Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: 63md+M4olCNIxI+176VKVR0lkBF2np1v9ILflPsROBI=
Subject key identifier: D7:9F:31:99:3C:DE:72:C2:52:79:26:E5:F8:3B:47:8F:86:0C:E8:FC
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 0194BC3C856BCA95538B353E3C7944509E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: Ls+xI0158+nghQ/Xcd97Xu/8gSAEmb3YF/8Djb3j50o=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:6b:ca:95:53:8b:35:3e:3c:79:44:50:9e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=d79f31993cde72c2527926e5f83b478f860ce8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:81:24:22:d3:00:e2:f9:48:99:20:2d:b2:
71:65:d1:f6:ff:42:9d:9a:19:80:c7:11:3f:2c:bb:
96:2b:39:39:87:09:a8:17:29:02:0c:99:3f:9b:6c:
a0:45:8b:4b:7e:d8:45:c2:98:0f:b6:98:ba:44:b7:
81:7b:af:11:48:2d:3c:87:e2:a7:9e:fd:49:83:d8:
79:c3:62:49:bc:23:f7:af:17:18:5a:1e:c9:c1:c4:
60:3d:ac:74:2a:a3:f6:92:4b:5b:2a:cf:e0:30:22:
3a:d0:95:06:7e:f6:70:67:18:79:73:c0:b3:e9:6f:
9a:1e:a6:a8:92:78:1c:4b:ce:23:de:66:07:3f:24:
b7:25:bd:17:3d:0f:4f:0d:8d:4e:c8:e6:00:33:ce:
b9:3f:ec:3a:c5:1e:76:c8:bc:53:73:5a:25:91:1e:
f1:f1:b6:5b:0b:ba:22:9d:24:fc:e3:da:97:57:8c:
48:6b:10:63:3e:5c:e5:55:da:11:01:ac:22:b7:86:
34:03:82:ee:cf:a1:bd:fa:00:02:98:3e:d2:99:ee:
46:5f:cb:4b:61:6b:98:27:ed:06:18:97:03:ce:46:
15:d9:9c:69:b8:23:e0:92:82:d2:5c:f7:b5:aa:b4:
12:56:bf:71:fe:49:00:6d:f6:94:dd:f3:20:3c:6b:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9F:31:99:3C:DE:72:C2:52:79:26:E5:F8:3B:47:8F:86:0C:E8:FC
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:00:20:f0:0b:8f:4f:28:49:28:5f:b0:06:ef:68:8b:af:fd:
f9:90:41:35:88:26:be:0f:44:de:6f:3b:9d:10:86:bc:5e:de:
62:a5:30:73:fd:bf:ef:f4:a0:dd:8d:9f:2d:ee:83:47:60:9b:
74:82:4d:af:44:b3:88:5c:ae:59:4c:17:0d:1b:76:23:63:dd:
13:57:fe:2f:87:2c:d2:80:a8:56:fc:5c:63:d8:fe:97:7d:4e:
5f:cb:df:44:b6:9f:81:cb:cc:e2:77:ea:a6:80:fe:8a:88:c5:
2e:fc:c1:1f:ab:d5:b3:ed:d1:6d:6a:3c:ec:c7:d7:21:11:d7:
1f:48:0f:48:d1:38:17:92:74:b3:ad:f3:cc:24:67:14:a4:d5:
ef:d9:68:13:e2:1d:b0:c6:b0:4a:61:be:e3:4c:3b:87:66:3c:
18:81:83:9d:38:eb:8b:94:0f:4c:a3:6a:b9:3c:4c:20:15:fe:
cb:a6:88:2b:a0:de:5a:ef:a9:56:f8:9d:15:4a:b3:15:61:7a:
15:52:89:40:03:c5:b3:cf:b8:dd:c4:ac:3c:59:6c:17:ea:61:
2b:7e:9a:4d:46:23:27:31:f5:ce:70:43:13:36:d4:e4:a1:b5:
19:85:3b:a8:96:60:6f:db:a0:15:a0:da:1e:5a:e9:f5:2f:32:
e3:50:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:12 2025 by rpki-client