Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: O98n9KHTheC9Is9Y+Ryw8qu+hMvaMSXFB2J+cDYfw7U=
Subject key identifier: 87:89:56:DA:DD:9E:79:E8:63:76:BA:88:74:1B:6A:ED:95:BF:C6:84
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 0194BCAA30C6F75E1BBF6672657982F9F2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 0DEC
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: TaKOifarrljeao+34ohLqtu+B17Mb7Pgx7Y83l3aK7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:c6:f7:5e:1b:bf:66:72:65:79:82:f9:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=878956dadd9e79e86376ba88741b6aed95bfc684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:6a:f8:da:08:23:4c:d0:60:ad:5c:4f:c0:
b0:c8:c4:be:1d:f1:8c:81:09:ac:08:59:10:8b:45:
c1:be:da:e7:f6:a6:d0:d6:b6:9c:04:a2:6e:af:75:
75:26:05:0a:64:c7:ec:d2:67:c5:81:84:73:1a:46:
a9:f1:db:b9:91:d9:45:3b:18:d8:ef:ef:d9:b3:00:
6d:72:2d:5c:f1:ad:02:b5:f7:67:5b:31:a2:c6:ad:
83:39:15:ea:ba:bd:40:b7:f7:65:97:8f:a9:3d:8d:
e4:dc:c9:2a:f7:80:74:49:c8:1a:4d:02:81:37:f4:
74:29:2e:6e:87:19:a8:b3:17:e5:6c:e9:2d:32:50:
34:ce:30:2f:98:6f:41:b7:25:1c:af:94:0f:ad:17:
6d:7f:55:88:1d:cc:26:44:34:23:3b:e2:9a:e8:e5:
27:96:81:97:ea:bd:98:0e:77:f8:15:5d:7d:03:b2:
5f:7a:a7:db:ee:33:d3:28:27:c5:6d:f0:9c:2d:e5:
83:53:3c:96:48:83:ef:f0:d8:cc:00:23:89:81:fe:
52:ad:ee:66:8d:45:51:0e:9e:68:52:89:e0:a0:02:
31:93:98:0b:5e:cf:b7:e2:87:6b:b4:8d:b8:b8:f4:
40:be:ca:f4:85:ea:2f:9a:5f:74:bd:55:43:27:f8:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:56:DA:DD:9E:79:E8:63:76:BA:88:74:1B:6A:ED:95:BF:C6:84
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:61:69:ff:fa:73:1f:a8:9e:c5:fc:ea:fc:5b:33:c3:9c:25:
6e:f3:8d:77:f0:b3:4b:b2:bc:28:be:1d:84:8c:6a:0c:da:b3:
81:5f:77:37:54:e4:65:ab:c1:50:2b:b1:98:40:24:5c:f6:a5:
09:e9:5f:68:b4:34:3b:4f:d2:a4:89:a0:18:61:a8:90:e0:65:
a9:2d:9a:e0:0d:1c:18:7a:3f:ee:39:04:34:2f:75:56:ae:95:
47:f4:ee:55:67:cd:7b:24:f1:da:be:78:d0:09:e0:aa:f3:11:
5d:c9:72:2f:fe:f8:97:6e:8b:1f:7d:02:5c:f4:d1:39:51:2a:
aa:e7:6c:3d:08:07:7b:d3:13:78:ae:77:03:84:bf:d2:6a:bf:
c8:65:28:64:e7:99:d3:f2:f7:e1:99:2d:f9:cb:c1:f6:66:36:
8a:8f:94:25:29:26:b2:a2:66:88:60:e6:98:cd:f4:cd:c2:b2:
51:c1:12:68:64:58:c3:a3:da:b5:2e:12:cb:02:1f:a4:aa:c6:
7a:d2:a9:d4:7c:1e:07:63:de:21:aa:9d:89:57:47:5f:5e:e2:
9b:32:70:57:c1:8a:1f:c7:24:93:33:e3:c4:93:e3:40:d2:a1:
ca:a0:3d:77:02:44:82:7a:35:64:db:fa:c2:c1:b7:9a:6a:80:
81:e7:38:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:13 2025 by rpki-client