Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.mft
File: EM0IembnD-9CkWzZhnUBqh1Jwsw.mft (raw, json)
Hash identifier: ZxT42LGl9xDeqhFPYffY/LR4C8cT59bcbznsDYa/Pvs=
Subject key identifier: 35:D6:53:72:7D:76:76:56:49:E6:78:F3:D8:0C:BE:32:5F:7E:2E:BD
Authority key identifier: 10:CD:08:7A:66:E7:0F:EF:42:91:6C:D9:86:75:01:AA:1D:49:C2:CC
Certificate issuer: /CN=10cd087a66e70fef42916cd9867501aa1d49c2cc
Certificate serial: 01933D6FC9FE157C844928CAB03C3F398382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EM0IembnD-9CkWzZhnUBqh1Jwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.mft
Manifest number: 02F8
Signing time: Mon 18 Nov 2024 04:02:36 +0000
Manifest this update: Mon 18 Nov 2024 04:02:36 +0000
Manifest next update: Tue 19 Nov 2024 04:02:36 +0000
Files and hashes: 1: EM0IembnD-9CkWzZhnUBqh1Jwsw.crl (hash: pfQfWs53KTE5fRNoeMuvgKcTO7GDqKg4zaIUz1at69w=)
2: NYhPs1QRitz7Bu8CfjaaYxZo-4M.roa (hash: tvBGxNMBvzCStAgU/+/EKvlm38bg83swpNCdyVmGBfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3d:6f:c9:fe:15:7c:84:49:28:ca:b0:3c:3f:39:83:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10cd087a66e70fef42916cd9867501aa1d49c2cc
Validity
Not Before: Nov 18 04:02:36 2024 GMT
Not After : Nov 19 04:02:36 2024 GMT
Subject: CN=35d653727d76765649e678f3d80cbe325f7e2ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:62:68:ee:89:fb:23:ee:91:f4:98:21:94:81:
f6:e0:88:ef:7f:66:63:db:ad:83:c8:0b:5e:55:03:
99:fe:58:c0:0d:05:cc:91:8d:bd:9d:a2:5b:38:fe:
3f:ac:ec:32:42:60:44:38:26:cb:63:55:cf:70:96:
24:3c:32:b2:50:4d:bc:bb:36:32:75:bd:e0:13:8d:
ef:1f:9f:0a:06:bd:ca:fe:46:17:9b:a8:ca:a3:e9:
b9:58:f3:77:7f:1d:d1:23:1a:8d:82:e1:92:27:46:
b6:80:54:62:6a:25:3d:75:f3:52:ea:71:d1:80:7c:
41:7f:64:96:f0:8a:14:7d:fc:5a:81:85:3f:3a:a8:
37:18:78:fe:f0:9c:7d:39:36:d5:49:f5:4a:98:88:
4b:a2:cc:a2:d1:2f:d4:df:3d:16:d3:58:a6:60:69:
6f:08:45:f4:9a:d5:46:f5:e8:43:dd:3e:d1:d9:df:
c3:8b:2c:71:01:16:20:da:f7:9f:71:32:39:8f:c6:
ff:33:25:d2:ab:ab:11:7b:c4:d1:dd:4f:65:62:43:
24:2f:3e:a7:8d:7a:42:8e:35:46:af:2b:dd:0e:52:
d6:1a:9c:0e:f0:65:f7:32:73:7a:e5:2e:79:ad:6d:
db:58:3d:a1:d8:48:51:f8:3e:27:5f:0d:31:6c:40:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D6:53:72:7D:76:76:56:49:E6:78:F3:D8:0C:BE:32:5F:7E:2E:BD
X509v3 Authority Key Identifier:
keyid:10:CD:08:7A:66:E7:0F:EF:42:91:6C:D9:86:75:01:AA:1D:49:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EM0IembnD-9CkWzZhnUBqh1Jwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4b:73:a8:53:3e:24:39:31:2a:01:8e:27:7d:f8:b2:75:37:
c0:b8:69:26:4f:d2:71:30:f6:11:9f:d8:40:43:44:9b:00:8c:
e9:2a:4d:6b:6b:de:1d:41:59:22:6c:4e:80:cb:6e:c6:84:f0:
75:4a:f7:c8:f7:c3:56:eb:99:ad:e8:59:55:22:73:3d:40:14:
91:a6:2f:32:20:1a:bf:72:57:fa:6e:58:a0:ef:c0:83:68:de:
04:98:b7:4a:7f:99:06:5a:85:91:77:fe:35:dd:99:e7:99:84:
d7:d7:5a:47:39:56:12:ed:90:f6:82:85:d8:f2:85:cb:2f:08:
04:92:16:22:b7:b8:8b:fb:98:d0:a2:44:59:9b:f8:b2:16:ad:
7d:0c:63:f0:39:0c:d8:f5:c7:52:e0:d2:45:07:2d:ba:14:bd:
fc:c1:fe:3a:e7:c0:b0:a1:35:1d:bd:25:54:df:e8:cf:33:81:
d6:24:b7:16:36:36:b9:4a:0c:7e:34:07:67:3b:4f:02:bc:da:
3c:e1:85:5f:aa:af:55:43:4d:43:e7:46:b1:b0:35:d7:f3:1d:
66:3a:0d:ce:34:09:5c:66:d8:af:cb:8d:c6:56:b4:54:36:2a:
2d:37:0a:e1:a8:e1:f1:0e:b8:f3:c2:4d:53:a3:20:73:e1:6b:
b7:be:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:08 2025 by rpki-client