Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: HdCQdBopt/GzgwkQdC3y2hPygpx5chs/qS9t8lo8pN4=
Subject key identifier: 66:47:61:DD:1D:F1:BC:92:2D:42:06:CF:77:C6:86:8F:69:D4:D8:22
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 0194BC3C81C039A8DB04434FD1522397BB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 02D1
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: ZRweAqf3AEpIUUNuWKagfVccpwJdj5KJvTnnjkEoaFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:81:c0:39:a8:db:04:43:4f:d1:52:23:97:bb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=664761dd1df1bc922d4206cf77c6868f69d4d822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:77:7e:0a:30:f9:cc:25:17:1c:6e:de:77:bb:
48:eb:9d:d3:e5:3d:c6:a1:4b:f0:8a:3b:19:28:f0:
42:87:92:1b:32:9c:d0:b2:db:de:3c:52:50:2a:3e:
65:c0:ce:50:d9:87:d4:18:80:0b:7a:7f:25:1c:f5:
04:7b:92:46:72:f4:1b:b6:72:fd:e2:b0:11:b6:c5:
06:3e:84:1d:69:3c:16:3d:40:84:62:68:bf:38:bf:
d0:32:86:f2:0e:cf:f6:65:3f:f0:99:51:c9:89:60:
02:ed:5f:26:c5:a7:4e:8e:56:8d:d3:c7:bf:5a:da:
12:62:2c:49:f3:cb:c5:d2:96:4f:45:dc:ad:8e:63:
db:6d:a6:67:95:a9:0e:29:c0:5c:75:04:d1:31:64:
4e:93:61:7b:ae:df:c3:c0:5f:e3:c0:dc:41:89:a8:
13:9a:ef:81:df:30:2d:2e:b6:47:9d:c6:63:30:5f:
aa:47:66:dc:e1:e5:1e:d0:39:db:7d:a9:fc:17:61:
44:97:34:e4:4f:2d:0e:bd:f7:fe:5c:be:b5:8e:a3:
ed:53:8e:d4:10:ef:20:34:af:1b:25:17:5f:56:4a:
e4:7e:65:bd:1b:00:4d:4d:c2:a1:c2:71:5d:ce:69:
eb:69:1b:d4:67:7b:4a:00:59:5b:97:70:75:05:ca:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:61:DD:1D:F1:BC:92:2D:42:06:CF:77:C6:86:8F:69:D4:D8:22
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:54:f1:c3:f8:a9:91:97:98:fe:dd:02:14:fb:2b:2d:09:b5:
c7:14:47:a9:37:bf:13:ec:a1:0c:4f:70:d4:25:38:32:54:34:
ea:3d:b3:3a:f2:7b:36:22:40:96:b5:b1:d8:25:9e:25:c7:e4:
48:b4:a1:e4:0c:d1:66:13:80:1c:16:d2:8c:21:7a:d4:20:45:
59:d8:73:bc:c0:8e:76:90:72:44:b4:6b:dd:58:a8:f1:64:e6:
4b:71:b8:d8:bd:8d:e3:b7:f0:55:c1:02:34:53:b3:c1:2d:68:
e3:60:64:c5:e9:e4:fd:04:b8:8c:bb:08:b5:13:0f:79:3d:8b:
f9:97:37:ab:55:8d:7e:60:95:fb:62:62:d5:4e:b1:22:48:28:
40:22:97:ce:b4:f5:18:77:39:f3:c8:15:6d:31:e7:fc:0b:02:
24:39:c4:5f:18:ed:44:fa:d7:b6:9b:93:95:d2:70:a7:cd:eb:
cd:d4:6c:4b:04:f7:f9:fd:82:84:43:bb:28:06:b9:6c:83:12:
61:71:1e:35:e0:cc:49:93:dd:d6:2d:60:83:61:2d:c2:3e:8b:
58:28:91:bb:99:ab:eb:d3:60:c3:a1:39:ee:ef:91:1e:6a:06:
02:76:6c:48:98:ac:c6:2f:f3:8b:ba:b0:ab:51:05:43:18:4e:
f2:52:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:22 2025 by rpki-client