Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
File: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft (raw, json)
Hash identifier: 8GkwqSYKBfoDVYEFhT6cuE99yBx9+cBid9WwtOe/izo=
Subject key identifier: D9:8C:9D:B4:C2:CD:A6:6F:2C:8E:36:2C:AE:05:58:97:6C:7A:34:80
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 0194BD4E599FD87D535D925DD477A1B6E678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 1XOKZ2XklGPcq5QMqMVrBtsz3DI.roa (hash: uOLEsbZmCJPEZSYbgL/3UoBOworDcneFhX8ZOrNbRIs=)
2: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl (hash: 4mAPw7YU6qY75xZqGJf05wkbuSYspn7PKbgSKUH/enI=)
3: gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa (hash: WIrKKySjlipgbBStUixKdW9xZvtWQuX2bcDWYj9rmX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:59:9f:d8:7d:53:5d:92:5d:d4:77:a1:b6:e6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=d98c9db4c2cda66f2c8e362cae0558976c7a3480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:d6:29:cf:ac:26:c2:c7:55:3d:61:fd:21:
94:b6:76:00:6e:87:ff:34:2b:b3:b4:66:5f:fb:53:
2a:bc:eb:55:e5:15:f8:fd:8c:f6:10:36:b9:11:68:
56:c1:a6:77:6f:ea:25:75:c7:56:bb:7c:7e:55:bc:
59:2f:60:6d:94:3f:fb:3e:6e:8d:87:5c:78:b2:4a:
aa:85:08:9f:f5:0a:bd:eb:ab:ce:d5:fb:71:03:5b:
45:90:46:25:30:ac:26:cc:76:77:08:ff:01:30:74:
ea:b3:c1:d0:a2:e5:8e:a4:29:d8:3d:c9:d6:58:37:
c4:98:e6:a1:8b:12:a7:a0:95:94:ed:a0:ec:c4:fb:
53:d7:61:d2:c3:68:30:d2:01:06:dc:fe:46:b9:4a:
66:93:6c:2d:1d:cb:3f:7d:bc:17:76:f2:36:bf:c9:
39:03:e4:89:7e:51:e7:e8:da:76:c6:2e:bf:c3:4b:
3b:2e:aa:61:1d:c4:37:aa:c9:f5:f6:77:7b:95:7a:
5d:31:4e:a2:f2:4c:9b:c9:b6:bb:95:39:f4:8c:41:
b4:b7:f9:95:4b:74:39:7a:d9:6c:79:b1:1d:39:f4:
4a:d2:7c:7f:c0:2c:78:6f:e0:c0:9a:89:b3:6d:ee:
65:9b:71:8a:1a:c3:a8:06:e0:c6:92:04:7d:6b:cc:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:9D:B4:C2:CD:A6:6F:2C:8E:36:2C:AE:05:58:97:6C:7A:34:80
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c7:ef:5b:f4:25:a7:2e:53:f9:53:41:bb:f5:64:5d:d0:cc:
6b:f7:15:3c:2d:46:d0:2c:ed:c6:87:d6:62:d1:f2:f9:0d:c3:
da:ca:85:3c:17:57:c5:15:6e:ad:16:90:1c:a0:cf:0f:99:0a:
ca:e0:eb:ee:fc:38:e1:d7:6c:96:b4:5e:93:13:16:12:db:c4:
ea:32:76:24:40:f7:b8:14:cb:43:68:a1:8b:0b:a5:36:a4:9b:
56:c6:43:2c:ff:a7:e4:73:8e:a2:a4:06:aa:17:21:85:c7:ed:
ab:09:d8:ee:62:55:ed:50:17:38:c0:ba:58:48:45:b2:34:32:
d1:80:9a:53:f0:cd:9e:4c:14:58:10:7d:02:59:2a:d0:8a:27:
0d:b1:da:de:d0:83:db:e6:d7:0d:db:9e:ab:92:36:d7:a1:b5:
56:5d:39:6d:0d:90:3e:69:47:ee:b2:dd:bf:e1:ae:7e:ca:d6:
c2:a2:44:73:4d:02:7b:0a:08:62:aa:17:c9:f3:9a:ff:fe:be:
18:da:cd:08:85:f6:b8:74:b3:08:ee:09:8b:cf:06:d8:9f:c8:
70:e0:a3:1c:3a:90:2b:f5:d5:1e:37:c2:9b:3e:0f:05:98:48:
0d:e1:e9:d4:5d:25:94:6d:09:81:67:c7:25:e8:5e:84:dc:54:
c1:2e:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:14 2025 by rpki-client