Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier: P2HnAzxfDS/Q2iADUHcW1bxahzkN1oei0Hw7u9YTWLw=
Subject key identifier: 2E:F7:59:D1:FF:C9:C4:68:94:1A:66:12:10:09:F9:D1:ED:91:C7:90
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial: 0194BBCE02EAAF4BE8F0444EE42606B4BACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: Hdo0JQgTFMLfp514_zX_eH0BV28.roa (hash: 1zoX3E+YpaDl71akpZOBfWw1Iq/htQIg0CTgRLbNZSk=)
2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: QCdOrNpLa4GJ00DJx/esn601NNA1lo7jwphs4uvrUq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:ea:af:4b:e8:f0:44:4e:e4:26:06:b4:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=2ef759d1ffc9c468941a66121009f9d1ed91c790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:73:e3:ba:ef:09:07:4f:b3:df:d7:d3:59:
e3:6e:4b:fc:b2:d7:70:92:3e:03:f5:7a:f9:a6:a8:
34:1b:2b:35:50:0e:45:a8:73:39:30:d6:00:07:db:
51:54:d4:50:4d:40:4a:79:1e:35:d5:aa:e2:89:eb:
c9:29:d7:6d:e7:b1:3c:65:fe:1b:b2:33:12:ed:2a:
1c:85:e6:59:3e:aa:3c:5a:62:8f:a1:de:4d:44:63:
23:ab:74:12:c1:5e:06:b8:63:1e:0c:80:a5:73:51:
e3:02:e3:c1:cc:44:3e:52:a4:2f:e1:13:71:83:ef:
ae:de:9c:1a:13:ad:80:9e:b5:e6:e5:30:5b:68:01:
91:11:8f:ee:11:aa:68:f5:35:d6:18:ec:00:d1:d5:
81:dd:04:21:07:1f:91:69:e0:70:9c:05:a9:0e:92:
ab:56:c2:08:c7:f1:4a:12:ff:eb:24:9f:46:33:c6:
39:fd:6e:bf:c9:a7:1a:4f:a0:f4:7d:98:91:77:68:
7f:ea:44:d5:32:c8:b7:a0:aa:54:2a:a7:3b:2a:7f:
75:3d:88:90:0c:86:37:1e:b3:0f:01:29:a5:a0:5b:
48:77:4f:d4:2d:2a:b7:13:2c:fc:66:9a:0f:5a:f5:
6d:64:dd:94:be:4b:b4:da:3e:71:40:fe:27:8c:f9:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:59:D1:FF:C9:C4:68:94:1A:66:12:10:09:F9:D1:ED:91:C7:90
X509v3 Authority Key Identifier:
keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4a:9b:0c:da:87:47:e0:d3:1c:6f:b8:eb:fa:24:e8:0f:ce:
39:09:b5:3d:ec:c8:db:52:22:96:48:41:d0:f5:d5:af:a8:82:
65:b1:f8:c7:90:62:3d:19:1c:c1:fa:73:41:98:c9:7c:2d:03:
ff:3f:5b:5d:c6:2f:f5:1c:ec:38:9e:4b:95:96:29:5b:7e:78:
2f:4f:d5:e1:e2:d2:d0:71:9f:7c:fd:e5:54:03:21:23:26:47:
06:0d:0b:a2:b8:32:42:f3:e1:88:2e:ee:37:e5:44:64:6a:b1:
2c:c4:1c:dd:0b:f4:e9:e9:b6:f4:27:39:d9:e8:60:88:e7:33:
ef:41:06:9d:06:6e:4c:8f:78:3a:ed:4a:89:3b:c3:04:1d:25:
b9:20:f6:42:06:94:83:5b:17:7b:f5:2e:4f:13:4f:a4:f8:82:
ad:a6:ba:38:ee:1c:e1:57:ef:17:1e:f7:b6:18:79:5d:16:2e:
79:6d:82:06:76:a4:18:6e:be:df:66:dd:92:b7:d6:33:9f:fd:
29:e1:63:46:cf:17:5d:ee:d9:41:4f:dd:e6:b6:34:b9:6d:08:
93:1f:94:ef:c3:1c:16:18:fb:99:85:4b:18:da:b6:64:83:48:
b4:b2:e3:27:c1:48:70:37:90:a7:7b:5a:61:6d:31:c7:ec:b2:
95:1e:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:05 2025 by rpki-client