Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: bXkLErtEblMOfqtUYh3rpH0VQP9DXPPqUzyCDb85NzE=
Subject key identifier: EE:6A:13:50:7D:2B:63:D4:2A:77:A7:57:88:38:79:F5:9D:ED:0F:0B
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 0194BC72C9701D6FFEE56DF36A9EE7966937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 0EB9
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: +i9cBHce1uX8/Xplf8EKaL/bMHae8EWARAgV563lBxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c9:70:1d:6f:fe:e5:6d:f3:6a:9e:e7:96:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=ee6a13507d2b63d42a77a757883879f59ded0f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:66:2c:d5:16:aa:c3:76:89:ef:3f:22:1c:
45:e6:ce:27:49:92:3d:51:51:ed:1e:c2:30:93:fa:
2b:0e:80:41:b9:15:e6:c5:94:ea:d2:b8:3e:10:dc:
18:5a:22:79:bb:01:d7:f1:36:d3:f7:91:3d:b4:9e:
98:6a:20:29:d6:cd:cc:01:fc:8f:f9:ce:af:05:4d:
36:e9:b9:88:8d:e9:e5:11:ae:f6:9a:09:b9:94:0e:
1e:f6:bf:2b:49:28:2d:0b:e7:b8:dd:72:3a:91:da:
68:b4:2b:b8:3b:26:77:a9:3d:59:80:32:30:14:f1:
29:8a:4e:17:e3:0c:87:f6:e6:e3:e4:fe:fe:31:d2:
3b:92:f1:64:18:80:f9:34:5c:17:b4:1b:a2:de:58:
4d:a9:e6:11:9d:f9:5f:a4:06:dc:3c:5f:e4:3b:aa:
56:65:fc:9b:11:85:64:85:a3:b5:4e:77:fe:75:ce:
5c:31:ed:82:f5:8b:76:db:36:46:d6:90:13:c9:f4:
66:3a:6a:6a:61:be:fa:8d:c4:c6:b3:53:76:cc:d2:
4f:b7:0e:92:cb:22:af:0a:30:fc:d2:12:36:a0:fd:
37:fd:c1:48:46:c2:bd:e0:91:26:21:6e:dd:75:a1:
eb:ea:d1:69:9b:1c:7e:07:35:45:bd:f8:ec:73:af:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:13:50:7D:2B:63:D4:2A:77:A7:57:88:38:79:F5:9D:ED:0F:0B
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:55:76:c0:9d:6f:10:22:84:69:6e:1f:e7:48:1e:e1:64:62:
37:70:f3:b3:f9:1c:23:43:c0:a4:f1:42:93:6d:c1:35:31:70:
e6:31:7e:11:ef:bc:cc:1d:96:55:7e:62:bb:d8:60:57:2b:ed:
a7:bd:10:4b:93:98:a3:b4:fc:f2:8b:e0:ee:d6:4b:fd:ae:d4:
ea:02:95:c9:f2:75:a3:d6:04:34:1d:c8:13:d6:04:84:7b:5f:
96:d2:e5:73:9f:61:62:16:a9:92:32:93:61:ae:ee:bf:16:8a:
57:13:de:e4:15:23:1d:58:cb:8e:b2:58:0f:74:86:fe:f4:86:
11:9f:aa:41:15:7b:ce:45:87:8b:97:dc:e1:47:09:50:f0:5e:
89:62:ca:47:e3:34:64:84:77:7a:fe:f0:da:e2:e6:dc:ac:b3:
14:4d:fa:20:74:3d:98:7b:be:72:be:19:ac:2b:0f:53:b4:98:
fe:08:ec:b9:2a:f9:f9:a2:8a:eb:77:b6:42:77:dc:b4:a2:0f:
b6:1d:98:06:f0:63:f9:e3:71:ca:11:8e:5a:b5:89:c9:5f:64:
f9:42:33:61:70:f8:47:da:63:4a:24:ae:69:8e:34:6b:91:cc:
dd:61:47:aa:de:c6:d2:92:b8:32:41:a5:ca:b1:ca:58:40:c1:
22:f9:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:14 2025 by rpki-client