Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/EZpNTFA6iPNk5MQNcBxExEN6Ggs.mft
File: EZpNTFA6iPNk5MQNcBxExEN6Ggs.mft (raw, json)
Hash identifier: MQex1hIOrqUXzqFjNWNSLEKVQz11aNEPXnGzQJ/TUrA=
Subject key identifier: 0E:BB:C5:4C:08:0E:0E:FF:91:FC:44:A2:D9:C2:14:8D:49:34:12:0A
Authority key identifier: 11:9A:4D:4C:50:3A:88:F3:64:E4:C4:0D:70:1C:44:C4:43:7A:1A:0B
Certificate issuer: /CN=119a4d4c503a88f364e4c40d701c44c4437a1a0b
Certificate serial: 0192DCDF88AE9D45C7807FC2DA535E57022F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EZpNTFA6iPNk5MQNcBxExEN6Ggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/EZpNTFA6iPNk5MQNcBxExEN6Ggs.mft
Manifest number: 08EA
Signing time: Wed 30 Oct 2024 10:01:29 +0000
Manifest this update: Wed 30 Oct 2024 10:01:29 +0000
Manifest next update: Thu 31 Oct 2024 10:01:29 +0000
Files and hashes: 1: EZpNTFA6iPNk5MQNcBxExEN6Ggs.crl (hash: zUFpXyCaGIGDjumYJLkoGBdEJc47dVSYqvHRs6YWOcQ=)
2: tDVrfQp6VV_tjzCZyrNzk56tNqc.roa (hash: NuY4fISNY7xis3tAo6EGPiE58A/Q+ley/fRDn14pPOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:df:88:ae:9d:45:c7:80:7f:c2:da:53:5e:57:02:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=119a4d4c503a88f364e4c40d701c44c4437a1a0b
Validity
Not Before: Oct 30 10:01:29 2024 GMT
Not After : Oct 31 10:01:29 2024 GMT
Subject: CN=0ebbc54c080e0eff91fc44a2d9c2148d4934120a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:6a:59:b0:5f:04:b2:bb:77:cd:62:06:c6:
fa:db:93:c3:0c:4b:23:50:ab:86:7b:21:8e:8a:70:
f3:e2:22:c8:a2:02:a2:6a:a5:9b:9e:b0:0e:5f:f8:
a1:64:57:e9:42:ca:12:0c:a3:72:16:61:8f:2b:28:
e6:5b:73:d8:63:d6:77:f3:7d:7d:75:72:8d:b5:78:
9e:77:3b:87:9d:d4:fa:14:7b:36:14:d9:12:f1:3b:
4f:50:a6:48:9d:d7:21:c5:39:0d:ec:24:09:37:0b:
85:9a:6c:7f:d7:1a:0c:1d:07:a1:60:a7:f2:9f:7f:
ec:a9:64:b2:98:7c:28:1f:c6:49:5d:7e:e6:db:bb:
c5:ea:ae:17:e2:ed:a4:da:68:d3:ad:3f:2d:f3:82:
91:2f:bb:52:83:9e:c5:15:7a:94:c5:7e:28:e7:c8:
54:9e:f9:a2:a7:9c:90:56:db:70:d7:e5:b6:77:53:
67:59:ae:26:90:22:db:79:9b:9f:3e:e1:82:ac:d8:
f2:e3:80:e3:19:35:7f:da:3e:fd:9e:9b:e0:be:18:
be:a9:53:98:ee:d6:d4:62:bd:d5:df:13:2b:a3:30:
45:f7:87:14:3a:00:9b:23:63:6b:02:d8:39:fb:14:
a8:8e:e5:b4:84:63:cf:7b:a1:c4:2c:25:47:6e:8f:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BB:C5:4C:08:0E:0E:FF:91:FC:44:A2:D9:C2:14:8D:49:34:12:0A
X509v3 Authority Key Identifier:
keyid:11:9A:4D:4C:50:3A:88:F3:64:E4:C4:0D:70:1C:44:C4:43:7A:1A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZpNTFA6iPNk5MQNcBxExEN6Ggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/EZpNTFA6iPNk5MQNcBxExEN6Ggs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/EZpNTFA6iPNk5MQNcBxExEN6Ggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b2:9e:30:89:78:9f:3b:f7:2e:2a:77:21:7c:0b:91:ee:68:
d7:cc:66:f7:be:8d:5e:77:e8:34:df:e0:ce:a1:65:51:15:8e:
a0:9d:7c:b2:77:d7:31:ab:85:c3:00:3d:50:d4:4d:80:ca:34:
ca:4e:7c:4f:c8:14:e8:ea:90:d5:63:18:38:98:b0:83:c9:be:
3d:7b:75:05:05:67:74:e1:76:29:23:a9:16:55:cb:d1:13:19:
52:82:1a:b5:d1:75:83:4a:4f:c4:8e:29:ba:20:e9:8e:eb:2e:
2b:c4:5a:95:6f:52:33:0d:29:71:bb:9b:d0:ab:70:ff:63:c9:
a0:ad:24:7f:cf:79:45:6b:de:dd:5f:82:ea:f3:99:05:14:e4:
16:4d:00:c0:fc:c3:b8:a9:67:14:63:a2:40:8c:c8:fd:40:84:
a5:dc:d7:8a:bf:85:99:cd:45:56:96:27:2d:24:09:0f:c9:f2:
0c:ef:76:c8:80:29:82:ff:1f:0a:d4:00:94:01:51:db:3c:42:
54:6e:ae:36:8f:ab:fe:24:2f:d8:6a:ec:f6:31:fb:ae:47:d6:
ba:70:42:43:d3:71:f7:58:cc:f8:a9:3d:48:e4:d8:ab:31:c3:
cf:b1:5a:a8:9c:f9:80:59:82:3c:38:d5:41:99:a2:67:22:b6:
b6:12:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:32:08 2025 by rpki-client