Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/EYfFFuf28XPwvM60skupEnEgtUs.mft
File: EYfFFuf28XPwvM60skupEnEgtUs.mft (raw, json)
Hash identifier: DUqbt2PkefBKwqtLRNoJAzdUG2z2ijz0172Ej50KIlQ=
Subject key identifier: 42:81:51:41:FB:58:49:7E:96:E9:EC:74:49:13:24:F9:18:1B:65:C7
Authority key identifier: 11:87:C5:16:E7:F6:F1:73:F0:BC:CE:B4:B2:4B:A9:12:71:20:B5:4B
Certificate issuer: /CN=1187c516e7f6f173f0bcceb4b24ba9127120b54b
Certificate serial: 0185289EE6F3E139BB28738633B9EC9232CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYfFFuf28XPwvM60skupEnEgtUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/EYfFFuf28XPwvM60skupEnEgtUs.mft
Manifest number: 06A0
Signing time: Mon 19 Dec 2022 04:23:00 +0000
Manifest this update: Mon 19 Dec 2022 04:23:00 +0000
Manifest next update: Tue 20 Dec 2022 04:23:00 +0000
Files and hashes: 1: EYfFFuf28XPwvM60skupEnEgtUs.crl (hash: rn6p93llU9Hcvecnwg9eOXcNT9lMblJtnwmZauIx+AE=)
2: Iqg2XQo3omWVNG369fj4-nj7g2Y.roa (hash: BBLrEZyA4txoYQ82NgDK+RGFqwqn7rJmtFiT7vXnAAs=)
3: YM0sDAz7oGKrUlG24KNPtvbFdxA.roa (hash: 8bb64PBGaUuAiSro2szpfbPAmR7MNnLz1FZ2skC+Ewc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:9e:e6:f3:e1:39:bb:28:73:86:33:b9:ec:92:32:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1187c516e7f6f173f0bcceb4b24ba9127120b54b
Validity
Not Before: Dec 19 04:23:00 2022 GMT
Not After : Dec 20 04:23:00 2022 GMT
Subject: CN=42815141fb58497e96e9ec74491324f9181b65c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:26:3e:f8:96:4d:ba:0a:0e:6f:80:16:22:
bc:ca:58:5a:98:b8:35:44:48:8f:cb:83:55:be:19:
65:32:98:be:9b:01:13:cd:bd:b3:fe:14:52:16:4e:
7e:fe:6d:67:de:bf:ec:41:88:e5:71:93:c3:37:ea:
d4:1a:ff:35:94:b1:80:fb:eb:32:78:af:70:22:85:
bb:10:d8:ff:5a:c7:86:c5:1d:27:b9:16:8b:65:38:
97:88:24:a2:84:25:f5:db:c5:31:40:55:61:3f:73:
d1:b6:a0:74:34:fd:8d:0f:03:76:0d:b1:11:cf:b5:
51:71:e6:6a:c2:76:fc:0b:0d:2a:50:75:d6:a3:11:
6c:0d:c1:17:82:99:85:08:49:ae:35:8e:86:db:c9:
be:08:32:90:04:06:f1:99:8b:72:46:33:0a:ad:41:
95:53:f0:55:2f:14:78:ec:0b:a0:a0:e9:51:7d:12:
a3:7a:bf:81:58:25:83:ca:e3:78:4c:ca:9d:4a:b0:
50:ea:ea:70:60:5f:78:d7:3a:92:c7:60:32:73:6f:
9f:93:46:7d:a9:bb:68:c1:da:49:23:00:85:7b:46:
12:88:66:52:d3:6c:4c:ac:46:7f:bf:94:31:b9:f4:
1a:a6:36:9e:cf:17:a9:0f:df:d6:53:c5:24:8d:45:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:51:41:FB:58:49:7E:96:E9:EC:74:49:13:24:F9:18:1B:65:C7
X509v3 Authority Key Identifier:
keyid:11:87:C5:16:E7:F6:F1:73:F0:BC:CE:B4:B2:4B:A9:12:71:20:B5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYfFFuf28XPwvM60skupEnEgtUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/EYfFFuf28XPwvM60skupEnEgtUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5f9e16-6c88-4888-b165-62000946b104/1/EYfFFuf28XPwvM60skupEnEgtUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6f:ff:2b:2a:d5:ac:66:18:51:09:38:dd:fc:10:fc:d8:b0:
74:7f:bc:a5:fd:b1:1f:0d:4e:b6:98:d1:b6:17:5c:2c:eb:6b:
66:0d:1a:74:d4:5f:3e:13:c4:bf:98:b7:9f:f4:be:6a:df:2c:
54:91:41:77:3e:49:c4:fd:6b:d8:62:30:e2:c7:33:02:7a:16:
50:08:e4:10:a6:c3:3a:a5:7f:8d:ba:f9:6a:c1:78:e3:f3:91:
5f:87:1b:f1:80:2f:f3:e6:94:86:21:01:d4:bc:57:87:8a:a1:
0e:26:db:d1:2c:ee:ca:bc:bf:2a:32:81:9f:45:9d:ed:9e:cf:
71:5e:f9:45:48:b9:e3:22:e3:93:8d:82:ab:30:4b:84:56:f3:
60:7d:19:6d:20:16:e1:38:bd:92:6a:f9:87:7c:5b:aa:db:22:
74:57:6f:16:93:a7:74:9f:60:6f:52:a5:0f:ff:05:8d:4c:0c:
d2:3f:ae:01:b4:c7:34:63:80:bd:44:77:42:b6:05:31:24:7c:
44:7c:ff:5a:cc:28:ce:04:4d:b8:7e:aa:e1:c4:64:3e:f6:1c:
d9:0c:da:86:33:84:f3:a4:fe:46:02:9c:95:3a:e6:57:7f:20:
6a:13:5d:34:08:ce:7e:f8:06:cf:87:f1:09:31:28:8d:fe:2b:
2c:36:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:45:36 2025 by rpki-client