Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier: w8eiyodHO46sUSWg1Reyf81bcnarb5H3QCoo8zIMQgk=
Subject key identifier: 18:08:18:66:AA:7B:BF:2C:82:0B:4C:0A:04:26:39:E3:FE:46:94:B5
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial: 0194BC72FAD61D8F82CECF2F8D5D2DC6227A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number: 13A8
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=)
2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: T2B9Iv7uZa/byGE+gBojtQFDNHxB64hw+lhptpU6yBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fa:d6:1d:8f:82:ce:cf:2f:8d:5d:2d:c6:22:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=18081866aa7bbf2c820b4c0a042639e3fe4694b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:9a:67:af:ca:ff:d3:5d:45:b5:59:9d:35:
a4:d2:9c:31:3c:9d:a6:51:20:c9:38:c8:88:2e:c2:
22:95:1e:4b:12:f3:89:67:56:79:55:42:ea:d2:f8:
5a:08:d8:65:9f:2f:29:81:ed:3b:03:ed:a8:9c:2b:
bc:97:6b:a5:bd:e9:3e:80:93:91:2f:6d:dc:c1:01:
db:d0:9e:33:1f:bb:d0:0e:c6:03:5b:e5:a9:75:74:
b3:01:95:fe:50:a7:f0:e7:aa:3c:f7:24:c8:4f:07:
22:35:c3:81:ee:8a:87:e4:75:c7:9d:0d:81:60:46:
b5:a8:6b:5a:aa:10:f9:f8:9c:c6:c5:f1:07:e9:63:
eb:ce:f6:74:d8:2b:b1:68:82:e9:f5:15:ac:04:da:
24:f3:2f:96:81:8b:4c:81:f5:c1:b2:a5:7d:24:6b:
11:12:c9:7c:7e:4f:42:f0:6a:f1:bf:22:cb:59:6a:
bc:6a:67:19:d6:31:cf:97:e5:37:e0:db:e1:66:62:
52:ef:ae:ed:df:47:47:c2:9e:bb:c1:ad:af:de:e9:
cf:21:c3:ad:a9:16:d1:d8:5e:7b:cf:ee:36:81:aa:
3c:49:42:63:64:0a:6d:90:f1:4f:cf:15:f3:c8:43:
6d:67:82:98:15:32:cf:07:d0:e0:0c:a3:9a:42:7b:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:18:66:AA:7B:BF:2C:82:0B:4C:0A:04:26:39:E3:FE:46:94:B5
X509v3 Authority Key Identifier:
keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5f:6a:51:a2:d7:15:27:0e:ad:0b:53:16:c3:48:22:41:81:
4e:c3:f9:6c:5e:7a:ab:02:1c:19:1f:55:e9:e1:f3:58:e6:0f:
4c:c8:01:24:a5:ac:06:1e:60:86:3b:7f:41:39:90:00:0c:1e:
4a:56:8d:84:68:78:e4:f3:5d:1c:dd:c7:52:34:c3:5e:d2:43:
ae:97:02:4e:ec:76:7c:03:02:72:13:98:db:92:66:50:bd:f5:
ce:1a:6d:00:96:b9:cb:e1:c9:3c:b1:0b:01:af:a6:ce:6d:a3:
c2:4e:ae:41:0e:5f:91:ac:04:e2:b7:7a:4a:5a:cd:e2:79:3c:
59:52:10:ed:40:a8:93:55:e8:14:df:a3:40:cf:41:4c:f7:68:
a0:9b:c3:af:f5:ac:68:f8:b0:36:d7:82:da:3a:68:ed:c0:aa:
ee:55:f0:5a:12:0a:21:d9:5f:98:f4:44:38:06:15:81:8d:4b:
fd:85:77:f5:d0:89:db:62:23:00:a8:bc:30:82:19:e2:89:cf:
b5:de:12:24:95:f9:16:f4:e3:48:05:7d:8f:b0:3e:a7:19:be:
7e:3a:e5:0e:5c:fc:01:bc:0c:23:99:06:7b:a4:d1:03:d3:ec:
6d:05:00:86:74:e8:9e:cf:01:9a:56:d5:46:77:92:73:37:ba:
42:98:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:55 2025 by rpki-client