Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier: ZyWOp2ogpjlRCCQvwva+A0TZJCt24ZIyusXEjW+DmIo=
Subject key identifier: 5A:EE:43:5E:68:B9:20:46:5F:D7:A6:FA:11:E2:56:58:D4:1A:EB:8D
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial: 0194BC04CF738706C7F8FC8552E6593C112A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number: AD
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: trbdPFqvE8tqiAQFgbdnbQ58mcaYN+Xi+lXB4G9S9Zs=)
2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:73:87:06:c7:f8:fc:85:52:e6:59:3c:11:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=5aee435e68b920465fd7a6fa11e25658d41aeb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:b5:45:44:df:21:1a:8c:60:8b:de:33:9c:
34:e8:c4:3e:07:00:b0:92:be:3b:50:23:61:30:b0:
8f:43:a0:c4:79:ab:b2:5d:f8:4c:7c:d9:50:0c:28:
8d:5b:6d:9a:5d:9b:83:c5:1f:ac:0e:51:dd:4b:58:
92:24:37:10:e3:d7:f2:c7:fd:15:e3:61:d3:1c:81:
2a:b6:f4:a2:6a:a1:f7:8c:8d:f1:20:9b:5a:e4:bd:
3e:fe:46:71:24:66:aa:00:09:e4:6f:fa:2e:64:dc:
52:c8:ca:cb:2d:5f:41:4d:e4:19:2f:85:63:4b:83:
3c:4a:59:cc:b7:b4:24:b1:16:0a:6c:bb:af:ff:99:
b0:88:ed:22:84:6f:bd:8a:a9:7e:be:b4:ae:5c:b2:
31:e6:ba:a9:92:53:ab:a7:c0:c2:8c:52:ab:b9:b9:
ee:9a:93:4b:32:3f:dc:56:7c:bd:3a:ac:ca:c7:2f:
e9:ab:50:bc:44:ea:e0:89:21:0c:fa:17:06:a7:f1:
29:17:cb:33:32:21:0f:b6:b8:fa:ba:5a:8a:ba:95:
db:4f:f0:67:5c:ea:51:fa:96:61:29:c2:02:d4:3e:
ac:64:51:c2:46:aa:2a:23:14:78:26:11:4c:8c:f6:
1d:4b:94:3e:6b:39:01:46:38:17:0e:6d:90:66:0c:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EE:43:5E:68:B9:20:46:5F:D7:A6:FA:11:E2:56:58:D4:1A:EB:8D
X509v3 Authority Key Identifier:
keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9c:e2:4b:dc:6c:89:e0:39:71:46:1a:05:ad:f6:05:af:0e:
26:76:65:69:08:bd:25:cf:0e:c0:16:a8:74:bb:fc:18:12:a4:
d1:3e:c3:ed:a1:79:ef:29:dc:78:67:ef:d0:03:da:24:07:16:
57:c0:68:ad:c7:36:fd:dd:8d:ee:3a:e3:cd:3f:f9:61:e4:55:
b7:95:44:68:24:5a:73:27:d2:bb:9b:71:dc:59:37:7b:fe:85:
eb:64:48:24:3f:af:1f:b6:ad:86:08:e5:d0:c2:93:9d:41:3b:
fa:31:74:e3:cc:1c:d9:70:d6:bb:1e:f1:6a:f1:33:25:ee:77:
aa:29:11:a8:86:c0:9e:14:6c:b4:1b:0d:51:dd:77:de:ed:8e:
ec:46:28:9e:d7:9e:03:3b:71:cb:bb:64:de:3b:f6:0f:d2:ad:
63:f4:3e:8b:32:ce:cf:b1:8d:7a:ce:e4:76:f3:66:9c:ae:12:
44:79:5f:cf:56:32:4f:00:49:95:f6:83:2e:cb:67:73:87:88:
aa:2a:ef:24:7d:d9:f8:aa:d5:74:b9:d4:6b:a2:6b:30:da:45:
1b:c7:52:40:d9:63:dc:e0:5e:de:ab:b8:11:4c:f2:27:7b:9d:
59:23:8f:e1:45:cb:b1:76:c3:e1:06:ca:38:5e:c5:3d:86:d6:
6a:92:09:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:00:45 2025 by rpki-client