Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
File: eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json)
Hash identifier: O1SAdXAQrvZ+iS2mVCSngg9LIL3SxcXnVn0ogHUpIX4=
Subject key identifier: 5A:5D:EE:91:C0:A3:53:45:36:07:D1:55:C1:40:C9:48:BC:6C:7E:63
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Certificate issuer: /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial: 0194BBCE70CDE7BDB71225C46487E7E5FD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
Manifest number: 03B4
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 1LjZlnRBJt_qRKMuzNTKcoTDPVg.roa (hash: uQEaVATrxncZCByVj7FOPBy+k/KEvq9+fzzZSw1GL2k=)
2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: IxGeQR8hxLu/R8vfmI9GsdxNNjT8jP/VMDTTBBmSfbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:cd:e7:bd:b7:12:25:c4:64:87:e7:e5:fd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=5a5dee91c0a353453607d155c140c948bc6c7e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:ac:bb:66:0c:8c:d0:fc:ff:75:c3:ad:37:
51:de:de:2d:49:8b:61:79:0f:5b:ac:cf:28:99:16:
fa:53:26:50:75:37:d1:e1:21:fe:3d:de:5d:03:50:
3e:fc:23:6f:23:af:37:0c:b6:9a:f5:c4:0c:ed:d9:
a3:09:ec:ad:e0:f7:5d:75:47:87:b2:7c:17:4f:0b:
8d:16:cd:d1:73:26:2c:8d:cb:2a:9c:26:08:08:6b:
15:c5:c7:74:bf:8c:5f:33:5f:98:53:97:09:b6:fd:
59:0f:85:1e:0a:10:98:b1:12:dc:0c:27:15:3d:e8:
e3:a6:0f:d0:3f:9a:2c:c3:bd:79:b7:ca:dc:ab:23:
21:82:9c:83:69:de:50:53:00:20:7c:2e:4b:e5:89:
0f:1b:3f:60:4d:42:37:ca:56:9d:da:40:ac:f6:ae:
55:73:57:83:be:c3:89:d4:76:90:06:3a:b1:fa:45:
10:74:80:41:fc:86:93:39:1e:e6:ec:43:47:2b:c8:
14:01:78:43:66:7e:ef:16:11:bb:b0:87:62:bf:e4:
3d:62:95:32:29:9d:0c:67:b4:3b:8c:e4:13:05:3e:
72:aa:d1:0a:c3:ff:60:c0:6f:0e:ee:af:b4:7e:3b:
76:14:ac:b8:6f:40:60:de:b1:96:4c:b3:67:bb:e1:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:EE:91:C0:A3:53:45:36:07:D1:55:C1:40:C9:48:BC:6C:7E:63
X509v3 Authority Key Identifier:
keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e8:67:76:ea:ea:d5:d5:f3:3c:fd:0a:11:09:42:08:43:21:
23:04:7b:c4:20:ef:80:4e:58:8b:5f:3f:f0:a2:8f:ad:eb:79:
1f:80:0a:e3:e1:c2:ca:2f:7b:41:5c:5e:65:63:45:3c:37:43:
ee:39:0c:01:dc:e3:07:3e:5d:ad:98:a6:a0:52:cf:85:f8:05:
07:90:d5:b9:11:45:d0:47:c1:de:51:43:56:a6:64:70:29:56:
b6:36:96:f9:19:a2:8c:32:f7:d7:df:4f:5b:5b:e7:c0:b3:ab:
a3:fc:0d:ba:c1:7b:6a:13:5a:a2:f8:58:1b:38:fb:b3:09:f8:
ac:5f:f4:ff:4c:4f:44:27:c4:9e:0b:dd:b9:35:32:ef:4b:b0:
f7:2e:4a:b0:7e:cf:26:33:4c:d9:61:f2:20:a1:df:2e:8c:83:
6d:78:17:6f:69:80:62:ca:2f:4a:50:25:24:c3:cd:e0:84:70:
cf:c3:f8:87:cb:16:b2:e1:4a:40:21:69:d3:d9:61:f3:83:05:
9f:cb:c7:ac:cf:be:8e:3e:f2:4a:dd:d4:b0:56:ff:5d:7f:13:
55:f9:21:df:2d:d1:99:25:b7:12:f6:55:6e:bb:c3:08:57:da:
4d:ef:ff:b0:71:4b:a6:6e:39:d3:62:89:63:14:d2:7b:14:4b:
75:06:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:46 2025 by rpki-client