Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: HdlymnPdYHGAv5B62biiCDY5qZ/OYmww6n1bYNpaKMM=
Subject key identifier: B0:3C:2D:4B:E1:D2:F6:73:C3:A2:67:0A:7F:6A:53:96:5D:AE:95:3F
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 0195E1596AC178518BA0F397443D6653B35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 10:01:28 +0000
Manifest this update: Sat 29 Mar 2025 10:01:28 +0000
Manifest next update: Sun 30 Mar 2025 10:01:28 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: /ecZXK0Vy9+TWzuIRIlX0RTM0R4X6CyRvcOy8RdVtyc=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:6a:c1:78:51:8b:a0:f3:97:44:3d:66:53:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Mar 29 10:01:28 2025 GMT
Not After : Mar 30 10:01:28 2025 GMT
Subject: CN=b03c2d4be1d2f673c3a2670a7f6a53965dae953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:a2:bd:50:cd:1b:51:50:a5:d9:e8:53:c8:
3d:66:ed:44:fb:09:b1:8f:d2:fc:9a:0c:cf:d3:be:
9a:ec:7e:6e:09:fb:f0:b3:b5:3e:a3:4c:14:9d:ce:
5c:64:9a:1b:59:f6:20:bf:85:16:04:bd:a1:3e:00:
16:ff:2a:db:8d:27:f6:1a:6a:35:50:b9:69:c2:ec:
a2:aa:a7:88:68:1a:16:c0:7a:7a:9a:d7:a1:1a:07:
a1:39:88:16:2a:6c:b0:34:38:12:c8:2f:f5:14:04:
78:03:f6:c4:a3:53:2c:01:9f:b1:5d:93:f5:74:6d:
ba:71:2f:cc:8d:4b:ee:bf:8e:71:a2:39:1b:47:4f:
ec:86:06:0e:7a:cf:a0:a4:35:b9:e5:92:5b:c2:40:
d2:8c:3e:7a:e9:dd:f7:ce:c3:fe:3a:25:49:71:dd:
61:7c:5c:a4:5b:f0:38:66:30:d9:c3:43:da:a9:81:
d3:90:ae:12:62:fa:88:40:25:90:67:23:fb:de:59:
a9:f4:d6:e0:e5:3c:e6:02:fc:a9:e7:53:59:ad:f8:
13:08:40:65:19:a3:30:19:ac:b3:b0:1f:8c:db:60:
15:8f:8b:ea:82:ef:d9:b0:af:f7:45:42:11:b5:12:
7d:bc:0b:0c:bb:cd:11:2a:4d:47:ab:4f:c2:d9:4b:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:2D:4B:E1:D2:F6:73:C3:A2:67:0A:7F:6A:53:96:5D:AE:95:3F
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:45:48:cd:c8:f5:b1:17:1d:32:b2:43:61:eb:83:7d:56:9b:
40:79:b1:a7:34:48:0c:83:a3:e5:43:5a:6d:75:8a:39:b9:c6:
bb:a9:56:00:d4:8b:02:4d:46:78:dd:70:71:17:d0:83:b1:55:
e4:b5:b7:09:26:ad:90:24:5b:7e:88:dc:89:f1:8f:4f:46:14:
3a:2c:ff:ea:92:96:3e:6b:43:95:1b:1f:74:e4:ee:f1:6b:9f:
d1:ba:1a:08:9a:de:2b:30:3a:2d:51:26:30:d6:7e:a9:a5:51:
00:cc:9e:cb:c7:66:70:86:05:3d:f9:36:04:a8:8c:69:f9:9d:
4e:da:7a:1d:40:d4:b9:31:27:a4:44:44:b8:ac:50:2c:0f:fc:
44:81:3d:d7:17:99:b6:90:d2:5f:9d:7a:fe:19:2f:47:ab:b4:
0c:1e:7d:0c:7e:af:9c:ac:ca:b4:15:96:60:1a:91:24:5b:27:
90:d6:85:df:0e:8b:25:01:29:a1:9f:c1:2e:e7:eb:33:2e:52:
0d:42:e0:75:b9:a3:c9:4d:7e:71:e0:b8:5e:44:79:fb:6b:b7:
9b:ce:0b:c9:27:3d:9f:d1:d3:ac:56:4a:ac:a9:f7:78:0f:5b:
e0:80:31:e4:1f:d3:74:cf:e9:ea:4b:7c:9c:80:d7:17:ee:53:
ef:b3:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:35 2025 by rpki-client