Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: zN7vlzwTPR52o32nImlltjWo/pUbkV22H18WFrNJ2qQ=
Subject key identifier: 3B:52:CF:A5:A2:9A:C5:AA:F5:D8:5C:02:47:8D:BF:F1:DD:AF:A5:05
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 0194BD17AE5ABA0510455EE427D1EB7BEF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 09E9
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: wHhJvGk/hERfEIBHtTKKfqXffiW14LiyKBhdobsXoyY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ae:5a:ba:05:10:45:5e:e4:27:d1:eb:7b:ef:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=3b52cfa5a29ac5aaf5d85c02478dbff1ddafa505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:8e:0e:ee:31:f8:58:17:2f:b9:d9:2e:be:
e8:34:d1:e0:90:ba:6c:ac:b2:ad:e4:2b:10:14:e0:
94:0e:ce:32:71:6e:f8:9d:c3:4b:a2:6d:cb:77:d9:
24:81:f9:8e:45:c2:35:f9:54:d1:d8:55:b7:6e:7b:
1a:0e:b6:b5:70:3d:cb:80:03:16:ed:e6:19:b1:c0:
36:b4:7a:27:8f:43:97:2a:5f:1a:e7:6e:08:14:e4:
ec:58:02:28:a1:7a:d0:b3:18:1f:af:8a:dd:2d:ea:
c2:5c:3d:c0:b5:73:52:11:35:77:3c:bf:af:95:19:
4d:fc:a3:8a:62:21:59:ca:68:98:4c:1c:38:90:52:
76:f0:2b:74:f1:cf:09:18:c9:a7:03:b2:15:07:c0:
01:e4:54:00:65:c5:3c:dd:41:00:39:b5:ff:01:ad:
53:cf:5c:4c:71:97:61:b1:d6:81:8d:2d:08:b0:cf:
79:67:46:d2:05:d4:ff:f2:99:06:90:00:79:73:4f:
60:a7:4f:8e:94:c6:3c:03:b0:de:25:3a:dc:19:0e:
fc:84:15:fc:ea:0c:3b:57:e5:cd:59:89:01:ab:bc:
4a:07:2e:79:3a:4e:da:3d:a7:66:7b:5d:fc:f1:f1:
0e:69:7f:86:83:3a:8c:fa:8b:a9:66:fa:b1:0e:8a:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:52:CF:A5:A2:9A:C5:AA:F5:D8:5C:02:47:8D:BF:F1:DD:AF:A5:05
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:98:7e:d0:8d:9e:53:fb:99:c9:e8:06:c4:15:1a:87:b6:ca:
b8:0f:43:43:17:44:5b:0f:08:0b:1d:17:5f:6e:85:ed:bd:26:
83:e4:e1:dd:42:34:9b:d8:be:a7:70:28:57:1b:70:e6:ed:28:
d6:f7:20:27:a3:a3:38:56:63:90:ea:2f:7b:8b:53:aa:53:9b:
64:c5:1c:77:15:8c:0d:c7:0e:64:8a:03:92:1c:fe:22:2b:c5:
c4:bf:18:c7:28:64:16:aa:bf:8e:ff:20:01:6a:a3:03:59:08:
23:44:81:2c:ef:2e:2e:e1:09:f3:29:93:83:66:12:43:b9:99:
cd:fe:ab:47:2e:19:06:6e:fe:ce:2e:52:c3:0d:f7:b8:80:64:
62:a1:54:a2:8f:98:c0:f2:2f:91:c2:6d:e5:6a:6c:9c:ae:ec:
86:79:bd:f3:ba:d3:cb:57:5c:94:2c:c0:ee:27:d6:93:58:b1:
d7:80:25:7b:40:29:ce:ad:8e:cf:a4:69:dd:89:22:2e:b9:52:
43:b6:e0:ad:07:36:a7:76:52:91:7d:ea:cc:44:62:d0:35:30:
ab:f8:1e:ca:07:24:56:d1:17:a8:14:48:e9:6d:c0:25:f1:33:
5c:c5:23:0f:8e:bc:4c:42:93:2e:2d:2d:8d:ba:1f:36:ae:2e:
aa:a5:da:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:24 2025 by rpki-client