Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: JfSSjfOjekcqTXwCIDGWnEEyVUGbIKk5h47IM3v0gYM=
Subject key identifier: 4E:EB:92:9E:F7:EC:D0:B9:3D:D7:81:07:B2:93:A5:D4:5E:65:9C:7D
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 0195E0B4BEB3550F5FFDBCD5C9807BE803AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 07:01:36 +0000
Manifest this update: Sat 29 Mar 2025 07:01:36 +0000
Manifest next update: Sun 30 Mar 2025 07:01:36 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: AC9KCMA1X3vpKDBJFMZ/cCo3JD8YKtECw60DhnOxRfQ=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:be:b3:55:0f:5f:fd:bc:d5:c9:80:7b:e8:03:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Mar 29 07:01:36 2025 GMT
Not After : Mar 30 07:01:36 2025 GMT
Subject: CN=4eeb929ef7ecd0b93dd78107b293a5d45e659c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:76:f6:93:dd:77:43:1a:b0:1e:98:20:2e:
fa:e3:af:70:44:33:60:9e:c5:d2:48:1f:b5:a6:ad:
bb:55:ea:a0:7c:55:18:6a:b0:31:11:46:7a:78:fa:
9b:7d:a1:50:15:58:83:f9:ab:3d:19:eb:35:1f:39:
3a:11:27:53:18:4d:e7:c8:75:d4:27:e8:41:86:39:
1e:7b:9e:7d:51:a3:b3:0e:78:60:94:0d:31:55:dd:
fb:bd:1d:cc:1f:c4:de:23:60:f9:60:00:6b:92:32:
66:3f:02:ea:d0:03:30:53:08:f2:63:b2:bf:67:22:
dc:05:90:cd:46:7d:c5:1b:f6:2a:57:b5:1f:9f:89:
a4:09:cb:bc:cc:b6:30:f8:d3:f4:cd:ce:b0:08:23:
5f:38:f8:e1:16:a0:0a:a9:29:00:00:0b:76:8a:ef:
4f:35:0b:79:f0:18:0f:4b:c2:23:ab:5a:2c:ed:5d:
04:d7:55:eb:ba:c4:e6:92:10:b7:bc:4c:d5:6a:9d:
d1:3c:0a:93:10:0b:46:a5:e6:19:fc:15:f3:31:26:
1f:80:8a:b6:a4:4e:b4:91:c6:96:7a:b1:fb:ac:90:
f7:51:a5:54:3c:c1:56:63:fc:4b:f6:c3:4a:39:09:
5d:8d:8c:17:9a:dc:96:1b:a9:75:04:ec:cc:54:bb:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EB:92:9E:F7:EC:D0:B9:3D:D7:81:07:B2:93:A5:D4:5E:65:9C:7D
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:93:ee:08:01:aa:86:2e:66:27:25:4f:af:1f:8a:06:23:64:
f5:00:ca:d0:54:0d:e0:57:18:b3:47:48:80:b1:fa:e8:c2:c8:
31:e2:b7:6d:29:bb:4a:a4:00:35:9f:fd:65:5c:f0:85:a0:f2:
b0:de:82:d7:b3:4e:4e:1c:ff:cc:f6:57:37:32:f6:2b:68:3b:
00:2c:98:30:2f:f5:70:fe:0e:7e:69:13:2a:ce:40:d2:a3:50:
73:e9:e5:23:4c:24:c1:ed:6b:b5:5d:f2:d4:c9:00:64:9d:e7:
31:24:3f:8f:5a:1d:fa:8e:5e:0f:8a:9d:ca:ea:05:cc:e2:09:
ba:21:27:8b:28:40:e0:ad:ff:e0:18:96:25:4a:02:e9:5b:49:
36:4e:38:1c:f8:c3:d2:5c:5f:e8:e0:b5:56:a3:87:ce:a2:ff:
3b:1c:91:a9:92:72:13:3d:22:26:f3:60:cb:12:7e:c2:8f:e7:
62:0f:1a:de:ad:75:fd:12:07:64:90:52:8f:3c:82:2c:26:b4:
3b:88:86:3d:90:71:a0:1f:e2:b5:d5:b4:6d:cc:f3:16:e9:81:
27:56:d5:23:64:fb:e9:09:e5:44:eb:cf:25:64:0e:47:e3:29:
a9:f0:fa:6a:b2:73:b6:de:ec:d2:c6:17:2c:1a:84:8e:da:21:
e3:4f:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:35:02 2025 by rpki-client