Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
File: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft (raw, json)
Hash identifier: /0JgXUg+aN73pMaCXT5W5XnwDS0WZjSDdiBs5tjgaMU=
Subject key identifier: 30:93:11:61:14:90:04:6B:BD:29:74:65:8E:99:20:2D:CE:71:85:B3
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Certificate issuer: /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial: 0194BBCE606EFDD3ACBC74051580DE4DCE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
Manifest number: 057A
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: SndF78oR6fryAiynZ4vCQXymF90.roa (hash: 4zhfx6PHrX1MSNSh4PpqsgR21D/O6XBM7TNNCbU0s7g=)
2: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl (hash: p1twEVgoldwftaqXrzjyCvP/vKsYv62nJbm7TLbEblQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:6e:fd:d3:ac:bc:74:05:15:80:de:4d:ce:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=309311611490046bbd2974658e99202dce7185b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:62:71:87:2a:4c:0f:65:78:e9:c8:1f:05:
f1:f1:8b:51:88:a3:e1:04:67:63:59:88:d4:47:ee:
70:b1:32:43:c0:d6:60:37:50:f1:49:f0:4d:a4:74:
e5:d7:1d:4e:19:dd:ad:5a:2b:ea:50:37:6f:b9:a6:
82:e7:a8:69:a2:75:5f:4f:71:14:65:3e:87:6d:e4:
dc:cc:93:f0:0d:70:07:0e:ef:8e:e8:08:f6:c4:5d:
7c:b1:d0:d0:00:20:5c:cb:08:72:62:fe:23:53:2b:
e2:b8:8c:6d:7c:eb:c9:27:e5:e7:8d:f5:d2:8d:cf:
b2:86:73:cc:a9:04:9d:5e:f6:e7:21:da:1a:c6:4b:
96:eb:b1:b9:48:7c:1c:ab:43:75:2a:06:6d:ee:cd:
a9:6b:64:c5:7a:3d:a3:69:40:03:f9:e5:eb:36:c2:
ba:06:25:50:d6:0a:87:a9:3c:f3:1f:06:e7:d6:75:
88:2d:62:0a:3d:fd:55:71:07:b1:70:04:e3:d5:cd:
0e:a8:0f:0a:6b:cc:29:83:81:bb:f2:6d:64:bd:af:
fb:90:db:1e:78:0d:af:64:54:79:1b:c2:0a:1a:26:
06:f9:88:14:28:42:69:32:cd:a2:39:ab:28:a1:c9:
b7:30:39:44:31:7d:3f:54:9b:fc:2c:7a:85:d3:8e:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:11:61:14:90:04:6B:BD:29:74:65:8E:99:20:2D:CE:71:85:B3
X509v3 Authority Key Identifier:
keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b4:b0:4b:3d:ab:39:e0:03:fe:bb:48:8a:97:d4:12:6f:f9:
eb:83:a8:67:7a:43:c7:17:bb:6b:79:e1:32:af:c5:8e:2a:02:
93:37:43:d7:2a:5d:3f:da:53:26:4a:63:3f:79:98:36:83:05:
4d:b0:9d:92:44:65:be:25:65:29:ec:d8:36:b0:a6:66:60:55:
fa:3e:aa:9f:e7:0e:f3:48:cc:23:3c:6e:5c:5b:22:58:bd:3f:
89:87:47:c3:f9:29:ac:c9:fb:ee:5d:dc:90:fa:2c:31:3f:5d:
a4:51:28:30:e1:81:00:35:b6:ee:52:39:c3:75:09:a3:64:62:
c8:09:65:ce:7b:c3:3d:a2:44:83:d1:b4:a4:6f:f1:fa:d7:58:
fc:79:d7:5f:46:90:b5:57:37:de:a1:64:7a:b5:f6:49:6c:4d:
1c:37:81:b2:d7:01:1e:1a:8f:43:a1:f2:d7:dd:a8:3c:d7:c3:
51:0f:9f:e0:71:06:6f:e0:26:c3:ef:c8:86:15:bd:76:0d:2e:
28:32:b1:fe:1a:1b:58:a7:a2:31:8b:d0:5d:d8:b0:95:f5:7f:
b6:83:a8:1d:a3:22:a9:0b:79:4b:6e:e3:a8:00:31:2e:f4:04:
b9:77:2f:d7:28:f7:37:b5:46:f9:68:77:2c:8f:83:63:43:80:
d1:29:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:45 2025 by rpki-client