Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File: EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier: 2+/Lh2Jdfn3jXbrgKcazEJqSSs0GP31dsnjpInZBco8=
Subject key identifier: E5:36:BB:05:83:D9:DC:49:76:5E:8A:7B:F2:7B:C1:ED:39:5F:BD:1A
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer: /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial: 0194BCAA253F5CC6CA3BB9222D08DE08855F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number: 085E
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: 1hME4zw9kiAb6lGutB5WJFGtqKRd+GU591htcc4Vnx0=)
2: m05UFQfMUkm8RmzIuHOsksJMdP0.roa (hash: yGsV8HL3U4MAtVDLG2EGnsRjRnklyUH2zR9pUN6kEek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:25:3f:5c:c6:ca:3b:b9:22:2d:08:de:08:85:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=e536bb0583d9dc49765e8a7bf27bc1ed395fbd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:32:01:e8:6c:94:11:63:13:64:b5:0c:fd:
9e:0e:f3:76:4d:6a:d5:98:7a:b2:44:3b:2d:f1:48:
26:be:70:c9:4b:5f:15:ba:6f:a4:d7:7a:c1:ff:0c:
2e:53:99:f4:37:db:0a:b7:c6:b2:6d:cf:5c:67:f6:
ac:db:97:e9:9d:dd:17:08:35:b6:29:fb:52:3e:34:
2d:f3:c2:2a:fb:03:09:a7:ea:6b:50:a3:a5:8f:c1:
e1:86:02:20:72:1c:5b:a3:6f:6d:6c:f5:c6:c2:eb:
d8:fe:74:e3:d4:99:81:f1:45:44:eb:9e:49:d5:f0:
45:da:9b:94:37:00:59:f0:7a:d0:e6:49:e2:7e:05:
a2:7d:a5:4a:81:c8:2e:68:43:ba:1d:ce:65:f1:e9:
7f:d2:aa:2c:ca:9a:36:23:bf:b6:66:30:e7:39:29:
b6:53:16:ff:09:c4:3a:fa:9e:4c:87:07:5e:ec:3f:
ab:16:86:eb:de:85:77:1d:d7:11:2e:90:87:8f:f0:
9e:b7:be:62:3a:8e:a8:12:0d:6d:87:17:9f:3f:14:
2f:d4:3d:7c:f8:44:6e:68:a0:c1:7f:3e:d1:12:8b:
f1:43:cd:4c:f9:df:9f:6b:f7:45:19:51:ac:ca:02:
f2:7e:2e:5a:c8:06:9f:a8:e5:42:48:ac:3e:2d:ce:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:36:BB:05:83:D9:DC:49:76:5E:8A:7B:F2:7B:C1:ED:39:5F:BD:1A
X509v3 Authority Key Identifier:
keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8a:dd:2f:c0:bb:a9:b0:33:78:16:01:96:5c:3c:d6:66:42:
57:42:92:55:68:1b:f7:1a:ed:c3:aa:7a:17:00:7a:df:c1:10:
cd:c3:3c:50:d1:a4:d9:d5:18:ce:9f:33:ff:5c:a4:bc:f5:88:
9d:45:ef:9a:f6:58:bc:75:1d:f5:cf:99:03:4b:e0:fe:85:0d:
b4:f9:97:fc:0e:f7:4b:88:ef:42:e4:ea:44:65:89:d0:4b:b8:
f7:4f:a0:fb:42:dd:ff:37:19:52:e6:9e:31:eb:71:80:9f:aa:
aa:19:0f:16:d4:77:bc:7f:fa:69:96:8e:68:ea:b3:d3:75:a5:
de:95:94:b5:f6:b8:3c:0e:e3:21:69:71:8c:37:04:41:a7:bd:
35:fe:c6:07:c2:3a:96:b0:e0:b0:e6:21:72:63:7f:0a:eb:f7:
0b:eb:e6:75:f9:4c:35:b4:de:54:5d:fe:ec:7a:d1:3d:34:a3:
f1:7d:c2:55:e6:d6:97:ab:10:0f:19:1f:e2:b5:b8:1c:f8:a7:
e5:75:48:eb:4c:3e:8c:91:47:65:d2:c1:81:64:78:d4:80:4e:
57:66:e9:bc:f8:c7:e4:a0:cc:cd:62:b9:a6:d4:7a:95:3a:c4:
d9:e3:b4:2e:17:2c:55:66:3f:65:e7:ac:89:51:14:ce:8f:80:
2e:a9:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:57 2025 by rpki-client