Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
File: ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft (raw, json)
Hash identifier: SM1mxXb6xRNiqKGxm2GLU8NQATftlbOqTXCbac1rHBM=
Subject key identifier: DC:E8:1F:49:06:1A:0C:7E:9B:4A:6C:C3:CC:A7:79:59:E9:B7:07:66
Authority key identifier: 10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
Certificate issuer: /CN=102bc98d33270952534130afb4de696d8c340215
Certificate serial: 0194BC72A4BAB983EF7778E71D6FF677E76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
Manifest number: 041C
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: 1SfNvqGgo1qML8I5aKV28i3iaWs.roa (hash: pMgk3yqfYUxUqHeyCSRb0WlafuNDjwlQN8z3HdRW4rk=)
2: ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl (hash: aBKqI2Rz/G0SSM1L8ko/QbXkw59LdpVSm5z5jyuzev0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a4:ba:b9:83:ef:77:78:e7:1d:6f:f6:77:e7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102bc98d33270952534130afb4de696d8c340215
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=dce81f49061a0c7e9b4a6cc3cca77959e9b70766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:aa:6f:03:43:65:35:93:d1:e7:b3:73:f8:
46:de:f1:31:9e:03:95:c9:af:11:0b:17:de:d6:94:
4e:02:e8:8b:74:c2:96:3e:09:de:e4:77:50:bb:82:
f5:1f:1b:5d:c0:de:31:25:81:5e:96:5d:d4:6e:0b:
57:6d:ef:6c:dd:61:2a:65:43:12:a2:69:6b:9d:68:
d3:e7:d9:fc:6d:e7:14:09:a5:2c:db:7f:80:ae:c3:
c8:55:bf:52:8d:45:c0:3e:0d:6e:95:93:5d:73:92:
fa:f0:c8:36:4d:02:b7:c5:48:18:b1:c1:44:c8:f8:
7b:43:d5:b3:d9:4a:ca:11:81:4e:a2:94:1b:75:d9:
b8:db:44:d7:f8:47:80:18:8e:5c:ac:eb:aa:80:9c:
88:f7:df:07:4d:71:5a:1d:d3:9e:9e:53:14:b5:99:
e0:f4:c0:c3:2a:7d:27:85:57:67:5e:b8:18:7d:76:
d4:e7:03:55:dd:03:70:87:d1:00:82:3f:5b:78:e2:
d2:47:50:a6:4f:f7:62:45:d5:54:a7:9b:97:4f:a8:
24:1d:fe:6f:38:73:63:4a:c6:47:33:29:5f:d7:97:
b6:40:ec:6f:96:34:42:6c:58:14:1c:2b:e4:84:25:
c5:57:17:8d:41:83:2a:d9:de:b2:2a:3c:6a:d9:b0:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:1F:49:06:1A:0C:7E:9B:4A:6C:C3:CC:A7:79:59:E9:B7:07:66
X509v3 Authority Key Identifier:
keyid:10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ec:ad:e4:78:2a:0f:57:f6:00:49:34:93:fa:65:4c:9c:6a:
55:9f:65:b1:95:17:59:1a:56:73:59:37:96:9f:4c:61:d8:ae:
a6:ad:b4:46:d2:c2:9f:45:b1:9c:e1:d5:a1:8a:59:3a:f3:f4:
b9:8c:4d:f1:4f:00:f9:49:7e:06:7f:76:e5:71:21:db:c8:db:
f1:4b:3b:b3:b2:83:f0:bb:70:9a:0b:85:4a:23:dc:8d:28:f1:
4e:59:df:96:83:f1:8d:68:8e:fd:43:2a:a8:d1:0e:23:81:c6:
9d:d0:17:f9:62:f6:6e:9a:56:49:57:76:64:c3:57:a7:fc:82:
77:78:7f:fe:60:93:81:0a:5f:42:0b:a2:59:b3:e7:a0:5c:5c:
23:06:67:2b:6c:80:e4:63:1d:cc:82:1e:60:e4:c0:d7:bc:7c:
e4:ba:a6:b6:99:ec:56:27:07:7e:a8:29:4a:1d:a6:ea:0c:31:
21:66:08:8d:32:41:5c:a1:21:6d:cb:95:4c:f9:41:c1:9f:ad:
7b:2a:cc:04:41:ba:e8:1e:0e:a0:c2:22:d2:25:68:1b:99:8d:
77:64:9c:53:9c:b1:7c:8c:43:e9:bd:10:cc:1d:48:52:63:4a:
15:ea:47:8e:da:98:4e:9f:45:4e:70:40:84:a1:a9:d3:72:c9:
c4:d0:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:27 2025 by rpki-client