Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File: EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier: +ZnP750B+nv8xc1Erfuh/oRG4fZgGcSVD1yi46qZGHU=
Subject key identifier: 8C:6D:0F:9A:57:BF:71:BB:61:27:59:AD:02:26:34:2F:7A:F4:C5:11
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial: 0194BBCEA19484382C5A70BC30EB3E03D80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number: 0976
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: O98BOD7mnKxwwl3Jsj9TZZoG6M9WyoxV/OZ8pq57kvM=)
2: iEka4Vv56ltOb2j3jT-ILWz-_Es.roa (hash: eHAQPRCUs+jzFQIPkgWCN2IRqlhuSuMwK3wcNPLkVsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a1:94:84:38:2c:5a:70:bc:30:eb:3e:03:d8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=8c6d0f9a57bf71bb612759ad0226342f7af4c511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:c9:fc:c8:18:51:59:5a:50:84:b0:b7:75:
27:00:31:a2:8d:3e:f2:00:74:e5:55:7b:97:6b:9a:
31:77:b5:fc:06:44:d7:de:2e:53:fb:62:04:ec:ab:
f3:4d:33:25:15:bb:a8:a8:65:5f:f5:82:87:0e:f7:
fd:d8:80:2f:e5:fb:e5:2c:9d:25:80:8e:1b:1b:ca:
13:10:01:34:d0:39:9f:33:80:49:c9:f4:4d:e2:ae:
2d:ea:c3:c1:16:58:74:94:cd:f3:e0:f1:0d:fb:3f:
36:56:b6:bc:c1:49:92:c3:82:f6:e0:fe:ec:4e:71:
52:3e:8d:47:c1:e0:b6:be:e0:19:8b:75:d6:62:39:
25:54:d4:c3:5b:28:54:f8:24:43:d8:26:cd:a1:7f:
ff:17:37:35:66:2a:f3:58:29:30:ec:e8:c2:dc:8e:
fa:00:ae:e0:36:b6:41:64:25:53:07:8a:03:b8:29:
98:e2:ae:f7:14:0e:a3:1f:5a:e3:a0:eb:b9:df:00:
15:f4:af:3f:dd:dd:68:1e:74:b1:95:fb:3b:80:90:
48:00:05:b6:ca:70:04:50:e1:ff:1f:8b:54:57:05:
74:9a:a4:6d:4c:7d:5f:ab:cd:fb:e9:f1:c3:e8:5e:
91:c2:91:83:73:14:73:9b:93:ca:34:7b:1a:bd:12:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:0F:9A:57:BF:71:BB:61:27:59:AD:02:26:34:2F:7A:F4:C5:11
X509v3 Authority Key Identifier:
keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:85:80:eb:93:a7:79:6b:6c:14:50:24:60:9b:6a:e1:e0:ea:
e7:51:d2:a3:2d:19:09:f1:40:a8:97:16:d2:8c:44:c0:d0:68:
dd:0d:49:e9:10:00:d0:90:70:29:15:c3:31:e3:80:e7:db:f4:
9c:e6:1d:79:04:04:c7:33:2b:6d:5c:02:14:c4:81:69:f6:fe:
2a:8e:23:f8:52:44:c9:a4:4e:ca:81:7f:bb:e5:92:89:a0:da:
0c:c6:83:a9:4a:5a:34:2a:06:81:43:c6:1b:63:0d:43:f9:b5:
0f:0b:50:91:91:e6:bb:2b:f0:27:0c:0d:84:2a:f8:7e:36:34:
12:ba:9e:8c:cc:7d:f9:dd:3a:bc:7d:35:2d:7b:3f:48:19:ea:
d9:b7:fc:cf:c6:bd:b4:75:4d:e0:1c:ca:47:3c:a8:07:8a:f2:
f2:77:57:9c:b3:d0:58:11:a4:c7:91:8f:a0:b6:10:55:d9:8b:
49:22:a7:99:48:56:11:d5:db:0a:79:12:f4:e6:16:ee:72:d2:
50:35:4c:f8:92:2b:33:3c:af:ae:66:2d:86:b6:c9:a7:1c:9c:
e4:4b:f7:d9:02:dd:b2:be:16:c6:0d:27:1a:e3:74:bc:1b:d0:
34:84:dd:0e:74:c6:ba:4e:42:1f:d3:06:07:d6:56:2b:77:26:
7c:c9:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:29 2025 by rpki-client