Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: 037bTIQWkHAlVjHCaeatlKC5+opCwMGEQZNtI2UYbPc=
Subject key identifier: 36:4E:97:6C:E9:A5:07:C1:B4:22:B6:B5:35:7C:AF:0E:A3:4C:B3:8C
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 0194BCE0AC7E0C2FD2247FDAC6D8F68E32A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: VPhoPVD+YYyloI0El2dcIIussa9N0O8RlFK8uFihhYw=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ac:7e:0c:2f:d2:24:7f:da:c6:d8:f6:8e:32:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=364e976ce9a507c1b422b6b5357caf0ea34cb38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:96:90:52:b1:97:ec:28:8a:67:3a:a0:10:
86:ce:f1:52:b2:3b:f1:22:0f:3a:02:86:2d:88:93:
bf:a4:7e:61:9a:1c:4f:30:f0:e7:22:55:b6:fc:37:
41:77:9c:38:03:21:3e:6d:6f:7e:dd:15:8c:72:d1:
7a:bc:d0:4c:99:81:49:14:12:9d:43:a6:04:49:6a:
0e:65:58:81:c0:3b:4e:39:8a:fc:6d:6e:f4:a9:25:
47:45:df:ab:f1:c8:27:c1:07:1e:99:01:ba:41:2e:
b7:4b:9b:01:0b:af:a2:93:f5:7c:31:f4:6b:64:28:
15:3f:6f:2c:fe:84:80:bd:fa:e4:a7:a6:b4:6e:48:
84:36:9d:82:66:6b:e1:e3:fa:99:f9:0f:72:04:96:
3b:fd:cc:0a:b9:39:da:ac:8d:c2:cf:f9:6c:2b:32:
18:3d:fb:1c:8e:a1:0f:57:87:7f:76:f5:ce:bf:99:
75:b5:7a:1c:0f:41:64:3b:2c:f7:66:5f:a3:6d:bb:
93:38:89:25:72:99:82:df:1c:e7:e1:5d:da:b3:68:
48:53:f7:74:c5:d9:bf:b5:07:a5:ea:d8:03:cc:3c:
c9:31:20:2b:bd:e6:cd:d7:2d:a9:e6:6f:c3:7a:7a:
2d:a2:4e:f7:b2:21:d4:c9:13:73:13:2a:85:9f:88:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4E:97:6C:E9:A5:07:C1:B4:22:B6:B5:35:7C:AF:0E:A3:4C:B3:8C
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3a:bb:36:b3:a0:50:6c:18:48:32:5d:55:7b:00:43:a2:65:
b9:bb:23:6b:a1:c8:74:46:1c:18:b3:b3:af:c3:4c:6d:ad:d2:
76:ee:be:3d:0e:a6:35:74:c6:e8:c7:3d:0e:a4:20:ec:d3:cf:
05:33:70:b0:84:e0:f4:06:ec:27:c8:f4:e2:10:68:7d:dc:17:
64:8e:18:47:59:c8:f3:cd:51:68:6a:1f:fb:36:54:48:6e:80:
8a:44:26:49:96:18:2a:72:56:ec:d8:79:8a:9a:23:93:e4:db:
78:e8:20:d4:73:bb:69:21:fd:08:63:85:bf:7f:da:66:31:76:
3d:45:1e:50:58:e3:99:52:e6:8e:c6:55:76:32:a6:57:86:3b:
f3:60:16:12:2c:e4:1a:e6:23:59:86:61:a4:1e:88:3e:18:a3:
25:45:cc:a2:36:0f:28:fb:1f:90:1b:e8:66:ca:ef:f9:23:b7:
43:ee:5b:32:4f:a6:f0:2e:cc:7a:8a:4b:85:8d:ae:1c:29:99:
18:84:d5:af:2e:30:ef:47:c7:a3:47:57:83:c7:44:f6:5c:3a:
a6:d9:36:59:88:28:42:d8:5c:b1:77:f7:e1:b6:ec:d5:1f:ec:
ba:d6:82:ab:a2:92:0e:b9:b0:98:5f:45:aa:70:04:85:85:63:
99:06:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:51 2025 by rpki-client