Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File: eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier: Mc9XbR3q/3LgSYmWZJRS4ovUNp1UnvbECEGlTABc+Mk=
Subject key identifier: 25:66:F9:F6:B8:FE:1E:D4:30:CC:E3:23:EE:77:93:26:23:20:3D:8D
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial: 0194BC0515F81B8D812BC747D20943CA5B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number: 0687
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 7u9HNLxm9pcYaogfDQxcvTuVdBc.roa (hash: O3tVTVyLgMTQRdcIzr5g60UdATSZQkZBfh6yZ+9zJBw=)
2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: k9FQxjtnbXRrKQQ/fKgiaYqhmeMzuLWujPVj3tTYD94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:f8:1b:8d:81:2b:c7:47:d2:09:43:ca:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=2566f9f6b8fe1ed430cce323ee77932623203d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:f3:59:13:be:c0:0a:23:99:09:de:9e:a6:
25:42:a9:45:f7:a8:c6:da:23:1b:30:8f:fd:07:bd:
bd:79:be:38:49:39:b1:ad:79:3f:4e:e5:82:93:13:
ad:db:30:e0:26:41:14:9a:e7:50:ff:8c:11:9e:20:
fd:55:2e:1e:bf:08:64:71:62:d9:ad:40:f8:e7:a0:
53:72:18:12:e4:f2:0a:51:88:cd:d4:a1:ed:d4:0f:
10:ed:fb:ee:88:05:ef:8f:ed:bc:81:d7:a9:49:f2:
13:95:23:d5:e4:10:2c:88:86:a9:b9:35:30:d7:99:
a1:5b:3a:20:59:a8:bd:70:99:bd:a6:cc:df:b8:d4:
33:b8:68:c4:49:dc:cc:e8:e2:8e:0d:ae:9b:9b:2b:
aa:0b:87:5d:33:be:19:2c:31:0e:3e:63:cf:a0:79:
90:3e:9b:a2:14:8a:e8:9b:9c:6f:5f:d4:b0:c5:da:
ae:f0:c6:6a:58:e0:a2:43:d5:7e:a5:01:42:97:76:
da:ce:87:93:43:0e:bf:56:1b:73:a5:3d:8b:e5:35:
94:ba:12:4b:c2:e5:62:0c:88:13:ef:17:c0:67:19:
ce:08:d1:4d:3d:21:17:d1:ba:b6:a0:8d:ae:96:ef:
19:9d:dd:b3:22:21:9b:6f:3f:af:16:1f:a3:56:ab:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:66:F9:F6:B8:FE:1E:D4:30:CC:E3:23:EE:77:93:26:23:20:3D:8D
X509v3 Authority Key Identifier:
keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:56:00:88:10:3c:22:5a:7d:33:88:90:31:36:4c:c3:57:f1:
61:13:73:68:35:3d:07:d1:e1:24:21:44:40:93:68:ce:b5:38:
9d:9f:0a:fb:65:7f:0f:2d:e5:9b:6f:a0:fb:35:15:e0:e3:64:
f8:98:8f:ae:89:b6:26:57:eb:8e:35:bf:06:fc:cc:ae:26:d4:
5e:37:4e:7e:68:49:df:26:dc:65:48:a3:6d:66:6f:31:1d:8d:
93:15:ee:5c:2d:5e:91:1a:d9:69:68:a1:6a:d6:b3:dc:15:a8:
02:b8:3f:3d:77:c0:c2:fc:6a:59:0b:da:c1:64:6f:99:b0:58:
6f:49:56:4c:2f:d5:f9:6e:9b:fc:8a:d2:77:ec:17:b0:6d:7c:
24:27:ec:8a:57:8d:ef:07:39:f3:5b:93:84:d2:92:90:e0:e0:
04:b1:96:9a:5a:76:fd:e1:d2:0e:59:2f:93:4e:79:cc:5d:1a:
59:b9:22:d7:1d:de:2b:13:94:1b:14:92:33:7e:61:c7:f6:4f:
98:10:68:03:cc:d3:11:8a:76:de:c2:d3:12:83:a2:54:6f:f9:
2f:bc:0e:e4:df:ff:ed:e3:c3:a1:de:c8:6b:54:6f:79:a7:8f:
85:07:5f:5b:a3:97:78:82:bf:ec:75:05:64:48:ac:14:4a:42:
09:ef:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:11 2025 by rpki-client