Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File: ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier: Oi7brZJq6rKVSIKzSzfUV3gyzV17+WMWnYsQUd0ZEXQ=
Subject key identifier: 1B:A3:9C:C6:67:F2:C5:77:0E:12:23:7C:CB:A0:18:1F:EC:07:BB:FD
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer: /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial: 0194BD85A5E303EFBB29FBC092DAFDC9CBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: gO260fS7Id4TnkUSehsqAzhAFTdsrpBMbZXOy1dS+0U=)
2: tzK04gs2QWdGkmPOxcIJ7O89Pa0.roa (hash: c/EnpCuozOUYVClxONo4ish8u2CS6ZGPowUUX+Csd6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:e3:03:ef:bb:29:fb:c0:92:da:fd:c9:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=1ba39cc667f2c5770e12237ccba0181fec07bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:92:e0:ed:4b:4a:8c:ec:96:76:f4:06:79:
4e:fe:08:1d:34:1d:eb:59:d9:40:dc:18:06:8f:d9:
40:ec:5e:10:ad:9a:5a:60:90:c5:f6:35:8c:d8:ed:
37:a2:26:68:fe:fb:ec:c4:69:33:1a:cb:f4:ab:2d:
aa:05:d3:6d:b8:43:c8:b9:78:50:5e:cd:3b:4f:39:
75:aa:3e:56:e0:36:e8:0c:df:92:d6:95:c9:18:66:
99:6b:16:24:57:5b:c9:e0:ed:9e:a8:b0:5d:f8:54:
8d:23:6d:a8:27:19:0f:e2:f6:e5:d2:2a:89:99:11:
f8:f0:c4:56:12:2a:63:7e:87:2b:9b:5c:a7:a8:78:
ca:2c:6f:25:4c:17:09:a5:c6:dd:89:36:94:ad:c1:
53:58:8d:ec:1c:f6:76:ef:69:92:c4:da:be:18:46:
9f:2e:f4:db:4d:f1:90:38:1d:fa:ae:f5:eb:c9:fb:
dc:e5:b1:36:53:f4:62:9d:d7:f6:d5:1b:47:0d:89:
31:fd:d5:be:71:4b:bf:f0:19:54:2b:af:58:ce:46:
f5:7e:aa:9f:71:17:90:17:5d:df:77:5c:60:2f:bb:
d8:47:fd:aa:5e:6a:a0:37:21:31:26:9f:44:46:d2:
dd:60:b9:c3:b6:98:b4:73:7c:ab:18:bc:a7:5c:c2:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:9C:C6:67:F2:C5:77:0E:12:23:7C:CB:A0:18:1F:EC:07:BB:FD
X509v3 Authority Key Identifier:
keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cc:dd:9b:a9:a0:1c:73:19:ec:df:f3:ae:7d:5d:66:ce:6f:
45:0a:53:64:4a:da:91:ca:16:ec:c4:fb:37:a2:9b:5a:64:18:
5f:e5:f3:fd:d2:cc:2a:95:83:32:41:53:76:50:30:f9:41:4e:
41:e6:4a:33:00:cf:d3:4a:e3:a1:7d:e1:6d:e6:02:3c:1f:60:
f6:01:fa:1a:e1:36:0c:40:34:46:94:12:c6:7d:5f:6d:04:f8:
76:22:67:46:7a:48:d2:73:e6:d8:f1:4a:5e:a8:32:74:80:a4:
1b:33:e4:2a:b7:d4:4a:ab:8c:00:a8:91:02:b6:88:27:9c:e6:
ba:3d:50:eb:d5:e8:a7:4b:9a:52:8c:9b:7c:d2:32:a0:a8:5e:
9d:3e:45:83:de:57:c8:31:2d:35:88:36:fc:c5:f3:17:9a:15:
c9:3f:ff:98:12:b8:25:34:d5:c8:39:4e:8b:8f:9e:73:ee:a6:
95:ba:23:87:23:a9:d9:1e:a1:99:52:17:b1:38:09:70:c4:92:
14:09:02:6c:1d:bf:c5:b0:3b:bf:e7:9e:19:02:8d:42:7e:b2:
0e:4a:d3:1a:38:f4:7b:29:4e:4d:48:41:bc:bd:d2:7a:e6:00:
ca:44:1b:18:00:b9:d4:f2:d1:7e:e5:5a:9e:93:48:53:5f:1a:
e4:79:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:56 2025 by rpki-client