Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier: OETDK3q4i4fZH6woQb9lrgOKO/N3oiWEfDhzrIZ+djE=
Subject key identifier: 9E:90:12:50:09:CB:14:57:B2:20:FC:84:D3:7F:7D:61:CA:DB:E9:6B
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 0195E00F772E938656B71A0FD48392CA007D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number: 05C2
Signing time: Sat 29 Mar 2025 04:01:04 +0000
Manifest this update: Sat 29 Mar 2025 04:01:04 +0000
Manifest next update: Sun 30 Mar 2025 04:01:04 +0000
Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: Z+7VEDEIUKWxm1NpJjj5a8rmpxxUY/XvCYzHBQx6eGs=)
2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:77:2e:93:86:56:b7:1a:0f:d4:83:92:ca:00:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Mar 29 04:01:04 2025 GMT
Not After : Mar 30 04:01:04 2025 GMT
Subject: CN=9e90125009cb1457b220fc84d37f7d61cadbe96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:34:05:37:6f:d0:46:17:b3:a0:9c:63:94:
09:ee:e2:53:11:92:74:1d:2e:25:ff:8c:0a:77:55:
e9:be:26:04:6a:8c:25:b5:0a:93:7c:dd:fb:13:1e:
05:0b:8b:b1:b7:f7:84:2d:db:76:b8:0c:a2:eb:6a:
fd:02:3c:41:19:2b:93:cf:27:04:04:8f:c9:27:12:
2d:1a:cf:03:3a:34:f8:49:6a:c9:cf:43:fd:1d:9c:
e5:fe:e6:c8:80:4e:3e:97:73:98:f4:56:0e:ac:50:
f8:3a:a9:fc:c5:51:f2:35:ba:d7:be:24:04:d5:82:
06:fd:8c:6b:a9:74:1c:4c:31:30:a4:aa:ec:d6:e2:
d2:71:0d:9b:2b:ed:d7:a2:fd:09:e7:fd:73:b7:a7:
5b:1f:6a:f1:85:83:8f:64:98:3b:81:28:96:c4:38:
2d:d4:5e:06:b8:bc:f5:00:16:09:e0:9e:c3:be:6e:
50:e8:a9:11:80:df:52:6a:7a:c9:a3:ed:81:5a:1c:
1a:c1:1d:bd:e0:d0:d9:dd:8a:80:09:1b:b3:1e:bb:
c2:76:2a:64:e6:d7:af:a3:48:3b:40:9d:1d:16:59:
dc:16:7a:9c:cf:05:23:90:90:2e:8c:3b:39:e9:8f:
c9:3b:fa:83:95:80:76:9a:da:6b:e6:d8:88:78:32:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:90:12:50:09:CB:14:57:B2:20:FC:84:D3:7F:7D:61:CA:DB:E9:6B
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:34:e1:d2:63:e2:f2:33:37:b3:7d:65:11:85:29:8c:d4:5a:
b4:b1:98:7b:36:71:ec:f2:75:ab:58:1d:d9:75:d7:e6:fb:75:
d7:3f:6b:ee:9b:bf:46:1b:57:16:2d:25:7a:74:0e:3f:ae:6a:
f2:19:d8:0a:89:e5:cb:57:34:17:18:51:d3:15:95:67:92:3a:
7a:a0:f3:ce:cf:ff:e1:ac:19:32:7a:0a:37:8b:5d:c7:d6:66:
43:30:6e:dd:59:65:07:fe:18:eb:51:3b:6c:39:e7:f7:2f:69:
28:28:be:18:35:5d:9b:6b:92:2f:7c:a5:2c:df:ab:87:d7:76:
8e:a7:32:51:cb:ec:c1:8b:8c:a9:f9:e1:00:be:50:b0:48:96:
69:27:54:07:45:ba:c2:2f:cd:74:e2:8d:a6:ee:15:0d:a9:75:
e2:e7:aa:a6:ed:32:81:ec:bb:76:3b:a4:f1:b3:37:56:55:6c:
70:29:3f:5f:4b:44:79:2e:f7:b2:73:c3:93:23:eb:c4:b7:3d:
5b:d8:86:87:67:ff:e4:fa:c6:e6:d1:d9:ec:3b:96:00:82:9c:
48:a5:3a:80:8a:2c:4e:d1:b8:7e:da:97:52:8e:9a:b3:ba:71:
16:35:32:9b:00:bc:8c:a7:8d:30:16:ec:94:55:74:64:09:be:
4a:ae:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:40:28 2025 by rpki-client