Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: t4un5DoBALmGs+1kAHdcnx/2S1El7I+xGhiM7GFLZYw=
Subject key identifier: 5E:85:16:EB:85:A7:C2:CC:A0:B9:34:08:65:27:D8:F0:EF:FB:60:96
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 0194BC051A0B646D47C80E837BDB33AA2660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: lVeoZP2sBm3qrpcTpgWT+0r7YAY3QK3BgTO6SRKmnpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1a:0b:64:6d:47:c8:0e:83:7b:db:33:aa:26:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=5e8516eb85a7c2cca0b934086527d8f0effb6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:2a:60:83:0d:ec:bc:f9:bb:dd:d8:54:76:
fa:3d:7d:e5:d7:40:0e:6c:cc:fd:03:00:46:98:8d:
d5:39:c2:64:82:ea:ae:d5:d9:ae:0d:d3:fa:4f:08:
de:d5:cd:3f:f9:73:4c:2a:9c:07:d3:64:22:65:98:
81:39:0a:e8:71:eb:65:34:15:76:92:a4:55:59:0d:
10:81:5f:4b:c5:63:96:11:c6:7d:ce:8d:e1:89:db:
29:00:c1:be:f5:99:d8:84:2c:2a:71:25:c6:86:ff:
a5:67:fa:18:79:a0:0f:f4:05:36:ed:95:8c:d3:05:
6d:d9:33:0d:03:25:85:fc:c3:36:42:22:ec:97:c7:
e6:3f:d3:4c:ff:4f:1e:fd:c6:27:84:fe:a6:03:42:
01:97:0f:be:27:21:4d:ef:0d:0e:1d:99:5d:d5:78:
5a:70:cb:b9:74:69:c6:d5:2c:54:04:f5:b6:26:b7:
9b:86:8e:ae:b1:f6:a4:6c:b5:66:b3:a3:9c:e3:75:
d0:82:64:d9:8d:a4:71:bc:6c:76:76:43:56:71:10:
7c:c6:f9:36:7a:45:dc:82:67:f0:94:c6:3d:78:94:
85:50:a2:62:aa:54:c0:62:d1:cb:35:29:a6:d0:7b:
24:0d:e1:87:4f:14:fb:33:7d:8e:c8:5f:35:8c:39:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:16:EB:85:A7:C2:CC:A0:B9:34:08:65:27:D8:F0:EF:FB:60:96
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8d:e4:50:b0:8d:13:a1:df:19:7d:b3:d1:3d:36:83:bd:19:
e5:e5:40:d6:ea:73:b3:3b:27:73:b8:a0:e1:53:2c:2e:12:da:
4d:61:09:1c:1a:49:8d:7d:49:bc:4a:6f:f3:bf:70:ed:11:28:
06:23:5d:27:ea:8c:70:31:96:4c:72:2f:5f:55:7f:5f:3b:b5:
1e:c6:84:d0:3a:e7:b1:90:d0:48:06:da:24:fb:83:01:82:ad:
e2:50:2b:e8:8e:67:29:0a:f3:1d:3a:4d:94:f8:0b:f7:9e:6b:
4f:3e:e5:e9:33:f1:a9:32:fb:1f:d1:54:9a:01:12:a2:85:bc:
c8:4f:a6:92:78:7e:78:eb:9e:51:fc:54:56:e4:f8:58:ef:bb:
f1:23:6c:1b:83:07:a1:f5:aa:c9:e5:f4:f1:26:10:65:fc:39:
fb:f3:8f:7b:6d:f2:c0:4f:aa:0d:7e:44:ed:53:49:9c:85:8a:
b7:65:07:49:16:cb:98:c5:a9:ae:6c:5c:83:68:dc:54:a0:19:
89:bc:f7:21:78:06:38:89:60:60:d1:ff:be:60:63:17:61:41:
c0:d9:57:80:40:9f:f2:8d:cc:4d:cf:3a:b9:25:60:d7:eb:d4:
3e:1b:53:7a:2a:90:a3:f9:a6:f4:73:23:55:24:13:65:e5:25:
e8:9c:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:30 2025 by rpki-client