Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: gb2hyiLUY6NyUIQZwtmSiqPLkN4QhrvpEXFKQgLAGsc=
Subject key identifier: 3E:FE:94:FE:2E:5D:22:3C:80:09:E3:55:CA:35:B7:42:3F:A6:30:2F
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 0194BBCEA279C28100756CD03AF660069F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: 0238
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: OnNkk6MGSprxb5j5wCaUuoahwo9rIsZk01uabZ3G1So=)
2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a2:79:c2:81:00:75:6c:d0:3a:f6:60:06:9f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=3efe94fe2e5d223c8009e355ca35b7423fa6302f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:fa:85:18:cd:35:d4:62:e6:2d:13:c4:6b:
2e:25:35:fa:37:93:6a:34:21:0a:d8:33:34:57:84:
4d:df:80:f8:7c:25:67:6e:cb:96:40:c2:77:3e:a9:
19:9d:15:03:71:35:c2:e8:b0:13:80:52:5c:30:68:
eb:3e:2d:8c:e4:82:e0:7a:9b:3b:1d:5b:56:f7:2e:
fc:56:89:e3:aa:67:f2:d7:cb:e5:37:94:a1:3a:90:
32:f2:4e:35:f9:d0:e5:e7:fe:6b:c9:33:a7:9d:a6:
2d:c4:00:1b:93:93:23:a7:d4:80:f3:fc:19:e1:de:
1f:06:9a:2e:b7:34:eb:cb:4b:88:87:99:75:39:4a:
ac:18:29:d2:1c:51:52:5c:a2:d4:c4:b5:cd:c4:ae:
40:52:72:55:5a:72:0b:06:9f:9b:3f:28:37:29:43:
56:4a:f6:1c:a3:e5:5a:9d:fb:fd:ac:c4:e4:58:95:
79:a1:87:a2:33:79:38:52:63:bf:0b:43:f5:b8:97:
09:9a:53:50:4d:8f:05:01:fb:14:20:9c:ae:82:e8:
e9:24:fd:44:72:05:c3:c9:ef:2d:f6:de:31:16:1a:
ea:37:76:6d:bc:32:a7:ba:43:51:10:e0:67:78:0c:
c4:60:31:c9:46:ec:5f:26:83:0f:ce:ca:c9:8a:d4:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:94:FE:2E:5D:22:3C:80:09:E3:55:CA:35:B7:42:3F:A6:30:2F
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a9:a8:16:c7:db:55:f0:15:e0:84:8e:f2:bd:e0:20:1b:ef:
2a:00:40:93:5f:78:46:fd:e3:4d:f8:70:29:d9:cd:f3:83:cd:
48:2e:8a:81:eb:af:81:b4:6b:c0:9a:d7:7c:cb:be:54:7b:45:
b2:16:90:94:e0:c1:39:76:1d:40:5b:67:ff:a8:2b:f2:f3:db:
d8:ee:79:0e:a8:c8:c6:d9:9c:e7:4b:8b:64:4f:b3:75:0d:ba:
3d:6a:01:bd:67:93:db:0a:1d:ce:20:69:70:31:e6:f4:45:eb:
6e:cd:1d:65:a5:51:53:d4:55:62:3e:0c:80:a7:7c:4a:b2:b7:
66:b9:05:9f:36:39:61:be:7b:d3:24:a1:d9:17:8e:8e:a2:64:
04:02:47:a6:eb:de:6e:ce:42:61:60:48:b2:50:b4:4c:3b:b5:
45:32:48:c5:2b:a3:13:4d:b5:e1:8e:54:ef:58:8d:58:70:c5:
1e:58:aa:70:4d:37:14:e0:fe:a3:00:8c:9a:26:f1:e5:bc:0f:
19:28:62:25:fa:c3:e1:f4:07:27:bb:b9:29:48:34:a4:2d:16:
cb:a1:56:a6:50:8a:25:2d:f8:b8:9b:68:fa:3d:51:81:cb:28:
66:37:52:91:62:4f:b1:87:71:94:20:cb:ce:7b:6e:24:1f:af:
6b:4a:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:07 2025 by rpki-client