Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier: UeSj0RFdpPjOsyEMNZm3Mqr4kjhcERojgKjiHhLyoN8=
Subject key identifier: 05:AD:4F:58:3D:0B:35:54:16:FC:B4:5A:4C:D9:26:73:D9:64:27:A8
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial: 0194BCAA13A9D168C5730D699202BC16CFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number: 08
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: Du7k0B88jmKs_S-_OxfkmUBoQvk.roa (hash: 5Kd2ifwi5TK+F7WlkGpdmlpnXuH9BzmWZvxJszORzQQ=)
2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: 7s8G9qAM9+8MVtGCjFjKrxeqHhy0lEXGLxkH5zAlxbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:13:a9:d1:68:c5:73:0d:69:92:02:bc:16:cf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=05ad4f583d0b355416fcb45a4cd92673d96427a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:aa:b4:9c:06:cc:fc:eb:6b:cf:56:49:19:
bf:73:46:2f:44:f0:79:74:c3:94:27:a6:ff:55:6f:
67:8c:5e:57:f0:ab:9d:2d:e3:5b:cd:ef:ed:b6:71:
26:a4:20:f4:63:15:0b:3b:bc:bc:47:c7:3c:6d:b5:
6a:0f:3a:40:06:b4:0f:fb:1e:54:68:30:0a:b9:b8:
72:aa:85:fa:17:25:dc:ff:c3:ba:d0:d2:61:ca:7f:
34:41:19:40:94:e5:6a:c7:ec:41:25:5c:a2:ef:02:
c0:87:2f:ab:d8:21:63:e4:fb:1e:45:f4:c9:39:8f:
57:a4:5b:d7:35:4e:d9:5c:26:f4:79:9b:ad:60:58:
d0:00:57:16:45:e9:36:a7:61:b5:6f:01:9f:68:cd:
74:df:e5:70:df:f3:ce:90:00:da:bb:51:6f:9c:4f:
fb:4a:13:65:e4:dc:26:50:11:57:2f:d1:4d:49:87:
aa:9b:c6:78:20:4e:4f:14:f3:b4:2b:f7:9a:a5:95:
22:38:d1:e0:26:ba:6e:65:74:50:a2:25:e0:4e:b6:
0c:82:94:03:89:b7:7e:d7:6d:30:1b:ef:ef:84:60:
26:f4:ff:07:a7:d5:fd:e4:89:e3:24:7f:a4:08:5c:
f2:7e:e7:97:07:10:cb:18:28:1f:90:c7:d2:84:a2:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:4F:58:3D:0B:35:54:16:FC:B4:5A:4C:D9:26:73:D9:64:27:A8
X509v3 Authority Key Identifier:
keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:c6:de:b5:f9:08:22:f1:aa:5c:1f:b5:d2:e5:4a:c3:3f:
79:19:4b:e9:53:50:64:6c:bf:4a:e9:8e:30:c5:1c:42:c4:43:
43:66:6c:72:1e:de:d2:76:db:bb:f3:e1:e9:7b:e7:7b:1b:5f:
90:8c:98:59:c6:60:07:d5:e6:e3:5b:b4:da:ea:90:88:69:09:
b1:92:66:7e:18:e9:13:aa:cc:89:d1:ca:be:00:9c:67:e0:ae:
ea:25:7f:65:37:ef:db:b2:a5:da:12:cd:2e:89:3b:f9:70:ef:
99:56:37:26:97:ff:57:33:00:a1:39:aa:c2:02:a5:b8:fc:0a:
3c:7e:5f:38:f8:82:66:4f:56:8e:68:75:e1:e6:b1:78:68:cd:
19:6d:81:39:5a:7a:a0:d5:17:f9:91:e1:44:d9:7d:78:28:1d:
2c:60:6a:3e:20:08:2c:02:db:c9:e5:d5:ae:0d:31:5f:00:e0:
4c:54:0b:e1:a7:8b:09:2b:d2:31:e7:3f:0c:19:90:cd:cd:08:
d0:59:4b:92:4c:29:af:ea:4c:7e:7e:9c:01:19:92:1e:9f:42:
d4:60:e7:60:e6:a0:8e:64:9f:0c:83:0a:8e:ab:8f:22:da:ec:
90:1d:3e:d2:30:ac:b9:28:29:b1:aa:d8:80:c3:96:20:68:eb:
51:dc:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:51 2025 by rpki-client