Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: 2NYJbN6/GvGpfJU/PdD9TfhnH7wLqiO6RTD8n2qhJ4Y=
Subject key identifier: A1:17:F2:66:4C:75:EC:A2:9D:C4:FF:D2:7A:38:F6:D2:29:E1:52:83
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 0194BCE0C7442B3810B8FB03802ABE246F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: skYYzPIkkuy5RUYkRHulp8dQ9QEuZdqSQROrUhdHcFI=)
2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c7:44:2b:38:10:b8:fb:03:80:2a:be:24:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=a117f2664c75eca29dc4ffd27a38f6d229e15283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:1a:e7:5b:39:9d:c7:37:4a:86:01:e3:b0:
36:89:93:83:cd:ca:fa:45:5a:5c:73:54:09:76:24:
32:e0:66:06:c2:98:53:3a:55:1d:e8:5a:ff:dd:f5:
a1:7d:60:c4:20:d5:da:d0:1b:b3:88:3d:4a:61:44:
c3:1d:94:78:8a:66:96:48:fa:67:88:b7:22:fa:41:
2c:3c:dd:67:ca:a3:42:33:a8:32:26:f3:e8:62:52:
b5:80:9f:d9:3a:12:bc:84:36:ed:5f:41:8a:32:69:
84:df:90:25:16:12:33:88:6c:88:7d:28:df:db:d5:
94:5e:1b:57:c1:0e:76:ac:7e:44:54:51:51:e3:e6:
7e:09:e3:46:d4:2a:e5:1a:a5:a8:2d:75:66:c1:bd:
55:7e:f3:42:90:a9:f5:e2:75:19:49:60:0d:ae:6d:
a0:7c:aa:a3:5c:de:a9:a0:c9:ce:2c:3a:17:2e:b9:
80:f2:3b:ad:9d:73:b0:46:52:cb:a9:d9:29:e1:12:
86:77:07:a9:f0:1c:4c:8f:4f:c9:c0:c2:d1:7c:9d:
8b:57:96:d6:b1:b1:7c:90:72:16:cb:2e:b8:45:87:
4b:15:b8:7c:e4:a5:6a:c3:52:85:a4:01:81:3e:07:
58:3e:df:20:59:45:41:c4:51:00:e6:29:09:91:78:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:F2:66:4C:75:EC:A2:9D:C4:FF:D2:7A:38:F6:D2:29:E1:52:83
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:55:23:ea:a4:71:ab:51:d0:93:fe:7d:15:06:97:03:15:56:
5f:6b:da:9b:3f:60:6c:2f:ca:04:90:4d:2c:78:f2:ae:52:7a:
5a:a6:c0:24:28:50:dc:e5:c7:30:92:a8:c2:69:80:e8:f2:13:
d8:0e:5c:30:6c:38:06:34:8a:d7:d0:cb:b3:9e:20:37:64:91:
dd:a4:24:ec:ec:83:b1:89:92:6a:a3:2c:e1:23:b0:54:df:0d:
da:87:40:61:22:61:03:df:8c:18:4f:e9:6b:03:dd:8d:9e:01:
14:03:e6:df:c9:31:ed:f5:cf:19:a1:9d:d2:63:a6:1b:6e:7c:
c0:7c:7d:bf:f6:bd:39:c1:09:27:2b:7e:67:f1:6c:06:19:d6:
2e:fc:63:d1:aa:8c:95:16:2c:a5:47:be:73:60:ad:40:a6:1f:
b3:b2:64:da:f1:18:9b:02:c2:fe:08:c5:77:59:af:1e:a3:84:
cb:47:7e:32:10:09:92:8f:3f:86:2c:52:66:52:74:4a:16:d9:
e2:25:e9:ee:4c:0a:6e:d7:38:e8:01:d0:84:57:42:07:d9:e6:
1f:77:5d:99:b4:22:f4:51:5c:02:49:54:74:eb:22:4c:04:f7:
f6:cf:bf:1a:3e:05:36:63:cd:04:3a:26:a8:6d:3e:c8:f4:63:
ff:32:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:39 2025 by rpki-client