Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: 6K8E4UcfDPCxFKYGHz04x/MGBFXOYYYK3oQEaD0FdyM=
Subject key identifier: C8:CB:0C:A0:D1:C1:D1:CE:70:9E:3F:1C:2F:9D:23:E8:CB:0F:1D:E3
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 0195E18FFDCE70E7CABF70F3695ECE3E8D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 1370
Signing time: Sat 29 Mar 2025 11:01:05 +0000
Manifest this update: Sat 29 Mar 2025 11:01:05 +0000
Manifest next update: Sun 30 Mar 2025 11:01:05 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: HvYW58PRrfCH2EfcUWq10zinNBNMCVAEUVbTivT1vRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:8f:fd:ce:70:e7:ca:bf:70:f3:69:5e:ce:3e:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Mar 29 11:01:05 2025 GMT
Not After : Mar 30 11:01:05 2025 GMT
Subject: CN=c8cb0ca0d1c1d1ce709e3f1c2f9d23e8cb0f1de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:5f:b9:27:a5:2f:d0:02:e7:0f:32:94:82:
2b:27:15:8b:f3:2a:39:ae:5d:30:37:76:31:10:87:
09:61:36:57:4c:2e:5d:7a:76:f6:ee:42:c5:97:3d:
b0:5b:09:3e:c4:f7:49:00:70:77:be:29:3d:69:44:
50:29:ab:de:f3:4b:b6:1a:7b:2a:ef:ed:ad:dd:65:
9e:32:bb:a1:82:d7:4e:b6:89:0a:79:5d:8c:17:80:
f1:f2:30:2a:11:b7:0a:10:35:90:ee:2e:3e:2c:c0:
39:60:4f:d6:3c:17:90:7e:0a:2c:b9:1f:96:a2:57:
62:19:e7:45:71:56:fc:92:d6:49:0a:fb:5e:3c:51:
a1:f7:d1:45:56:02:ed:40:a8:c0:eb:38:42:55:cc:
8e:48:7c:b7:e6:7e:1f:6c:76:f9:54:86:36:64:5b:
7b:e4:19:c1:0d:e4:00:e6:43:37:d0:63:df:77:5e:
2a:88:b3:2e:19:b3:27:bd:a5:81:02:e2:73:4b:94:
e7:4f:c3:56:6a:db:fc:9c:f8:71:27:99:d4:e2:61:
f6:2a:31:af:1c:eb:c4:06:f7:99:8c:4a:d1:b0:98:
df:df:0a:fd:f1:70:e6:e7:1e:3d:e9:30:20:8d:7b:
18:4d:3d:6a:f9:dd:b4:5b:df:4e:69:a6:2a:56:da:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CB:0C:A0:D1:C1:D1:CE:70:9E:3F:1C:2F:9D:23:E8:CB:0F:1D:E3
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4c:0e:da:f9:e3:74:18:77:0f:a3:0f:21:f6:1a:50:58:6d:
09:ca:c6:fb:c8:0a:79:b2:62:c5:c3:e4:29:9c:71:54:5f:ba:
ba:05:dd:77:46:a8:c3:b8:88:ab:a6:63:3d:f7:b1:8c:d3:2e:
70:2b:cf:17:00:0e:c0:aa:09:48:84:46:d8:44:b5:06:64:1e:
86:4e:9a:a2:ea:c5:84:73:01:96:fd:25:83:e6:23:3b:d6:f3:
be:ab:fe:d3:8e:05:54:90:5a:00:78:3c:d4:c8:f2:d1:05:12:
ad:b9:3a:cd:0a:dc:b4:4b:12:09:80:cd:bb:9b:8c:50:98:0b:
28:7b:8c:74:f8:7d:8e:c8:7f:63:ed:cd:50:0a:9b:00:aa:d3:
3e:5e:5c:89:e6:b8:4c:d3:17:0b:b3:50:23:cc:17:63:cd:d2:
9b:fd:ad:7a:01:30:58:aa:40:23:93:14:85:e4:cd:77:70:e3:
a6:5e:bf:78:a1:85:7e:20:da:bf:77:9e:a4:ea:37:ca:6c:f0:
0e:b1:2b:4f:ca:95:b5:2b:e3:36:fa:45:4c:fd:91:a2:e9:a0:
53:0e:f8:b0:55:09:e9:4c:9d:de:64:0d:75:33:08:53:64:a4:
b5:27:1f:63:8e:9f:56:08:02:35:f3:e9:35:3e:cd:8b:6a:d6:
07:ab:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:30:55 2025 by rpki-client