Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: EgSO+xbhWfq6uQbXu02mdvabo4WQRqECPnIMkx6j9Q0=
Subject key identifier: 14:96:D1:E1:CA:C4:26:27:B9:65:C6:7D:13:20:2E:B3:E8:74:2F:99
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 0194BC3C9763B509D2862164643B1995AB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0A6D
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: +dSLtEoOzRj3m6AC5+2kwmEgOli8MF4Pog1Xe1Brc0w=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:97:63:b5:09:d2:86:21:64:64:3b:19:95:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=1496d1e1cac42627b965c67d13202eb3e8742f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:b3:18:71:1b:fe:e1:eb:83:a2:a1:fc:35:
30:43:e2:cd:31:0d:82:39:c9:ae:98:25:10:94:aa:
57:95:6d:e5:54:08:47:1c:25:28:6c:6d:5b:a9:b0:
47:22:60:d7:c8:88:a4:92:11:a8:1c:d9:e1:21:7e:
c4:9e:df:59:ae:a1:75:c3:7c:9a:b1:d3:d5:2b:5c:
df:37:12:c1:ac:d7:86:88:26:d2:66:97:da:d7:e4:
59:f6:6f:ed:b1:6d:a3:3b:f5:72:a5:47:a9:56:47:
76:f9:dd:8f:b4:c8:0e:48:0a:a0:5b:30:0c:dd:db:
49:13:39:06:b9:b9:d9:f5:5a:f0:e6:f0:6c:42:76:
af:65:fe:e8:21:c1:f4:ae:95:75:c9:84:40:de:6e:
ad:0e:d0:94:ef:24:3e:e4:96:ca:dc:3d:34:e6:97:
d9:09:85:d8:2b:6d:e4:6a:d6:78:7a:10:cd:f0:20:
4b:3e:11:e5:c9:c9:a2:e3:09:1d:0e:a2:d6:da:8c:
50:f1:e3:e5:d5:31:db:0a:e1:a3:1a:b9:5b:75:ab:
ae:31:ac:44:75:39:c2:ac:d5:cf:81:4d:ba:5d:64:
59:a9:bf:cd:d8:dd:9b:6f:49:4e:03:b8:ed:21:3f:
1b:cf:0a:9c:f1:ec:00:cd:69:37:5d:8f:75:b8:1b:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:D1:E1:CA:C4:26:27:B9:65:C6:7D:13:20:2E:B3:E8:74:2F:99
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a0:ab:9e:9c:18:5b:fb:d4:b9:96:d0:ab:82:51:4b:17:9e:
fd:61:14:23:65:cc:a6:76:96:be:8b:3b:17:ea:37:c6:48:f4:
80:a7:d7:0c:50:f9:e6:72:9f:06:2d:4c:69:9a:d1:c9:de:7a:
4a:9d:9c:ba:4d:d9:55:ac:89:54:6c:85:00:8c:e9:21:2e:af:
df:5e:ae:44:cd:7c:b8:8a:c6:3f:3b:51:47:90:29:82:6f:ab:
cd:e0:95:f4:01:87:bc:37:36:9b:e0:b8:65:52:8c:c0:24:03:
8b:ab:61:5f:e6:28:60:ee:0c:9c:23:54:05:f7:7c:df:a2:21:
8d:4e:f6:67:cc:24:dc:04:11:3a:99:e1:96:97:ad:81:6b:d8:
37:10:0c:9b:57:e1:b4:c9:82:31:39:04:65:da:8f:0c:0e:ae:
01:64:e7:18:6d:20:dc:1d:9c:43:c1:76:05:ef:fd:c5:3b:a8:
6f:69:48:ba:61:cb:45:d7:4e:da:b5:b1:3a:4b:70:f2:52:f6:
73:30:9c:6b:9c:da:8f:fd:35:20:16:d9:c8:1f:5f:5f:f7:5e:
fb:7c:17:c0:df:b0:a5:48:5e:eb:fc:96:11:ea:f5:fd:f2:e5:
4e:0f:1e:07:8e:8e:94:13:fc:a4:d6:8a:bc:d2:ad:71:6d:2b:
69:b7:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:09 2025 by rpki-client