Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: /ClUiTQP0+UtqZpOdRWvG9QelCnah98ePukiuyg3z+A=
Subject key identifier: C8:1B:0D:FA:78:F1:19:81:85:39:91:7B:2A:22:D9:3F:6A:D4:BD:62
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 0194BC051793CDD06ABB3E527A605F6A9B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: E8JH2tQLdBudqEwC9i3oWb45Tg/cSnVuDMuNEMS8L+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:17:93:cd:d0:6a:bb:3e:52:7a:60:5f:6a:9b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=c81b0dfa78f119818539917b2a22d93f6ad4bd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:5f:20:57:c5:7f:e5:1e:19:00:2e:3c:4f:
22:e9:d1:24:99:9b:4a:bb:e4:f0:1b:e2:99:59:73:
dc:cd:a1:d4:97:fa:67:1d:f8:17:6d:1e:d3:f1:f9:
bb:49:ce:3b:a3:bc:4b:58:c0:c0:71:f7:c5:32:86:
d5:b6:f8:d2:ac:fe:78:84:91:5d:70:d8:a4:ad:c7:
3e:fd:0d:ab:14:22:5a:41:90:24:87:59:83:7c:d1:
6d:28:6f:f0:df:f7:7a:39:e0:65:8c:79:9d:d7:9f:
73:7d:08:9c:11:13:71:2a:f4:02:73:c6:a4:44:ac:
75:70:98:05:be:e6:23:c2:66:86:94:ae:38:6c:32:
90:27:e9:fc:00:29:cc:3c:9f:14:96:68:69:26:87:
ce:09:75:82:9d:0d:6c:53:d3:57:99:d0:39:ca:33:
a0:95:09:47:64:77:e0:6e:b5:13:6b:9f:6d:4a:18:
a1:ab:cb:bc:c6:48:36:6d:f6:e9:ea:7b:be:fd:a4:
07:58:08:af:3f:5a:0e:1c:ba:51:f9:9c:b0:f6:c4:
50:53:f6:51:ff:9b:70:5e:48:4b:09:ed:fd:f5:6a:
3e:13:6f:9a:cc:c6:6d:6b:3b:e6:85:0c:57:f9:97:
ee:3e:5e:8e:aa:39:0c:db:8e:01:30:1b:88:fd:a5:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1B:0D:FA:78:F1:19:81:85:39:91:7B:2A:22:D9:3F:6A:D4:BD:62
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:09:c7:7e:aa:26:75:2d:6a:89:0c:d0:bb:12:d0:f1:5f:2f:
97:b2:48:54:6d:db:63:6d:aa:f8:64:2c:2a:22:af:bd:26:2e:
26:94:b4:d2:7a:78:32:1c:b2:16:2b:07:72:da:e6:96:a2:f3:
7c:55:b2:82:0b:ec:0c:b2:bf:08:43:27:d3:d5:55:4d:67:77:
58:45:de:7a:6c:8a:41:a3:c4:7d:83:b2:58:ca:73:a8:88:20:
bf:c9:fa:87:1d:b9:2f:10:ee:a9:ef:34:8e:ef:3c:1b:01:23:
fa:1a:00:34:b9:20:57:9f:99:cd:70:9b:0c:ac:ac:41:72:a9:
70:1e:df:54:ae:b4:ed:f6:62:2c:47:5f:15:0e:cb:7d:1c:66:
f4:a4:0d:36:89:06:fc:f3:f3:22:fd:f9:a6:c8:97:db:4e:1a:
b2:78:b2:46:96:bc:b0:25:15:6a:7d:0e:22:82:59:4f:b2:66:
3c:d5:eb:e9:0c:44:e1:65:8d:3a:83:50:90:98:19:f0:17:9a:
b5:df:14:1e:fd:9a:b6:1d:3b:2c:52:7b:59:32:a5:93:21:3e:
23:44:b4:fe:53:08:ec:9b:4e:66:bb:5b:0a:b6:af:40:3e:66:
d5:3f:5b:0e:3d:1d:ee:33:05:ab:4d:e6:8e:25:ce:9e:dd:96:
d1:07:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:04 2025 by rpki-client