Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: dR16aGTcRsGiVEhZfo15ZrfJ1bwEefnvaDOGxlkViV0=
Subject key identifier: 42:D3:D7:26:7A:BB:43:7E:8E:90:E4:8A:B6:7A:E7:CC:AE:8C:1F:61
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 0194BD4E5C42C60B557ADBFCEC86E8E45AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: 8yCfnkTEyaPwDJPxxx31B+Ebf2YUVU13w8/l1UHaoNA=)
2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:42:c6:0b:55:7a:db:fc:ec:86:e8:e4:5a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=42d3d7267abb437e8e90e48ab67ae7ccae8c1f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:69:d8:66:5b:62:6e:1b:b7:fc:e8:f2:92:
0a:45:0e:18:af:88:5b:50:fe:79:13:4a:13:4c:24:
6b:61:a9:aa:a4:32:5c:a8:6e:6f:60:1e:a4:94:7d:
dc:9e:2c:18:f5:cb:49:fb:1e:4b:ec:9a:8d:13:50:
48:3a:6a:69:09:8d:a2:86:33:5a:2b:0f:d5:84:90:
45:fb:60:ac:93:4e:2b:9a:25:d7:b7:00:54:df:1c:
ea:28:4b:11:81:43:01:26:5b:67:7b:1d:ba:c6:6e:
c4:e3:88:f5:ab:1b:aa:5e:f4:8f:eb:a8:68:3c:72:
87:3f:68:90:08:64:a4:5f:1e:60:1d:aa:0f:68:5d:
e1:e0:2e:91:10:1e:3e:80:e3:7b:88:8b:e7:54:6f:
ab:d0:0a:66:40:81:1f:6f:9d:38:44:ef:5d:1b:c3:
28:b0:b1:a9:ad:cf:97:1d:9f:37:76:26:a0:2a:72:
2d:a0:93:cb:08:b5:c2:ad:9f:25:94:7c:50:0e:6c:
26:47:b7:2a:e3:a2:0c:09:3d:50:67:03:b7:a4:75:
5b:46:de:59:cc:06:7d:08:8c:26:2d:e4:6d:5d:e1:
09:32:ec:a4:ab:98:d0:ee:57:20:2b:d2:96:69:da:
1d:21:0b:e3:ef:2d:5f:53:45:58:2d:41:9e:c9:b3:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D3:D7:26:7A:BB:43:7E:8E:90:E4:8A:B6:7A:E7:CC:AE:8C:1F:61
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4f:fd:62:2f:88:41:35:00:04:bd:e8:c8:bc:d9:b8:6d:81:
7b:a5:9b:1d:37:59:60:bf:7f:74:2e:ae:2b:73:3b:a3:74:24:
41:03:d5:97:cc:fd:24:6f:8f:93:ef:e9:fd:a3:4d:de:e9:27:
b9:4e:4e:c8:7b:21:12:2e:fd:dd:c6:96:c3:04:7b:54:ec:1c:
6c:38:cb:73:d9:b1:9c:5c:c2:57:46:8c:6d:34:25:16:6b:71:
5d:19:27:e6:ee:c2:94:9d:89:a8:92:d3:ee:dc:91:ff:13:79:
70:d3:09:d7:86:34:a3:e0:3b:d6:40:d0:76:30:cf:9c:9b:35:
59:6f:b5:45:71:26:87:ac:27:2b:d6:bd:da:27:82:bc:e5:25:
1a:cc:d0:76:ab:18:52:9e:59:83:41:07:12:1d:66:69:2f:cd:
b4:ca:e8:2e:a9:db:5b:82:6a:29:bc:f8:4b:05:ea:7a:fe:e1:
2d:c1:69:c2:e6:d5:f5:6b:aa:be:84:af:bf:d0:81:da:06:b3:
fe:99:05:1b:1b:46:72:50:fa:6d:db:b2:f4:72:4d:76:50:f7:
79:5b:3e:89:a9:b3:28:6d:fc:ee:4d:c1:1e:77:9d:2c:50:14:
e6:29:f9:be:8c:ef:9d:0c:fd:64:16:2d:59:01:2b:80:2c:8c:
ce:8c:b9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:56 2025 by rpki-client