Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3f690b-4fe3-461a-b1b7-2bb9dd2f7a60/1/epkSQeTcWTfvs40IIN0kKbwqFFE.mft
File: epkSQeTcWTfvs40IIN0kKbwqFFE.mft (raw, json)
Hash identifier: fwmuEi1Yodcn+DhLkEEnWNYXkQqAb8fd9i5kRCo5Fps=
Subject key identifier: A9:FB:EE:4D:D6:AE:32:42:1F:B4:89:BB:DA:51:88:6D:D8:43:D9:9D
Authority key identifier: 7A:99:12:41:E4:DC:59:37:EF:B3:8D:08:20:DD:24:29:BC:2A:14:51
Certificate issuer: /CN=7a991241e4dc5937efb38d0820dd2429bc2a1451
Certificate serial: 01852D2D1358DDE98D38C5B3E863CF15D53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epkSQeTcWTfvs40IIN0kKbwqFFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3f690b-4fe3-461a-b1b7-2bb9dd2f7a60/1/epkSQeTcWTfvs40IIN0kKbwqFFE.mft
Manifest number: 0A8A
Signing time: Tue 20 Dec 2022 01:36:46 +0000
Manifest this update: Tue 20 Dec 2022 01:36:46 +0000
Manifest next update: Wed 21 Dec 2022 01:36:46 +0000
Files and hashes: 1: epkSQeTcWTfvs40IIN0kKbwqFFE.crl (hash: OSbMCtW/qvkbcPtN+eW3vM1do91mqvUmFZvQMJVzYdE=)
2: mx-EJkSImRzsWZgpakuqMjp4xwo.roa (hash: dz7G1hGsCkC7HtH2Yf8BRycGqK6xwobPWPFtXEnoF88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:2d:13:58:dd:e9:8d:38:c5:b3:e8:63:cf:15:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a991241e4dc5937efb38d0820dd2429bc2a1451
Validity
Not Before: Dec 20 01:36:46 2022 GMT
Not After : Dec 21 01:36:46 2022 GMT
Subject: CN=a9fbee4dd6ae32421fb489bbda51886dd843d99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:3f:72:a4:af:1f:43:c9:40:93:c4:3d:19:
4e:e3:3b:95:b6:d9:0b:83:65:79:b3:38:61:48:81:
42:7b:23:38:b5:90:40:19:d7:4d:3e:ae:0a:ea:bc:
3f:8d:3c:66:ab:b1:c4:a3:c9:47:5b:41:ff:38:d9:
15:4b:aa:dd:0f:79:04:99:f6:66:56:d1:07:48:f6:
88:29:07:24:47:67:b4:ef:56:60:d7:7d:53:12:8a:
7a:9d:f2:d9:54:22:95:81:f6:d9:bd:9f:fa:39:16:
9a:eb:66:f9:1d:80:59:24:cf:a3:64:88:a2:01:bc:
b0:5f:8f:4c:fb:8d:82:a1:c6:3b:e6:47:fe:c1:57:
69:13:8a:90:16:b3:98:6d:94:d5:2a:67:fc:ea:77:
7d:fe:07:33:2c:7b:e9:6e:9b:55:84:14:d3:41:f0:
a3:6c:55:a5:4d:c9:bc:5a:39:5c:16:d1:b9:fb:c0:
81:a8:b3:0b:39:31:74:c8:79:81:31:e6:d9:5d:a5:
2e:85:0f:21:ee:6b:07:f9:c6:82:0b:a7:71:99:08:
37:fe:66:b4:e0:f6:38:ce:8a:45:d7:ec:2e:b5:12:
b6:79:3b:a0:e4:b0:0a:50:2e:a2:97:ea:10:37:0c:
68:74:91:f6:92:d5:6a:16:56:6d:a5:4a:ad:55:ca:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FB:EE:4D:D6:AE:32:42:1F:B4:89:BB:DA:51:88:6D:D8:43:D9:9D
X509v3 Authority Key Identifier:
keyid:7A:99:12:41:E4:DC:59:37:EF:B3:8D:08:20:DD:24:29:BC:2A:14:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epkSQeTcWTfvs40IIN0kKbwqFFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3f690b-4fe3-461a-b1b7-2bb9dd2f7a60/1/epkSQeTcWTfvs40IIN0kKbwqFFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3f690b-4fe3-461a-b1b7-2bb9dd2f7a60/1/epkSQeTcWTfvs40IIN0kKbwqFFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:ab:ec:9d:85:20:5a:41:5b:dc:41:25:e1:5f:15:fa:d9:
82:a0:81:60:fd:2c:17:d8:fa:5d:a4:34:7d:50:aa:e3:f9:c1:
4c:5e:cd:ad:2e:1c:2e:72:8f:ae:ef:f7:93:fe:db:48:b8:fc:
77:e7:ce:c3:32:8e:9f:0b:18:bb:c8:b5:03:52:7a:2e:dc:ac:
32:5c:2d:e8:ba:b6:43:69:0d:78:51:cc:a7:e7:27:ae:24:69:
7c:51:53:c9:e2:a6:3e:ef:5e:ad:85:6d:05:85:c5:35:11:56:
95:82:54:06:c0:39:a6:1c:c0:ef:5d:27:b6:e3:ff:f4:71:6c:
54:e0:a3:cf:22:f9:a1:97:ea:4c:08:c9:4c:8c:5e:2c:02:e0:
5e:17:0d:72:ce:01:d7:6e:65:e8:25:86:83:6b:a6:dc:16:26:
26:51:07:2b:ce:db:17:81:61:f5:4e:84:c4:58:05:a1:4e:f0:
0a:fb:99:6f:a2:8e:fa:54:5b:eb:4d:0b:c5:dc:d9:71:71:ac:
60:3e:90:9b:36:d1:7a:96:ab:06:cc:fc:29:cb:a5:b8:b1:8a:
39:9f:6f:ef:5a:ba:52:69:68:bb:7f:c3:95:fb:f0:7e:af:60:
48:87:a9:e4:10:fe:8a:fc:6c:15:00:e8:8e:79:75:90:0c:64:
ea:c9:e3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:00 2025 by rpki-client