c:91:8b:67:
83:cd:fa:21:13:e9:ae:93:7f:0a:f1:d0:03:5d:58:
fa:c7:87:ec:34:7d:4e:05:bf:a4:0e:c3:a2:f6:54:
6b:c8:1a:45:f3:37:d8:ee:e0:31:13:0f:24:20:c3:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:4B:BA:7A:75:4F:3E:49:8E:88:60:B6:2B:95:74:AF:4D:D3:6E
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3b:ab:9b:40:01:5d:c1:f6:f2:09:de:75:a3:9f:8b:c4:01:
41:67:6c:4d:3f:73:99:09:51:a1:b6:35:86:40:10:7b:48:3a:
e4:02:17:54:10:8c:a2:e6:d3:c3:01:16:9e:54:9f:36:19:35:
41:5e:00:40:e5:02:45:6d:b6:19:4d:98:24:b8:25:85:98:05:
57:00:eb:58:f8:a0:a2:17:0b:43:ed:3b:43:10:89:1e:1f:c4:
27:47:13:21:d1:a7:6e:b5:4c:7f:34:6e:19:fa:45:69:3d:eb:
4e:3f:7e:03:45:25:eb:39:42:d0:a1:98:f1:0c:5a:83:be:bc:
07:17:a1:54:98:81:be:a3:f0:2a:81:64:c1:ff:e5:a8:32:78:
39:fe:10:a8:40:3e:92:c9:a8:fc:60:0a:0c:38:58:10:69:6f:
b8:f2:a1:e0:74:4b:48:3a:0d:6a:cf:33:88:ba:63:9e:51:e7:
80:49:4d:8a:ce:8e:38:3a:d9:3a:86:b7:33:98:cb:30:7c:a6:
04:3f:19:a3:6a:13:be:d6:4f:c3:90:cc:c9:5e:a2:60:d3:a5:
23:f7:90:64:51:86:d7:0e:4a:a2:82:32:d6:cd:73:98:32:e8:
d1:a6:0e:c0:98:05:19:17:9f:d6:18:0b:a0:69:90:ec:93:92:
43:90:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client