Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: KsRfYgqN/LeYLqf55N7Gg/rA2JCCsAX8lZzWsT6mhJg=
Subject key identifier: 19:4E:B9:67:C2:85:CC:F4:A8:6E:AB:9A:03:CD:AE:4F:9E:A1:59:84
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 0194BCE0963D9C796058D91227FC6473ECE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 0D14
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: XUHz9jESQJr+2P848W6GsYtVTDyaScp9hyESdEyhc24=)
2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:3d:9c:79:60:58:d9:12:27:fc:64:73:ec:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=194eb967c285ccf4a86eab9a03cdae4f9ea15984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:52:bd:43:f9:08:5a:df:68:e2:f5:df:78:
36:88:f5:96:0f:6b:4d:fb:29:82:a0:d4:19:d8:52:
0e:c8:c0:2b:51:94:b1:e5:ac:5b:cb:0d:35:bc:9c:
ea:59:f2:0e:71:b9:29:4e:d7:9b:e8:fe:84:80:ac:
ad:54:0e:33:1e:cd:29:bf:3d:1c:df:1e:6a:51:2c:
f6:82:c8:83:ae:2f:e6:1f:d5:a6:2a:77:99:0b:e5:
ee:0a:8d:83:0d:c0:d3:c5:44:e2:dd:1f:2d:7c:b6:
9d:39:3c:5f:e6:4a:b1:bb:ce:a2:87:38:88:e1:a8:
e1:56:62:44:4d:55:b9:13:19:0a:23:12:8a:18:55:
c0:ba:fc:f5:77:59:be:36:0f:20:48:30:3b:23:97:
a0:e6:1e:c0:7f:06:f7:c7:e3:a8:01:c0:65:2f:ad:
d4:3b:f1:1a:b6:b2:84:5e:ff:93:1e:aa:9e:77:77:
49:39:ca:bb:79:af:22:e3:d1:60:29:b4:b6:d1:13:
25:a5:89:c0:d5:7c:ae:93:12:25:3d:55:15:97:28:
ca:b9:67:93:c8:fa:d5:70:82:6a:f2:c2:51:0f:45:
1e:b0:9c:9b:52:21:d1:32:87:d2:4e:43:f7:98:13:
2c:a9:0a:38:ae:dc:f8:6d:08:07:0b:f4:35:47:66:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4E:B9:67:C2:85:CC:F4:A8:6E:AB:9A:03:CD:AE:4F:9E:A1:59:84
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:4f:c5:e7:30:d6:1d:70:f9:8e:f8:48:8b:3f:25:ae:98:
d4:2f:c4:3c:0f:36:47:ef:0e:41:7a:d7:df:12:cf:a2:55:60:
42:fe:6c:41:ba:33:81:79:d3:5c:96:a7:bc:3e:9c:8e:05:20:
97:05:22:eb:51:1a:c4:ba:ee:44:4a:b7:14:bb:ea:88:b1:97:
83:ee:86:de:a9:54:85:b6:08:7b:be:ad:67:9b:25:fa:6f:42:
0a:8b:22:64:e4:3e:3a:01:2b:82:3a:98:39:0b:ce:42:fd:0d:
59:31:71:60:f0:89:81:16:29:51:42:d5:69:24:e4:55:ef:c6:
93:a7:d4:af:5d:f7:63:71:c8:6a:0d:19:a6:c0:ea:a8:56:68:
11:0b:8c:b2:e8:61:19:b5:c7:c4:9b:a2:23:4e:67:3a:a8:e0:
f0:be:d1:07:a4:bb:05:e6:aa:81:7d:06:0f:ac:a9:5e:38:1c:
d6:b5:53:bb:69:9f:b5:fa:73:d6:3d:2b:76:8b:af:45:1a:c1:
9c:9a:8d:e7:1c:10:38:6a:46:56:94:fd:46:f0:6f:91:5f:22:
72:00:36:06:3c:04:8d:09:95:a8:51:69:77:60:f7:db:47:94:
03:c4:d2:c6:54:37:55:55:5e:7e:83:42:d4:74:16:96:0b:a3:
01:b8:27:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:18 2025 by rpki-client