Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
File: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft (raw, json)
Hash identifier: jNRq8vKb1RfEDx8hxiVKYxLrujSNX4aW67VrZhVBRWE=
Subject key identifier: 4C:68:C6:7B:2C:F1:E1:D8:4A:B2:B8:3A:EF:03:97:4E:12:32:99:C2
Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
Certificate issuer: /CN=b043e621fe1009701f6366843c0abc41e180c144
Certificate serial: 0194BBCDC884B137E126BCBCA3188D25FA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: HyPwmwNvj6CdMpZdefHGIg4yDzE.roa (hash: OXYxYv21hsNNqtBtEPFKc2/1/qoxMz48zojYmP3J5L8=)
2: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl (hash: UN2wdS0lOFJg1Fy82O0AXFd7wEAa170KRBYZloDieOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c8:84:b1:37:e1:26:bc:bc:a3:18:8d:25:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=4c68c67b2cf1e1d84ab2b83aef03974e123299c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:83:37:62:b4:c4:a9:c4:23:a9:85:a0:7a:
ba:f2:44:cb:10:bf:13:14:4c:96:0e:8d:cc:7c:07:
74:0b:57:3e:a4:d2:30:fd:79:e8:1b:bd:6c:d1:4d:
2b:e2:75:f0:44:5c:12:eb:58:9e:ab:d8:5a:50:41:
8f:6e:01:4b:e8:2f:0e:9c:40:e1:53:bc:85:1b:e0:
2c:b5:19:5d:da:09:54:cd:b9:79:be:8f:89:e5:6a:
2c:65:3b:1e:92:df:a8:32:f5:38:ba:e0:fb:6b:b0:
94:33:b5:8d:aa:c7:90:99:52:71:8d:37:df:e4:3c:
98:0a:81:ce:51:56:94:55:76:e7:39:87:6e:f0:9e:
df:ea:d5:ea:a8:b0:98:a4:e4:49:57:74:17:51:ed:
2d:7a:f2:88:1e:38:d5:4f:23:ee:c6:bc:3e:c9:25:
c8:cf:34:67:91:ab:fe:7c:47:4e:21:98:c2:ef:74:
d2:3e:67:0a:b9:0a:f9:b6:6a:64:24:39:5d:f9:91:
cf:57:df:1e:dd:c4:29:54:15:03:8d:78:d7:d7:10:
1b:c0:8d:17:f3:d5:bf:62:0e:9f:80:dd:20:01:86:
82:a5:6b:e7:bc:91:79:88:e8:29:20:57:52:93:b0:
89:3c:c8:e8:54:40:48:b9:37:cc:9f:10:db:c8:7a:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:C6:7B:2C:F1:E1:D8:4A:B2:B8:3A:EF:03:97:4E:12:32:99:C2
X509v3 Authority Key Identifier:
keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:81:eb:07:ad:6f:bf:19:24:0d:4e:37:b9:6c:49:61:a2:d0:
36:9d:02:3c:16:ae:7f:c2:42:61:13:8b:b5:a6:c2:4e:48:9e:
a6:6e:67:f8:f8:49:b2:fb:00:2f:d4:d8:70:14:36:a1:70:0e:
94:81:53:33:de:a0:46:6f:c5:4e:d4:3e:eb:ab:47:6c:08:70:
e6:84:bc:35:2f:01:fa:b2:dc:e1:24:9c:cf:55:9a:9d:27:6c:
ed:e3:68:8d:38:4b:35:1e:8c:45:5c:2f:70:ef:83:00:7e:fe:
81:db:11:7b:c0:61:b1:4e:54:cb:e4:7c:64:27:5d:22:89:64:
5b:f9:f3:e5:95:10:af:35:36:88:06:eb:f3:0a:cb:6e:eb:98:
ac:45:0c:43:1e:ef:b9:ae:51:ae:2c:25:45:0c:84:cb:0c:67:
4b:22:d1:e7:ae:48:f9:90:d4:77:bc:6f:ff:28:7c:58:9b:d0:
e2:e6:24:06:32:ea:dc:98:25:3b:0f:1a:9d:74:d4:d5:57:05:
2a:25:24:ee:90:b2:73:61:5e:2c:31:cc:13:cd:30:dc:b8:4e:
86:07:e6:60:15:b5:a0:95:8e:0a:ff:a9:d8:ce:ff:8f:b0:6b:
cc:15:b6:2d:1f:80:1c:77:2e:df:08:8a:d1:6d:42:61:fc:de:
e0:aa:2b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:15 2025 by rpki-client