Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: sY15b8tk8Zn95fUf67wmoaKEVd9JgTziYYaBZ5V4J3k=
Subject key identifier: FB:3D:65:07:ED:47:70:AA:E5:7B:92:02:F8:40:F6:34:02:BE:D2:A0
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 0194BC049ECEC324B4FE5ABF621D596A5922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: 236UKin66/HdiGqlGO/G6+IY+Mxdy+FCuR7Wvogh/C0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9e:ce:c3:24:b4:fe:5a:bf:62:1d:59:6a:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=fb3d6507ed4770aae57b9202f840f63402bed2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:01:26:95:89:58:d2:2f:14:4b:07:a2:5b:
6d:c7:49:58:84:f1:dc:2a:18:66:14:84:d9:4b:96:
65:ef:4c:06:b9:8f:ce:25:e6:31:d0:1f:7d:71:8e:
27:6e:f3:57:07:28:40:0a:00:be:2f:fa:93:b6:a5:
7c:74:6c:7a:eb:d5:5a:73:6d:de:42:f2:f6:66:71:
b3:55:ff:1c:4e:d9:aa:44:e1:0a:07:d2:c5:3c:c2:
62:e8:7d:b0:32:93:56:65:bc:df:4e:40:c3:f4:d4:
0d:b5:6c:ea:6f:09:1f:e7:e4:2c:a1:b2:b8:50:bc:
b9:d7:b9:82:7b:d9:f9:e1:3f:e0:fb:4c:b7:c5:05:
d6:ff:e8:54:83:61:52:59:01:e9:22:55:84:b7:da:
02:fa:31:87:5a:6f:3b:0d:f3:4b:cd:76:9e:1f:84:
e5:7d:f8:52:fd:d1:31:3f:e4:6a:27:5e:c0:25:5b:
27:08:46:37:aa:a6:1e:1f:1d:1f:04:fd:47:32:f1:
57:58:33:48:2b:aa:eb:d3:a6:8d:d8:a2:ab:e9:bd:
e3:b4:f5:1c:6d:bf:e5:27:37:7c:20:08:36:b2:19:
ad:b3:a1:7e:67:7d:5d:eb:db:dd:3a:de:59:d7:d9:
31:97:ce:84:8e:1c:c1:ad:19:1a:ac:c2:e2:1e:71:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:65:07:ED:47:70:AA:E5:7B:92:02:F8:40:F6:34:02:BE:D2:A0
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0d:3f:83:ea:8b:7c:5b:5d:cc:a6:1c:d6:b9:c1:8e:d8:a3:
2b:b6:b6:df:7c:99:c1:d0:cc:54:46:0f:b9:bb:3b:d3:d6:65:
d4:36:6e:ea:9b:e0:10:18:ba:77:c7:e7:4e:24:76:c6:a6:f8:
5a:42:52:64:eb:75:a5:e0:15:ec:e7:65:4b:ee:a6:72:3b:1b:
56:15:31:cf:b4:82:e5:bd:85:be:96:ef:14:e9:d8:a7:40:9b:
88:82:c1:b0:ab:fd:66:a8:a1:b4:a0:19:e7:75:44:8a:d8:16:
90:b7:e8:41:3c:0a:ec:d0:f5:9a:0b:e6:94:c4:5e:a6:de:ae:
60:d7:a0:c2:41:50:8f:ec:ac:6e:86:6c:fc:0d:20:be:bd:b6:
e4:dc:7b:c6:3a:a1:9a:d8:31:a7:27:52:83:e0:2f:ed:ed:90:
f8:da:9b:e6:b0:c3:52:1c:9a:83:c9:70:1f:33:63:2d:24:2a:
b4:07:3f:cd:8d:16:df:df:c5:ef:e6:29:d4:71:59:e4:c5:ac:
67:59:4f:4d:aa:6f:dd:f8:0f:3b:ee:33:b5:bf:8a:b8:90:aa:
e1:9f:66:1e:2d:18:57:a6:0a:c2:ae:0f:56:80:e3:b4:cd:e7:
db:9d:11:ea:80:d3:5c:bf:24:df:50:31:93:9c:3b:9b:49:98:
0a:3c:39:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:28 2025 by rpki-client