Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File: E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier: 6veNH4kubbdqWxtRzuWHfPP4eXGRUPp5zv8GPHbxPz0=
Subject key identifier: 31:8F:39:D2:A8:14:3A:6F:84:AA:05:A3:28:7E:9D:AE:CC:7E:74:5A
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial: 0194BD4E817127AC66937C7B28A3072420FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number: 0C9E
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: rdPx2oXld6mGhwaWA0gZ+HN/9lV04OE/Rwl8cfsbinI=)
2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:81:71:27:ac:66:93:7c:7b:28:a3:07:24:20:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=318f39d2a8143a6f84aa05a3287e9daecc7e745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:99:e7:cc:2b:a8:90:cc:e9:e3:e6:28:45:
76:4f:22:4a:19:ed:3c:6a:ea:74:e4:83:c0:25:86:
cd:96:d0:50:60:61:ad:1a:16:83:9a:34:41:76:e1:
0a:7b:15:e9:e4:2f:ea:41:c0:4c:56:b2:71:bd:1e:
0b:0f:06:44:0b:6a:e6:4b:99:80:f4:14:10:2d:44:
26:c7:17:5d:a4:d2:0e:e5:62:1f:27:a5:b8:12:12:
0d:04:1b:a8:f3:f2:dc:a8:ae:3c:5e:d3:69:2c:1c:
1f:06:15:c2:a0:59:8a:71:99:a4:91:8b:28:c1:67:
ea:ea:8a:d7:dc:8a:05:d1:e3:46:c7:6f:a7:18:8c:
a2:2d:29:98:e3:e1:c4:96:04:ca:5d:cf:43:a6:bb:
b5:69:db:fa:7e:47:0a:92:21:91:f6:89:02:c5:05:
4d:97:2f:e7:f3:d8:56:0f:5a:4a:62:18:dc:52:06:
27:f5:a6:9d:e3:07:a1:e2:cd:0c:5d:c5:00:8d:09:
1a:b9:2d:ee:9b:10:2d:c9:7a:2f:05:e4:bf:4c:c8:
7c:71:bd:ac:68:9b:cb:c4:ca:a8:29:df:7c:54:6e:
04:65:73:e3:e9:69:eb:58:d8:11:41:f4:25:63:a8:
94:4f:12:fb:bf:ee:88:52:39:fa:f2:cc:5e:23:32:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:39:D2:A8:14:3A:6F:84:AA:05:A3:28:7E:9D:AE:CC:7E:74:5A
X509v3 Authority Key Identifier:
keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7f:4c:c2:45:69:b7:d2:35:de:c2:24:1b:14:01:74:bd:f4:
8d:3b:de:6f:25:d3:48:1d:1f:1c:a3:f1:1a:ea:b2:95:ee:5d:
d6:45:22:25:01:da:97:f7:fd:ae:73:f1:1a:4e:44:26:80:fe:
c3:1c:2d:b1:cd:3f:65:f1:a6:fc:30:8d:74:52:1e:d9:cb:d0:
8f:19:41:51:48:b3:01:fb:ed:3f:44:6b:d6:ea:11:8a:c2:77:
85:16:34:a3:42:c3:61:e7:61:75:92:2c:30:da:fd:37:1c:a1:
82:25:e8:26:29:48:d5:17:a8:c0:a3:75:7c:3d:ce:e2:21:02:
55:b2:7d:34:ec:5c:09:3c:ce:20:f3:b7:e4:8d:b5:3b:ef:6f:
b1:03:21:37:d2:34:ff:73:61:aa:1a:15:21:eb:91:40:ec:eb:
9c:ee:c8:be:ab:10:28:00:c5:4c:b1:61:50:80:0d:04:8d:ea:
8d:08:f6:9b:a8:3f:e6:d4:ec:fc:f7:45:b6:8d:a7:51:74:d5:
9f:2a:fa:84:1d:dc:d3:85:76:6b:8a:be:82:ec:7d:4a:a9:f7:
a6:ea:2e:9b:64:a9:75:18:3a:0b:f4:32:fe:41:7f:dc:e0:5a:
7f:9c:c8:99:c8:25:0e:76:19:e2:02:f0:2f:3e:f9:28:ea:3e:
83:45:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:57 2025 by rpki-client