Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
File: EB_ffImYkkKRmDV1nJti-Mxp1JI.mft (raw, json)
Hash identifier: YAHfTy44lTJGN8667gyGlEhnxlMQdfKbVex8aUxzNfM=
Subject key identifier: F7:AF:FD:F0:BF:B1:1D:7F:CD:16:E5:60:64:0D:37:D9:1F:6D:B1:E7
Authority key identifier: 10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
Certificate issuer: /CN=101fdf7c89989242919835759c9b62f8cc69d492
Certificate serial: 0194BD4E566DE19E9D6AE2E5CC1BC6AAFCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: EB_ffImYkkKRmDV1nJti-Mxp1JI.crl (hash: UIC2ZziLiBZBC2X3pbNOLUvnM3ks7+KUaNRPeCwKtcU=)
2: IL6WQT4jQ4_C4d_P8m9v2yHVI6U.roa (hash: 9J+kDdJE2+cu7NB25/bKTQ6/hAIRTzrqadiukiS4eVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:56:6d:e1:9e:9d:6a:e2:e5:cc:1b:c6:aa:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101fdf7c89989242919835759c9b62f8cc69d492
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=f7affdf0bfb11d7fcd16e560640d37d91f6db1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:8e:76:e6:a4:be:9d:71:3b:ba:db:58:6a:
68:f9:be:97:e9:b6:e2:52:0c:b8:7e:79:df:c3:fe:
30:ba:65:6d:89:99:9f:64:cd:dc:6a:80:15:45:88:
23:d5:52:db:e9:23:fe:60:a2:28:51:0f:ac:3b:42:
11:8e:52:6c:8c:58:1a:f8:40:70:d0:b7:e1:5d:c4:
52:03:7d:7f:5e:05:b5:74:e7:33:0d:ea:ef:bd:b6:
7c:c4:4b:ec:aa:0f:f4:a8:e8:d2:e0:40:01:d3:6d:
58:4b:be:03:25:60:e9:07:73:14:ed:f9:74:fd:fd:
75:51:d3:5a:36:cd:3d:48:49:8e:49:04:d5:8e:f8:
07:9b:b3:1e:58:7e:13:37:5c:39:3a:c4:83:e5:f3:
a5:13:89:e5:2b:ab:20:78:4e:65:7b:84:f2:ad:a9:
36:13:24:fe:41:e0:e0:34:d2:fb:1c:0d:f3:06:79:
d1:36:98:80:a7:5b:36:a7:6a:5f:4c:bb:94:40:33:
56:da:8e:5d:00:36:57:cd:19:f8:33:74:bb:b2:89:
05:e5:4a:87:33:27:1f:8b:a8:74:ef:4c:ee:de:f1:
36:65:a9:2d:60:c4:10:41:43:5f:fb:53:b1:52:06:
ec:67:42:cb:65:95:76:28:49:41:72:ec:f1:61:58:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:FD:F0:BF:B1:1D:7F:CD:16:E5:60:64:0D:37:D9:1F:6D:B1:E7
X509v3 Authority Key Identifier:
keyid:10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:0f:35:f6:55:6d:60:17:09:f7:c2:99:d3:b1:b1:7f:b4:
0c:1d:32:77:e2:44:93:8e:dd:b6:e3:f6:3b:3b:36:a0:a7:95:
d0:ba:4a:48:90:4e:4e:65:5a:d4:1b:14:00:e6:6f:94:fd:ea:
05:94:9e:49:c8:32:c4:62:ea:4a:1b:4c:3a:55:8d:1c:94:2b:
22:e2:53:fd:c5:8d:bc:34:10:41:9d:87:04:d6:23:08:68:66:
87:04:74:8a:91:37:0f:5a:4b:95:bd:63:51:ab:81:ed:fd:e7:
aa:a1:ed:ca:98:5e:c8:34:76:4e:bd:f2:8d:83:28:71:39:ec:
a5:1d:52:14:a1:5f:0d:9a:64:bd:c4:4a:2b:06:9e:e3:8e:c9:
c7:d8:75:ce:cf:44:c5:90:9e:e4:ba:f6:02:05:ae:86:35:61:
3c:f3:f6:5a:af:5f:fa:2b:36:9b:31:63:cb:81:69:6c:7b:43:
20:36:78:de:c0:94:fd:b5:e6:74:fe:33:8a:05:be:2f:72:ae:
c5:93:ab:a3:09:b5:ec:49:ea:cd:35:60:d3:c5:82:5c:44:59:
21:34:7e:60:3d:85:fe:90:87:6d:ec:eb:ba:5e:5e:5a:5c:04:
b0:bb:18:ca:4c:da:a4:6f:e5:84:32:fc:da:b3:20:5b:97:e9:
4f:64:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:44 2025 by rpki-client