Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json)
Hash identifier: NtylUye6X2I6JZsi4jt61pkPDnwI+ddhHn03Diodd10=
Subject key identifier: E0:F9:48:BD:6C:28:5D:60:96:E5:12:6E:F5:0A:9D:5B:53:A2:F0:FE
Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Certificate serial: 0194BC3C99689B962013DAB1B999C998E34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=)
2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: JH+0DtMvyICtuU1THhGbYx2G1R/onEt6n2Hey1KyuRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:99:68:9b:96:20:13:da:b1:b9:99:c9:98:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=e0f948bd6c285d6096e5126ef50a9d5b53a2f0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:35:86:e1:91:9a:ef:4e:55:b5:3a:39:11:
21:16:49:d3:a1:e1:da:22:8e:3b:f3:7e:66:c9:58:
89:20:64:89:98:63:32:ff:c6:df:b7:33:5c:f0:9b:
37:88:a3:da:a0:29:dd:5e:14:6d:bb:d7:74:83:9f:
ea:1c:1f:2e:15:bb:f4:f1:81:ed:61:92:28:84:b6:
5d:7b:c3:4e:0d:42:d7:9e:31:c1:17:ff:c5:02:12:
98:18:ef:e6:32:96:f4:10:3f:d5:1f:4b:28:6a:46:
9e:b1:68:ac:40:ab:3c:5d:b2:c6:1a:8c:dc:11:be:
a1:45:49:44:99:db:b6:e3:98:0c:5f:be:fc:81:5d:
6a:30:50:76:cf:fb:78:12:22:45:4b:93:34:46:69:
c0:cc:2b:b2:eb:45:fd:2e:0f:48:3b:82:6b:68:47:
9b:08:1a:16:62:86:dd:75:63:de:24:7f:95:f4:a8:
97:c1:a8:ee:e5:a8:41:77:dc:74:81:36:fb:7a:d0:
76:35:db:0f:a0:72:60:f6:d0:ae:63:8e:10:c0:0d:
37:7c:4e:9d:1f:de:1d:cb:b6:3c:6a:52:89:4a:05:
c4:b7:4f:4a:5c:d7:b3:4d:21:3f:24:13:19:c9:95:
5f:ce:46:e2:de:2b:a1:46:62:e6:be:9d:c4:f0:2a:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:48:BD:6C:28:5D:60:96:E5:12:6E:F5:0A:9D:5B:53:A2:F0:FE
X509v3 Authority Key Identifier:
keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f1:6e:e0:53:ed:80:ec:8a:ab:57:8a:0f:5d:fe:4c:0c:c2:
8b:49:39:c1:77:1b:26:b2:0b:b3:c0:74:91:c1:9c:ea:10:1e:
c2:95:47:fe:52:f0:68:49:b4:8d:b5:8e:70:e6:50:41:ce:ab:
97:36:9a:b3:94:54:44:2c:6d:c0:63:f6:2c:16:b3:b2:92:86:
fa:f4:b0:9a:79:9b:a3:d6:67:7c:ce:68:8d:69:e8:90:77:7d:
58:13:da:fa:30:f3:6f:b2:bd:03:4b:ba:8b:19:b9:2e:42:5f:
a5:06:9c:6e:e5:71:a8:df:53:57:5f:6b:d9:a4:0e:be:bf:86:
93:c5:9f:94:88:59:65:ad:df:bf:37:44:c5:e2:71:c9:3b:77:
d8:a0:21:b7:77:9e:0f:dd:1e:d8:02:54:64:71:a9:e7:0c:fe:
1a:a2:f7:45:81:4a:85:0e:f6:6c:6f:a0:5b:b9:97:4b:d3:de:
dd:42:6e:bf:57:4a:a0:1c:c9:f2:d3:88:91:75:7c:59:22:aa:
6e:04:9d:76:ed:17:e7:83:05:ae:1c:38:17:e8:60:bb:62:b0:
2b:9a:30:73:bd:32:55:a9:a2:de:1a:99:59:5c:9e:e8:01:e3:
ce:0e:63:6e:f2:cb:5d:74:2e:3f:c3:c2:59:ff:26:50:42:66:
b1:cf:80:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:56 2025 by rpki-client