Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File: E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier: G6EAzOAvlUYK5K3kLYX6/fx0aDmvFYe5OtP3hFYIlH4=
Subject key identifier: 6E:3E:A6:2C:63:3E:8E:B6:ED:93:FA:BA:23:7C:4C:F4:91:AD:9D:3F
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 0194BBCDC927651C81A1A5F9BAA0D2E9775C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number: 144B
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: 5KU69xpItYQY0WxFGzbCaR_xF-I.roa (hash: nALEvmxEmiAuf2P9EYLZypsp4ZL3LnUKyRUMkW+WsNM=)
2: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: Zp5Nx6sZ0T0fRnLq6mHKycsxAuA6QNpbDyDlOTqL9b4=)
3: iCZ5LkRRabrQM8eb0h1397FNbPc.roa (hash: /PXtPb3g/8dNDvzzTJMTXsHm+K21xBEsZZ9tlSPaX0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:27:65:1c:81:a1:a5:f9:ba:a0:d2:e9:77:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=6e3ea62c633e8eb6ed93faba237c4cf491ad9d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:62:25:20:30:67:c4:8c:47:08:b7:fc:a3:dd:
b6:a4:5a:0f:b4:4a:92:ae:69:e3:fa:ba:27:ac:1d:
0a:99:3d:c7:75:bd:4f:47:29:6d:a1:ae:44:34:7f:
7f:32:02:19:28:e0:8f:61:fe:64:f6:11:01:0d:3d:
73:13:d6:77:a2:e3:95:a8:55:8c:2f:4e:b6:64:fc:
fc:4d:fe:53:88:13:94:b9:42:28:4a:0b:d8:44:8b:
76:92:2e:56:07:87:e7:9c:2b:3e:b3:a6:27:c9:df:
ff:48:ca:6f:8f:bd:ad:68:e3:5b:f3:88:3c:85:37:
8a:d2:cf:70:2a:fd:ae:d2:5b:d1:b8:83:e5:49:83:
fe:a8:9f:bd:0f:a2:ef:7f:7c:67:5f:b1:84:18:4b:
71:f7:b1:ef:7d:62:b8:55:28:d4:87:f1:56:ab:c7:
95:6e:e4:ff:20:2f:c7:2a:c1:1c:3b:ba:77:59:85:
d3:e9:b2:14:a1:5c:b1:42:10:d0:a7:04:fa:ee:d1:
d0:df:79:56:95:d6:c6:e9:9f:49:e3:24:d1:cd:16:
84:46:43:d3:c5:26:ac:1b:57:d5:fd:60:56:c0:f7:
9c:7a:3c:9c:dd:61:e1:50:35:9a:88:86:04:83:20:
71:07:a3:29:a7:07:2f:e8:d6:fb:00:26:af:ed:05:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:A6:2C:63:3E:8E:B6:ED:93:FA:BA:23:7C:4C:F4:91:AD:9D:3F
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:4e:e6:df:9c:16:ce:a4:52:6e:2e:a2:ec:3b:46:fc:c1:
0b:0c:f8:08:d0:8c:cf:61:1b:9b:f5:e3:77:33:b1:b7:22:08:
d2:4f:97:8b:8e:e4:f2:38:2a:66:a6:50:8d:d6:c7:15:22:cb:
92:ad:df:52:f2:0a:a4:58:fa:b3:8f:90:91:aa:ec:f9:58:94:
cb:c4:c7:8e:81:f7:b2:7c:48:f7:4b:a8:ae:79:e1:4f:da:ff:
30:88:de:d4:9d:14:94:ba:ba:84:12:06:76:e7:59:58:1e:1a:
59:39:3a:48:fa:5d:ab:fe:19:2b:cd:d3:16:d4:7a:2a:80:0b:
d2:9a:50:22:13:a4:b7:7b:52:ae:04:0b:14:44:c6:0a:e7:36:
a9:f8:e6:88:62:d4:d1:87:57:31:dc:5d:50:d1:8d:69:37:70:
a7:6a:17:a9:cd:44:c2:7c:88:18:41:60:dd:33:84:5a:39:27:
5c:0c:e4:21:f9:50:07:f0:c5:80:5e:e6:3f:c2:7d:27:6b:2f:
80:42:43:84:89:fe:e1:1c:20:63:a2:71:c4:8d:d1:72:44:ba:
45:31:d2:d6:a4:14:d3:c8:aa:46:83:c7:72:c3:19:f4:b6:b2:
66:b4:ba:fa:af:78:f7:ec:7c:1f:cd:15:7f:47:68:63:fc:0d:
82:f4:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:16 2025 by rpki-client