Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: eURjl5tPMri5z309kFa+o8ifzQrqyuAr6SdEwlbYew8=
Subject key identifier: E5:8A:FF:9B:ED:74:5F:FF:95:82:EE:6E:F9:7A:53:C5:7D:E7:C6:C5
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 0194BC72E239006F1ED59707A75FA161E194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0888
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: 64H1oMiM0uYKe4fiAAoyAWn7l8KM8Pw3/v5KdZQ+kEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e2:39:00:6f:1e:d5:97:07:a7:5f:a1:61:e1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=e58aff9bed745fff9582ee6ef97a53c57de7c6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:bc:9a:75:80:95:7a:88:e9:84:05:75:5a:
25:a6:c5:20:8d:5f:31:bc:ce:21:cb:68:71:7a:22:
8a:48:2d:f8:2b:ff:a0:2f:81:72:dd:e6:4f:11:b4:
32:45:e3:f0:b7:a4:bf:e9:9c:55:fb:5e:12:9e:fa:
15:49:26:aa:c5:c6:19:65:e6:ad:53:5f:4e:9e:00:
0f:fa:9b:ad:14:0d:e3:62:39:c2:06:9d:8f:15:39:
3a:3b:da:58:46:ff:99:36:30:74:ad:4d:53:b1:fd:
57:17:13:b9:c3:d9:0a:a0:f5:78:f8:29:d6:1f:cd:
9f:f1:dd:72:05:ad:a2:96:e3:d8:38:34:89:10:de:
80:2d:73:69:15:04:8c:e2:8a:2e:47:48:64:81:bf:
b4:f9:af:90:8a:c4:f9:63:cf:b1:01:15:af:18:84:
02:27:a3:f0:18:3d:2e:e7:a0:b6:12:2b:e3:a1:50:
76:27:cc:fc:fd:b3:56:4a:bc:c2:88:4a:0f:ce:71:
42:61:1e:1e:e6:c3:7c:0c:60:d4:9e:f7:c4:62:8f:
2f:a7:53:ed:8f:b5:d0:ba:ed:ed:11:df:72:d9:43:
c8:1d:83:3e:5d:0b:ef:cb:99:4d:a2:1f:f1:ee:0d:
c3:d8:c8:e5:24:a1:ab:da:55:01:e4:19:46:bb:bd:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:FF:9B:ED:74:5F:FF:95:82:EE:6E:F9:7A:53:C5:7D:E7:C6:C5
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7a:ba:d3:24:d5:e0:ab:69:01:33:06:bc:26:9c:b2:df:0c:
bb:1a:4e:15:c7:4d:d5:7c:98:91:b4:07:16:62:51:6a:ff:06:
9e:1c:97:43:86:1b:92:64:77:2d:fd:08:70:ff:6b:ee:16:9b:
52:db:ec:46:8f:7e:aa:0e:6e:ad:80:37:a8:29:e9:ce:df:27:
08:b5:0e:61:ab:5e:58:97:fb:f7:1f:a2:4a:2a:22:c5:c7:51:
a2:79:f3:dd:0a:1c:5e:65:01:a2:63:70:9c:d3:aa:00:0f:0d:
e3:cb:58:9f:84:71:50:1a:ff:b5:e3:45:3c:41:d7:d8:a5:45:
0d:02:08:69:1a:15:a4:74:02:6c:47:a0:be:24:b4:dd:92:c7:
c8:cf:2f:d2:74:d2:72:7a:5f:ba:46:be:70:bd:7d:6e:82:fd:
e6:44:81:12:db:85:bd:de:15:99:dc:66:15:59:3e:23:bc:18:
5f:e3:c9:2e:c0:da:4c:af:42:1e:12:32:cf:24:2c:5a:cb:93:
d8:1a:88:86:a8:7a:44:0a:84:fb:b8:1c:14:22:7e:5d:74:6e:
dc:4d:19:dc:07:4e:ab:ec:dc:4f:e0:a5:6d:fc:52:40:7e:75:
c6:28:c4:8c:57:3c:25:37:34:ed:30:a9:1c:c3:b6:8f:9b:3f:
97:7e:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:43 2025 by rpki-client