Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
File: i5-syiLMDGDiN6eyBBaiYARaXGg.mft (raw, json)
Hash identifier: D3uDbAi7It4mW4OWVlILXZpgjbcNbEqn536KCUcw/Cg=
Subject key identifier: EB:9A:A2:D9:59:36:97:6A:8E:55:45:06:B6:4E:4C:1A:79:E8:33:A9
Authority key identifier: 8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
Certificate issuer: /CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Certificate serial: 0194BC7304C84B19ED258819DFB1B0A3FBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
Manifest number: 0C6E
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: FkyY0Sz6P-vEspCfDc5ti5faixQ.roa (hash: cTxtXDf2i+J5oFdILpbffZQpgT6dU26M1jcBVWXO1g8=)
2: i5-syiLMDGDiN6eyBBaiYARaXGg.crl (hash: yvI6fyaobdDyisHn+OXDm5S8H99B13YsEadPS5mYFrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:04:c8:4b:19:ed:25:88:19:df:b1:b0:a3:fb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=eb9aa2d95936976a8e554506b64e4c1a79e833a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:c9:fd:e2:e1:8f:24:d2:17:d0:b1:f7:0a:
b2:97:4d:7d:f3:e0:00:32:83:43:9f:83:6d:6f:29:
79:28:21:c6:ca:2c:1f:e4:fe:78:cc:ff:d7:db:de:
c0:ae:ec:b5:b5:d0:f4:76:77:bd:0b:2d:a4:14:e1:
8a:3f:27:b8:cd:c7:76:ef:dd:50:c8:4b:74:6d:65:
67:a8:b3:05:31:2e:f1:01:aa:de:15:4e:ed:42:d0:
01:15:49:8c:ca:f7:29:99:f2:aa:44:d6:b6:93:79:
be:94:58:32:f2:6e:ce:9f:36:40:12:68:d9:74:b2:
b4:5f:59:cf:e7:f0:31:2f:a0:19:e8:13:4f:ff:db:
97:a3:81:1b:ca:24:7f:a7:73:80:01:82:9c:f4:d8:
ab:78:23:dd:05:0f:c1:c8:10:df:21:fd:af:89:93:
90:db:14:3e:dd:54:8e:92:8b:c5:3b:90:98:1b:dc:
dd:df:ed:f3:5e:8b:45:85:64:f5:c9:de:c0:0e:60:
08:84:e5:76:2a:24:18:50:a3:a1:dc:8e:e0:c8:c2:
e4:ea:66:6b:22:64:80:f9:14:bd:32:ff:b1:96:db:
f3:bb:63:63:95:3f:60:11:e1:c1:74:8e:96:5b:68:
b2:2c:38:6e:ed:e6:5e:10:ad:bc:ad:62:af:3e:92:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9A:A2:D9:59:36:97:6A:8E:55:45:06:B6:4E:4C:1A:79:E8:33:A9
X509v3 Authority Key Identifier:
keyid:8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:16:71:4d:94:3d:f2:47:af:b4:a3:95:20:c9:e4:de:ef:10:
b1:23:3c:f0:9e:71:1c:e4:f0:c8:68:da:e5:36:9b:c2:52:75:
e6:39:3f:89:e6:2b:2d:a5:22:4f:69:bf:a6:32:a0:bb:47:d6:
16:ae:69:f9:2c:3c:3f:bb:4b:63:6c:df:9c:02:fc:3a:b5:8b:
fd:66:57:1f:55:d8:23:76:b2:0b:78:6f:cb:6b:91:a7:8f:aa:
4d:08:8e:e5:fb:02:57:f5:30:39:15:3b:a9:70:a8:3a:03:7e:
e9:e9:c6:b3:b1:22:76:81:be:17:61:b0:73:52:5a:8f:49:27:
0b:d8:d7:23:4b:83:98:11:41:a3:8b:c1:38:a9:6c:b0:8d:d2:
09:7c:05:57:5e:0f:7d:72:22:22:c0:a5:e4:01:31:47:fe:55:
61:f3:8c:6d:13:f2:47:db:51:58:57:42:1f:1f:0b:74:78:f6:
3c:03:d4:7d:71:67:9f:79:02:7a:ce:81:26:2a:49:1c:1b:5d:
97:1c:27:06:2c:e4:52:d0:2c:d0:a0:57:54:33:ea:0b:9b:ea:
44:06:33:ed:41:ed:7e:58:d2:29:ef:a2:80:7e:8d:60:19:c6:
41:cd:83:8d:80:80:47:3a:ea:83:14:3a:e2:2e:69:ae:e3:a9:
0d:70:d3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:07 2025 by rpki-client