Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/55cf0a-218b-4956-acb9-0d715109b007/1/ebIzCvMPyW3yKkEYez9r45jjaCM.mft
File: ebIzCvMPyW3yKkEYez9r45jjaCM.mft (raw, json)
Hash identifier: wh2kZS/L61zqlcmf8qiPTXcShiVbmgHrwUOBK3I5rKA=
Subject key identifier: 8B:47:82:EB:FC:E3:80:7C:68:D9:D8:D3:29:AF:55:0C:78:66:3B:C2
Authority key identifier: 79:B2:33:0A:F3:0F:C9:6D:F2:2A:41:18:7B:3F:6B:E3:98:E3:68:23
Certificate issuer: /CN=79b2330af30fc96df22a41187b3f6be398e36823
Certificate serial: 01840D0094A0C11F068DD33632FDAE3ED814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebIzCvMPyW3yKkEYez9r45jjaCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/55cf0a-218b-4956-acb9-0d715109b007/1/ebIzCvMPyW3yKkEYez9r45jjaCM.mft
Manifest number: E3
Signing time: Tue 25 Oct 2022 02:37:32 +0000
Manifest this update: Tue 25 Oct 2022 02:37:32 +0000
Manifest next update: Wed 26 Oct 2022 02:37:32 +0000
Files and hashes: 1: SuYGfWAJ1cFLjG3bdT9Oh8KqPj8.roa (hash: pbMx1VKnL23F4z74T9IXHMiLmt6T9MfZXsueKgYmeew=)
2: ebIzCvMPyW3yKkEYez9r45jjaCM.crl (hash: DcYAu2z4IJuAxnLpvetdJ0Xc+vm+i7+u+69BPeisHPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:00:94:a0:c1:1f:06:8d:d3:36:32:fd:ae:3e:d8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b2330af30fc96df22a41187b3f6be398e36823
Validity
Not Before: Oct 25 02:37:32 2022 GMT
Not After : Oct 26 02:37:32 2022 GMT
Subject: CN=8b4782ebfce3807c68d9d8d329af550c78663bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:d6:2f:aa:38:93:5b:2b:61:c1:f8:7e:26:
73:66:78:79:94:76:db:d6:7f:1f:ee:bf:0b:9d:32:
b7:d4:a0:0a:56:61:33:42:0e:6a:94:34:df:ba:13:
bd:c1:df:17:c6:da:8c:05:74:30:06:69:6f:22:3f:
94:4b:28:78:f6:ef:a2:24:4c:5c:39:a9:54:6f:f3:
8e:8a:c4:2b:b9:94:56:38:8b:19:a4:8f:ca:cd:12:
1b:55:5c:7e:25:bd:82:c9:02:f7:e5:23:44:ca:dc:
72:41:a1:54:a6:c0:6a:69:86:c2:db:26:8c:3d:74:
07:f6:a6:10:3c:d6:c0:7b:4f:63:83:f1:b9:d5:50:
0c:8b:4a:92:a6:d1:1d:f0:d8:dd:f7:96:91:b6:ef:
2f:60:9e:c5:c0:05:19:0d:d4:66:29:40:cc:4d:be:
ad:95:aa:24:fa:92:c1:1e:2e:0d:09:0d:0a:64:08:
90:b4:b6:44:e9:24:dc:87:00:45:73:92:af:f1:25:
9e:28:a3:45:44:21:d1:75:3b:f8:95:fb:22:ad:e2:
c3:ca:38:4e:1e:52:42:50:67:3f:56:11:61:94:ef:
80:97:f7:2d:9b:8e:86:c0:1c:98:2e:5d:25:a7:24:
45:f0:b1:db:4e:b1:26:54:94:2d:8c:de:1d:70:f7:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:82:EB:FC:E3:80:7C:68:D9:D8:D3:29:AF:55:0C:78:66:3B:C2
X509v3 Authority Key Identifier:
keyid:79:B2:33:0A:F3:0F:C9:6D:F2:2A:41:18:7B:3F:6B:E3:98:E3:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebIzCvMPyW3yKkEYez9r45jjaCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/55cf0a-218b-4956-acb9-0d715109b007/1/ebIzCvMPyW3yKkEYez9r45jjaCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/55cf0a-218b-4956-acb9-0d715109b007/1/ebIzCvMPyW3yKkEYez9r45jjaCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:f5:aa:cf:34:e4:a3:92:19:3f:dd:0d:28:b6:23:6e:72:
d2:07:40:f1:04:fe:da:7b:b0:e6:9b:2c:16:21:bb:33:ca:b3:
55:b2:76:58:d8:21:84:b5:7d:36:b6:cf:62:bf:8b:d0:79:06:
3b:80:82:d2:06:1c:8e:82:4a:6d:00:e7:6e:a1:95:ce:a2:43:
8a:83:7c:99:b5:56:0f:fa:bb:1b:68:a1:15:bd:95:89:0d:e6:
37:e1:ff:7e:d2:dc:1d:70:5a:79:41:08:cf:10:a3:8b:aa:bc:
48:f6:4e:05:ff:85:4a:43:c7:fe:ce:c9:c3:63:22:13:e8:1a:
3c:9f:42:f2:e5:2c:e8:99:84:71:59:0c:7c:e5:bf:20:41:27:
8d:f6:e2:45:e3:9e:09:ef:f1:69:e0:fe:9b:f2:f9:bd:24:a3:
0f:20:dc:82:2a:3c:06:b1:f0:1b:62:6f:b4:85:94:25:54:e2:
93:cb:4b:9b:e5:de:ed:da:63:c5:c2:55:52:a9:28:6e:39:dc:
a0:7a:8a:4c:12:53:bc:55:84:30:dc:6f:23:a2:55:89:6e:5c:
33:6e:e3:9f:45:0e:9c:57:45:da:5f:b3:2e:0d:f8:8a:b6:2b:
76:58:dc:f3:34:f2:3a:13:bb:3e:a1:ce:97:a9:e6:4b:37:41:
fd:41:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:55 2025 by rpki-client