Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: gPDIdKz/6ZZQfUBRZvDM4OUWQUo0JyKr71Lckvs9El8=
Subject key identifier: CE:2D:84:BD:A7:51:E8:B5:0A:4D:E8:32:CA:45:44:83:CE:6F:85:22
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 0194BC04FCE25F32AE8400101A28CDC25AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0B08
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: BJZqA/DtyL0O7SHFYax860GPQOSYzz4XGHDLmOTNVv4=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:e2:5f:32:ae:84:00:10:1a:28:cd:c2:5a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=ce2d84bda751e8b50a4de832ca454483ce6f8522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:76:3a:fa:0e:bf:eb:8a:53:2c:7a:48:f1:
08:c2:ab:e0:3e:bc:74:86:b9:1a:07:52:9d:c8:ed:
a3:c7:4e:01:09:6e:a8:5b:b3:45:51:86:e6:34:c4:
7e:4c:f4:d4:c0:91:7a:bb:1e:8f:6c:7d:34:79:b4:
80:23:9e:0b:6a:aa:d7:fb:28:7b:07:cd:79:4b:a3:
95:7c:c9:e7:2e:bc:a8:51:a6:39:eb:9a:ae:68:2b:
55:c4:2d:69:ef:b4:88:98:40:85:b6:8a:b1:3d:3b:
5c:40:55:51:c5:54:76:95:81:f8:c1:c4:4b:01:88:
43:db:32:cf:d0:b9:94:52:ea:f9:76:51:4a:9a:2d:
63:1b:d3:5f:3a:0e:c4:6d:22:b1:47:e8:a6:20:b5:
e6:cd:2f:cf:39:69:42:a5:4b:b8:33:b0:31:3e:71:
c2:fc:eb:43:3f:af:10:ea:05:93:1f:1c:55:51:8a:
a6:2e:64:76:24:a9:4f:ee:1b:1d:35:6a:93:7b:ba:
58:70:5a:1a:0d:d4:90:c3:5a:ce:b5:83:3e:80:86:
0b:4c:43:0e:32:1a:b6:1b:69:a8:50:5a:45:19:2f:
df:e4:07:e3:b8:fe:69:03:b0:1a:44:ff:d4:12:88:
08:d1:c3:a8:0c:0b:15:0b:43:a7:f9:25:3a:8d:86:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2D:84:BD:A7:51:E8:B5:0A:4D:E8:32:CA:45:44:83:CE:6F:85:22
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:10:e7:21:b4:08:cd:a4:0d:22:a1:8a:db:fc:eb:5e:20:af:
75:1e:bf:57:2c:67:45:2d:40:fa:f1:c9:ef:79:37:4d:26:61:
1c:93:44:1e:18:c9:2a:5f:b4:fb:10:d8:01:20:ad:cd:76:18:
4d:fc:d8:81:9f:47:e6:d2:4c:a8:ba:6a:33:11:c7:84:77:ba:
2c:06:d4:18:cd:16:0d:e6:5f:ad:43:0f:a5:99:f4:9d:b4:7c:
dc:e6:db:81:0b:6d:7b:e1:c0:60:86:5c:2d:93:3e:7b:30:ae:
bc:32:4a:38:70:fe:58:be:98:da:be:c4:a4:99:39:68:a2:bb:
04:d1:b7:a9:a8:7e:c8:09:cd:06:a9:4a:6f:2f:f0:23:24:5e:
91:f4:1b:2f:98:6c:47:83:0b:4e:cd:59:3a:98:60:61:f7:63:
dc:8d:52:52:0d:c7:48:f5:ea:4c:25:02:70:66:e5:c2:1e:51:
e3:43:02:f4:a1:3f:8b:0e:78:b2:1d:3d:2a:f9:1c:40:58:5a:
c8:5a:dc:71:e5:44:85:97:a0:8b:53:20:70:54:27:67:74:48:
7e:69:95:8b:7a:f6:67:11:ac:a1:4c:20:7c:42:7d:b7:df:11:
5e:8a:da:db:c3:ec:f2:ef:c8:d5:aa:06:89:41:d0:a8:08:c0:
be:ab:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:21 2025 by rpki-client