Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: O5vfrxfXFfYiBfjXgd3KAmUdJMJEe/724RIFclrtk7s=
Subject key identifier: 1B:23:29:B5:E0:04:72:E0:58:D2:4C:2D:DC:F7:E1:6B:E8:BB:2E:C1
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 0194BCA9D00AAA5BD52A0387D8C6A8924F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0A06
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: z04NjsBm757lPUrFuO+pmaEtcxYErBAMOx+AvTIu6Is=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d0:0a:aa:5b:d5:2a:03:87:d8:c6:a8:92:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=1b2329b5e00472e058d24c2ddcf7e16be8bb2ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:97:d9:ec:69:c9:99:ff:ae:30:1e:d6:fa:
3d:40:db:e6:c3:86:2e:2e:90:af:fe:62:12:39:fb:
7a:b2:eb:d2:86:82:87:83:1f:55:1b:df:96:50:41:
c6:e0:3d:5c:07:0a:68:09:99:4c:1e:3c:fd:08:f0:
82:8b:4c:1c:e9:6f:a6:1c:8a:ae:ea:42:aa:a3:3b:
12:7e:e4:25:69:a4:59:db:4c:72:4b:7c:e8:14:b7:
93:9c:d4:b0:a9:6d:42:2e:00:21:94:97:f7:38:e3:
69:47:9b:03:7e:17:bd:5c:7f:da:62:a7:ff:d3:df:
dc:67:76:85:85:da:cb:6f:19:e5:e7:34:52:24:31:
20:51:6b:f3:ae:5e:12:20:44:f5:4e:28:d1:98:0b:
a1:02:ea:11:31:95:7b:91:be:6f:ef:83:62:c5:ea:
46:35:c7:45:69:7b:00:65:f6:44:50:06:96:b2:a5:
71:0a:af:aa:db:5f:60:8b:3f:e5:87:25:ee:e0:73:
bc:0f:81:16:96:e1:18:85:94:58:cf:d6:84:40:56:
a2:ec:64:ba:9d:71:ce:06:9c:0c:cb:19:a7:2b:d2:
f8:48:6e:11:a4:9f:a6:a8:6f:72:da:77:24:69:84:
d4:58:b5:37:54:65:06:34:c2:12:20:91:42:4b:3a:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:23:29:B5:E0:04:72:E0:58:D2:4C:2D:DC:F7:E1:6B:E8:BB:2E:C1
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f2:24:6b:98:0c:af:74:91:e8:a3:c1:95:01:f3:2c:76:12:
ff:e6:c8:c9:6d:ae:54:54:89:76:39:98:ff:b7:de:51:e9:ff:
bb:84:3d:c2:3f:0b:48:d8:ed:0d:20:38:23:ae:4f:bb:f9:ec:
20:63:69:bf:9c:40:86:16:ad:4a:a2:c1:54:b8:0a:09:fb:d3:
e1:b6:62:f2:af:1a:58:d6:b3:6e:72:e1:64:0c:fb:86:dd:5c:
33:af:4f:e1:40:09:de:4a:ac:08:7a:dd:10:2a:e0:1c:97:cd:
a5:be:f6:96:32:7e:c0:18:19:2c:5d:8c:ea:39:1a:aa:19:69:
54:aa:dd:6c:73:0b:2a:3d:02:9f:32:2e:cf:a0:1c:90:f6:f3:
8d:ee:3e:eb:db:71:87:9c:a5:3a:51:f7:82:68:48:6f:66:81:
63:42:c7:8e:c6:fc:ab:97:e4:13:1d:bf:3c:00:a2:fe:0f:fe:
85:f0:c4:d4:a8:54:bf:55:ac:0c:bc:c6:6d:ae:62:b7:14:72:
09:26:fb:6c:8e:d1:38:39:ad:22:c9:0a:8b:de:53:7d:02:b3:
51:b9:72:a6:fd:a3:90:74:77:11:b1:cc:a4:92:51:47:ed:78:
5e:73:8f:c0:ce:ea:a2:92:ee:9e:7d:2c:57:e0:eb:69:34:d3:
21:f1:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:38 2025 by rpki-client