Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/52dddb-495f-41bd-b870-48b42048d7b0/1/EI0Y-CBXCHW4oskPvgprNV4BU6Y.mft
File: EI0Y-CBXCHW4oskPvgprNV4BU6Y.mft (raw, json)
Hash identifier: jESouLAw9SO5na2ANtaL5lYhO901rnJcMQW1KQjbMBM=
Subject key identifier: E4:8D:35:D7:A3:5C:DD:D6:59:33:0D:F4:F8:BF:93:B3:A7:96:D8:4E
Authority key identifier: 10:8D:18:F8:20:57:08:75:B8:A2:C9:0F:BE:0A:6B:35:5E:01:53:A6
Certificate issuer: /CN=108d18f820570875b8a2c90fbe0a6b355e0153a6
Certificate serial: 018281176D8FE8B176F06560DB900B504B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EI0Y-CBXCHW4oskPvgprNV4BU6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/52dddb-495f-41bd-b870-48b42048d7b0/1/EI0Y-CBXCHW4oskPvgprNV4BU6Y.mft
Manifest number: 07
Signing time: Tue 09 Aug 2022 05:32:52 +0000
Manifest this update: Tue 09 Aug 2022 05:32:52 +0000
Manifest next update: Wed 10 Aug 2022 05:32:52 +0000
Files and hashes: 1: EI0Y-CBXCHW4oskPvgprNV4BU6Y.crl (hash: sNUDwrI/T1xRUcSCrg7yjsqhrLd4y9j4taGHDksVbVE=)
2: mq2U_i-MmzM4TbHHZaWrI03soTs.roa (hash: 5fV+/cOMFKkdx1NjYM1BDck3gLFTvf4qmff5Y+zv+/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:17:6d:8f:e8:b1:76:f0:65:60:db:90:0b:50:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108d18f820570875b8a2c90fbe0a6b355e0153a6
Validity
Not Before: Aug 9 05:32:52 2022 GMT
Not After : Aug 10 05:32:52 2022 GMT
Subject: CN=e48d35d7a35cddd659330df4f8bf93b3a796d84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bc:7b:5a:a4:e8:f2:ef:f2:e8:ce:ef:99:3f:
e0:c3:da:82:1e:3e:61:98:74:18:86:6f:15:37:61:
23:0a:6d:5c:51:62:28:43:c5:f7:d0:66:79:d0:5b:
14:be:4f:1c:68:39:5a:92:9a:10:c8:ad:55:d3:67:
16:b1:ed:aa:12:d3:67:9e:78:4c:a5:59:06:a6:f2:
84:94:fd:f2:fc:8a:35:fd:46:f0:32:00:cf:33:ce:
df:06:c9:2b:bb:d6:61:70:17:30:d5:46:70:e9:3a:
6b:41:24:23:39:fd:08:41:e2:a0:cd:47:1c:04:5d:
28:16:6b:49:0f:58:fb:db:e3:7e:e1:6b:d9:5e:77:
c4:36:25:b2:10:95:85:8c:68:74:42:05:4d:f3:43:
f9:0e:1e:5b:27:be:f5:85:ca:ce:ce:f4:e1:11:2f:
b1:03:24:d0:7e:4b:c5:ff:42:96:9e:e9:d8:38:b6:
62:7f:9c:dc:41:54:c0:6c:ba:ee:3e:57:dc:9a:b2:
0b:c7:79:39:86:0f:6b:0b:d3:46:76:13:25:c1:bf:
34:79:12:d0:6a:00:7a:ad:5c:03:3a:7f:a1:27:14:
7b:9e:e3:35:e6:7f:ae:1d:d7:0d:67:b3:3d:7d:8f:
ef:94:e9:a7:ca:7e:b4:80:bf:2c:2d:a9:81:b4:fd:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:35:D7:A3:5C:DD:D6:59:33:0D:F4:F8:BF:93:B3:A7:96:D8:4E
X509v3 Authority Key Identifier:
keyid:10:8D:18:F8:20:57:08:75:B8:A2:C9:0F:BE:0A:6B:35:5E:01:53:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI0Y-CBXCHW4oskPvgprNV4BU6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/52dddb-495f-41bd-b870-48b42048d7b0/1/EI0Y-CBXCHW4oskPvgprNV4BU6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/52dddb-495f-41bd-b870-48b42048d7b0/1/EI0Y-CBXCHW4oskPvgprNV4BU6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d5:91:9a:ef:a7:79:40:e7:ab:a6:6f:fc:69:b9:af:7e:cd:
40:59:ee:9d:0b:85:9b:25:50:a9:af:64:8e:13:b3:1a:0d:e4:
f2:06:d3:8e:29:59:83:5e:68:4d:45:af:08:95:1e:fe:53:b3:
b5:25:04:d4:c1:23:01:48:33:64:d7:59:8f:75:05:b6:36:72:
23:3a:2d:7e:ae:f0:b9:b3:ed:25:4d:45:0b:f3:df:47:6a:c0:
64:90:a1:9e:11:c5:fb:f1:9a:01:fb:9b:4a:61:36:a2:dd:43:
ef:ad:ff:7e:9a:00:56:68:12:37:89:02:ad:3e:33:b8:ed:90:
bb:12:f9:49:f5:b6:54:4e:da:36:ff:4f:c1:cf:29:b7:03:de:
c4:22:a0:4c:61:47:5f:11:35:c9:67:6e:c1:bb:b2:66:16:bd:
2a:28:68:4d:d3:52:21:3a:05:17:0c:33:65:dc:89:eb:d7:30:
70:60:71:06:26:c3:52:69:f6:3a:38:fe:03:2c:1d:83:42:ac:
4b:6b:7b:4a:2c:ff:5f:8a:8c:04:b4:96:09:c0:fa:4f:93:6d:
0d:18:9b:94:ba:b7:0c:01:22:53:7d:aa:c6:80:af:19:3b:ef:
c7:f5:bf:10:9e:c2:96:ae:ab:30:5d:16:08:91:c5:7f:d1:0d:
25:e1:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:09:48 2025 by rpki-client