Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/EjlyrnKYSLOZXO8aApscZtp3fl8.mft
File: EjlyrnKYSLOZXO8aApscZtp3fl8.mft (raw, json)
Hash identifier: PTBa/6ax7CbqAmb8ntJOX4mU+Gvkwbce75GnTc7B0ZA=
Subject key identifier: AF:29:0A:CF:6E:F6:16:71:1C:E4:5B:26:5E:26:E9:3B:B9:86:1E:31
Authority key identifier: 12:39:72:AE:72:98:48:B3:99:5C:EF:1A:02:9B:1C:66:DA:77:7E:5F
Certificate issuer: /CN=123972ae729848b3995cef1a029b1c66da777e5f
Certificate serial: 018F1858FB7D03181AD45BE94122E8BA3606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjlyrnKYSLOZXO8aApscZtp3fl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/EjlyrnKYSLOZXO8aApscZtp3fl8.mft
Manifest number: 0D21
Signing time: Fri 26 Apr 2024 03:00:35 +0000
Manifest this update: Fri 26 Apr 2024 03:00:35 +0000
Manifest next update: Sat 27 Apr 2024 03:00:35 +0000
Files and hashes: 1: EjlyrnKYSLOZXO8aApscZtp3fl8.crl (hash: 5jCHy+gJ4opps+PG+1tcZbhrlEXdzqrOOKa1Zrig+Fw=)
2: dbjj9DTmvwYYLgzQuhe8mOlQQqE.roa (hash: h1+6osQK5g9zq/k6UT2BsA/+4TTUQ857BT5et9zHnTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:18:58:fb:7d:03:18:1a:d4:5b:e9:41:22:e8:ba:36:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123972ae729848b3995cef1a029b1c66da777e5f
Validity
Not Before: Apr 26 03:00:35 2024 GMT
Not After : Apr 27 03:00:35 2024 GMT
Subject: CN=af290acf6ef616711ce45b265e26e93bb9861e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:40:5b:7e:be:87:28:38:65:9d:dc:59:90:29:
2e:93:84:23:8e:1c:97:a2:72:d5:3d:3c:c2:34:76:
e3:1b:6a:b1:40:f7:6d:c7:36:5e:83:63:5a:2c:d7:
e1:b8:df:12:c7:5e:03:27:df:ef:89:2f:d0:a8:5b:
f9:1c:23:b0:d3:4c:22:71:ac:22:7c:3d:64:b9:a4:
0e:34:43:5c:c3:55:93:c7:a8:fa:cd:91:32:4b:eb:
49:98:a5:d0:99:02:a7:fc:a4:ec:9f:96:4f:f1:fb:
d7:0b:cd:bc:7a:99:c3:78:73:0d:73:a2:67:ea:22:
a1:e3:bd:d0:76:78:47:4b:18:e1:8a:c0:0e:02:20:
f1:40:3c:de:27:08:32:af:68:64:11:48:6f:a0:dd:
e1:54:53:7e:74:7c:48:ba:d1:ee:61:0b:6d:3b:f2:
99:61:4a:ec:fe:91:3d:b3:72:93:4f:af:88:73:ba:
e9:7e:c3:b8:21:a5:3c:3b:90:1d:07:ed:71:57:0c:
4e:f4:f6:4e:30:89:3d:e7:c8:f5:27:20:f8:31:2c:
63:b0:39:f7:46:d4:0e:4b:62:3e:89:78:cf:7e:32:
e7:06:50:1e:ba:c0:45:92:ca:a6:1d:03:48:d7:a6:
45:2c:98:5d:48:f7:1d:0f:d6:8f:37:14:ca:10:c6:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:0A:CF:6E:F6:16:71:1C:E4:5B:26:5E:26:E9:3B:B9:86:1E:31
X509v3 Authority Key Identifier:
keyid:12:39:72:AE:72:98:48:B3:99:5C:EF:1A:02:9B:1C:66:DA:77:7E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjlyrnKYSLOZXO8aApscZtp3fl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/EjlyrnKYSLOZXO8aApscZtp3fl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/EjlyrnKYSLOZXO8aApscZtp3fl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:2b:c3:9b:0b:31:82:66:97:7e:3a:a6:dd:08:10:19:bb:
33:78:7f:10:7a:b7:91:05:a4:d4:e5:19:e6:18:62:95:d9:6a:
83:0e:00:83:b8:8b:00:29:ac:48:7a:70:56:c2:05:b2:4c:bf:
b6:d5:66:47:8f:0a:06:67:20:ee:45:51:ba:fe:60:a6:e6:85:
3a:b3:3f:59:35:3c:75:7b:5e:b5:d2:62:20:3f:72:9a:7f:a5:
d8:c9:82:df:84:ee:8c:10:47:24:36:12:0a:5e:57:12:db:e5:
1e:59:da:69:d7:1d:b3:72:a2:47:dd:13:d8:ec:8d:7c:89:ed:
df:4f:2e:61:df:ba:49:b7:31:6c:f0:7f:12:4b:72:90:2b:45:
a0:a6:94:e4:d1:d2:83:cd:91:db:e3:05:67:56:19:36:3e:7a:
87:1c:80:b8:ab:53:ee:cb:bf:e8:df:82:7d:19:5c:ba:05:a5:
17:7c:f8:c2:42:43:61:93:d3:f5:12:44:59:93:66:d2:3c:49:
47:50:ed:3b:de:0f:6c:13:99:be:bd:ef:5f:28:e0:e1:21:ee:
93:df:c9:30:77:30:b3:8a:65:aa:ac:36:da:ad:21:da:b1:44:
06:35:e3:d6:eb:92:fd:3f:72:ff:32:fc:3c:d5:c5:b4:d1:a7:
3c:13:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:28:27 2025 by rpki-client