Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: QHZFCaaYGWdI1AT/D0qPhdX+RdH3CHN8d6qO014mxpI=
Subject key identifier: 72:59:A7:82:C9:C3:1F:7F:11:44:08:B3:2A:FF:A0:43:85:93:7D:49
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 0194BC0505C4227E38871D0EDCF12A20F296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 0F90
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: xV50/rjCWeenRKgInMUbFZNxTzFYpQ0q1pyi+ZWOnvc=)
2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:c4:22:7e:38:87:1d:0e:dc:f1:2a:20:f2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=7259a782c9c31f7f114408b32affa04385937d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:8d:52:14:8c:7d:81:70:8d:fd:9e:df:c6:
71:e5:bd:35:68:35:4a:98:c8:e7:35:49:75:14:e9:
be:87:5d:ff:3e:66:4e:16:5b:92:a0:a5:dd:fb:e5:
05:ab:81:13:d3:a4:0e:94:7e:7c:7d:16:ae:ab:8b:
5e:63:6e:1b:a0:33:ea:9a:3e:d2:ea:3a:8a:5a:e4:
75:d9:0b:43:f4:9f:b1:bb:d5:a4:3b:ba:0d:12:ab:
64:18:18:44:f9:4e:73:b9:1d:bd:8f:63:11:7a:ae:
a1:3c:37:83:23:f9:7b:33:44:99:ca:d8:49:bc:67:
16:26:0f:41:ee:be:d7:ae:a2:71:da:84:ec:cb:6c:
68:a0:7d:4a:8b:39:72:19:74:4e:0b:5e:e1:b6:eb:
49:94:22:f0:b4:17:af:15:5c:12:72:d0:dd:f8:bc:
13:15:f8:a5:a6:d6:03:32:b4:6a:2e:61:62:58:67:
f9:e8:ad:33:f9:b1:13:44:27:20:d9:74:92:0e:b6:
20:9b:9e:cc:1b:6f:78:e7:66:f8:dd:75:a5:da:fc:
6a:51:cf:2e:f5:7f:f2:fe:2d:29:c5:18:f5:e8:ce:
f1:81:e8:4a:15:21:56:de:49:65:cc:1b:0f:b3:cd:
1b:77:8d:55:08:e9:fe:5f:dc:7d:0f:c3:15:ed:ba:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:A7:82:C9:C3:1F:7F:11:44:08:B3:2A:FF:A0:43:85:93:7D:49
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9c:23:7f:d2:a5:36:95:03:a2:3d:d4:05:57:34:fe:c6:00:
8a:61:31:8d:6b:6c:b9:46:1a:c8:7c:1d:77:80:c5:2b:07:b6:
69:d7:d2:6a:fa:cc:0c:bb:5c:0b:6f:0a:0d:a7:e2:26:d3:ae:
fb:1a:23:5f:5e:04:b5:88:e7:ea:9c:13:95:bc:2b:81:04:65:
7a:15:f1:97:a5:ed:57:50:a3:f4:eb:25:a4:e5:8e:95:cf:13:
1e:73:f9:a4:bd:ac:69:c2:4c:aa:e6:ab:55:e0:50:c3:d6:c9:
8d:28:a7:a7:a1:fb:f2:f8:29:ec:b2:08:0d:8a:07:d5:c7:36:
30:b2:30:c6:51:0d:8c:53:81:ed:f3:5f:a1:87:52:12:b7:f6:
2b:12:43:5f:2c:d2:cd:fe:00:7b:f9:2f:7b:8a:0f:6a:94:2d:
5b:d5:05:73:5d:1b:d3:57:4e:d7:2c:25:51:2c:b6:3e:28:c7:
e0:6e:11:91:31:96:d4:7c:be:05:6f:71:46:60:e8:a1:4d:07:
a1:78:69:55:e3:a4:67:8b:29:4b:3b:36:ad:a4:6c:f4:5e:a0:
d2:63:2c:06:bc:cd:dc:43:3a:8a:09:c4:c6:8a:13:28:c7:84:
5a:10:b3:af:15:64:b7:02:b3:62:3d:39:98:e0:84:83:e5:49:
8c:1e:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:59 2025 by rpki-client