Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File: ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier: 9FKfboO9jVOrMMg1JIdY3qf8KVwT5vB7aB/iEhFHzQ8=
Subject key identifier: 25:83:B7:9C:01:1E:6A:D6:98:BF:A2:65:85:9C:60:A3:BE:38:B9:A3
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer: /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial: 0194BCA9C0D7E8DD7BDCF22E09AD641D836E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number: 023A
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: /6PdbJRSLMFea5UKPVsd0T5LI8WoCrhZxOqICixQHdk=)
2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c0:d7:e8:dd:7b:dc:f2:2e:09:ad:64:1d:83:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=2583b79c011e6ad698bfa265859c60a3be38b9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:0d:c2:97:4d:94:14:49:72:98:fb:3e:29:
20:96:ea:14:bf:d3:0b:c4:13:b9:3b:4c:72:ce:2d:
b9:78:89:06:f2:b2:fb:5f:f8:3c:7d:74:1c:de:39:
d4:6a:83:d1:c4:46:4c:31:a0:bf:17:26:e1:40:9c:
ad:35:41:d2:05:27:7e:b4:68:98:4b:27:c3:9c:8e:
a5:33:bf:35:02:1e:34:1b:e0:dc:3c:ee:b9:35:a8:
68:c4:6f:b0:41:f6:f0:23:3e:8d:50:43:d4:44:ab:
84:2c:70:03:ac:2c:47:60:7e:5c:82:7c:22:a0:c9:
8c:ab:3a:90:e0:0a:6b:43:f1:e5:26:df:4a:a7:52:
56:4e:2e:03:d4:3d:2c:a5:1d:dc:ac:a2:fc:78:62:
39:ed:c4:26:56:88:ff:eb:81:93:13:4c:85:32:cc:
8b:76:e5:1a:f6:dc:4c:9a:8e:f0:bf:8b:79:fe:97:
32:39:3d:7c:95:8c:11:6b:37:0f:70:e5:84:db:9e:
8d:ff:2a:4f:94:54:85:09:f6:10:85:17:c1:c6:a1:
36:25:25:9b:3d:d3:91:89:ef:f7:8d:1d:49:46:8c:
4c:8c:7d:a4:ee:f6:53:63:97:68:82:ed:70:49:ff:
12:55:da:79:2b:4e:ec:b9:ea:7e:ae:b1:3d:ed:ae:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:B7:9C:01:1E:6A:D6:98:BF:A2:65:85:9C:60:A3:BE:38:B9:A3
X509v3 Authority Key Identifier:
keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f3:e5:d7:60:9f:9a:c9:a2:08:fa:2c:d8:ce:ef:45:9a:fd:
e1:09:c2:89:48:0b:0c:d1:a2:58:ec:b7:8f:97:cd:4f:13:22:
c7:59:ee:04:9c:53:95:d2:79:07:6b:8c:b6:cf:fa:30:37:00:
df:93:2a:9d:a3:55:b0:de:fa:4a:0c:07:13:20:bf:bb:7e:db:
ad:d9:f0:bd:b7:42:44:52:7c:1b:92:16:ad:7d:81:9a:bb:83:
ef:d7:b3:75:32:17:40:72:0f:9d:c0:58:83:74:c6:2e:29:dc:
e7:9c:67:eb:77:7c:e3:bd:6f:41:af:6d:ee:31:f2:00:9f:8e:
94:66:f7:55:ce:e7:02:a2:c4:4c:e0:53:39:ec:39:53:9d:62:
f4:39:0e:89:cb:22:10:05:25:03:e6:3f:80:64:f6:d4:7f:eb:
41:f9:34:6f:bd:9f:f7:0e:43:38:bd:fd:83:8a:8e:2a:b8:34:
09:21:a7:e2:16:28:c7:3d:03:ad:e2:9b:d1:ba:cb:f2:5e:35:
80:0a:bb:5b:58:0b:94:a3:c6:59:13:3a:df:d9:06:94:39:57:
fe:8c:92:1e:de:7f:ea:37:50:66:84:e3:11:31:4d:c9:33:f1:
d0:21:bf:cb:e0:75:cf:a0:04:34:3c:bc:14:41:e3:72:1a:11:
4a:28:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:54 2025 by rpki-client