Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
File: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft (raw, json)
Hash identifier: tR+MxXI1Yn0wpAXOsHLwf6Css0I3QfBLiWJSSt+XwJg=
Subject key identifier: 8A:F4:A5:AE:CE:9D:E4:86:00:39:2E:58:2B:F7:1B:0B:1E:DB:BB:77
Authority key identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
Certificate issuer: /CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Certificate serial: 0194BBCEA04818AC195FA7082E255BBA58BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl (hash: mNJelNGVewhSxi/dT4539hPjDNgoOOXwBPoC5Cn4mlA=)
2: yQAP9rAxN3jSiptdtGasvuqbR7k.roa (hash: jwuLoZWMrvVKlN8mNHV1G2VK8hE/jVPJU+HGrpMeIIE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a0:48:18:ac:19:5f:a7:08:2e:25:5b:ba:58:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=8af4a5aece9de48600392e582bf71b0b1edbbb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:42:86:54:cd:94:12:9d:f2:b3:f1:0a:77:
d6:22:a3:53:7e:11:47:2f:a8:e5:a1:63:27:07:0b:
d3:53:ba:c6:1e:9e:c2:be:0c:c2:b7:22:94:86:05:
be:ce:e9:38:0a:ca:7d:82:62:0c:51:bf:26:90:77:
f7:e4:e9:d2:07:bc:20:19:60:c7:e6:10:42:3b:d5:
07:9d:4d:3e:c4:c6:29:f3:68:bb:d2:98:7d:bc:e4:
09:74:f4:89:81:07:9a:86:95:8a:a2:39:b2:d2:09:
99:2b:be:14:f3:48:b6:a3:c0:8a:0c:7e:c1:26:f9:
e1:a0:34:df:13:f8:ac:f5:03:20:2c:39:4f:0c:ef:
8c:a5:9e:ba:c8:8e:89:b6:76:18:8a:82:a8:21:4b:
20:32:08:2f:5b:ca:87:3a:56:18:66:1c:81:7c:1a:
de:55:c6:00:25:85:e5:96:4b:75:fb:1f:b8:f4:41:
7d:ab:5b:63:6a:23:89:e9:33:0f:77:0a:34:f0:24:
a7:a5:36:2e:45:bf:6e:63:21:60:5e:ad:dc:35:86:
50:f4:70:06:3e:bb:9d:95:da:1d:ff:d6:a1:09:09:
26:5f:17:97:7e:20:ad:7a:c7:72:bd:e8:e3:8c:46:
65:a8:fb:9b:ff:86:f5:62:de:7e:05:b3:93:a4:ad:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:A5:AE:CE:9D:E4:86:00:39:2E:58:2B:F7:1B:0B:1E:DB:BB:77
X509v3 Authority Key Identifier:
keyid:79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:55:0c:65:5b:a0:4a:3b:ef:88:77:e6:3b:4f:37:29:a9:86:
3a:50:f8:c6:ab:70:ad:a9:ad:20:9c:56:6d:60:50:a4:51:27:
4c:9b:2f:27:61:d7:c1:1e:3c:c0:b2:19:54:ed:df:bc:02:76:
73:14:f9:4b:c8:75:0a:c3:cd:0f:9d:c7:1e:36:f3:44:60:d9:
13:00:49:4f:b4:cc:49:ee:6a:eb:1d:5e:46:04:10:a7:5b:fb:
e1:e5:89:57:92:be:dd:37:00:e0:77:a1:b4:b9:b9:47:b0:80:
fb:cd:69:bc:13:30:ec:f6:3a:9a:47:02:57:68:4c:78:4c:c9:
16:97:c3:91:c0:40:62:db:54:e7:69:02:d5:af:97:ef:01:89:
35:d4:6e:48:5c:ac:73:87:1a:95:83:b8:2a:07:ed:3c:23:f8:
d5:e0:14:c7:23:ab:3c:8e:6c:a0:db:a0:a9:26:17:08:53:41:
76:c5:cb:bb:bc:f7:b3:c3:af:bb:d8:13:04:0f:75:b9:14:a9:
b0:ae:3f:ac:cc:ed:2c:e2:67:c3:de:50:53:59:24:8b:01:aa:
f8:99:6a:db:52:76:01:eb:94:bf:f1:a1:49:c2:d6:e4:58:69:
0d:44:ec:5e:93:d1:08:6f:f5:7e:28:83:2b:99:62:2e:7f:b1:
18:e9:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:17 2025 by rpki-client