Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier: KCTTf4vvfXvwdsgZIgCir2EBsiiOpamJNjq3TANVTuA=
Subject key identifier: B5:25:05:E8:9C:87:36:FC:D2:A6:03:EE:B8:86:09:58:62:0E:30:BF
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer: /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial: 0194BD17A0030B3441ECA6F51A95F4111CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 3B54N1RzqRAgAHkYRgNdqkdOh5M.roa (hash: sve8I1LgrBKICchu1Eds5qUShF2pQrbxFBAqnwDuFVs=)
2: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: dqACz4pFsaWyGXo70SM4GJj7xZvOHD7FJL+ms/Pi9RA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a0:03:0b:34:41:ec:a6:f5:1a:95:f4:11:1c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=b52505e89c8736fcd2a603eeb8860958620e30bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:9e:9b:ea:be:e5:4b:7b:22:8b:3c:fd:61:
e1:79:ab:ea:65:df:21:a7:3a:fb:44:f5:91:c5:d3:
cc:d0:fe:b9:95:62:85:32:11:99:61:8e:27:da:8e:
46:36:53:a7:77:5b:11:f9:59:70:49:09:75:da:df:
42:36:26:f7:8f:b7:f8:b4:f7:14:69:ff:d3:42:7c:
bb:a0:a7:7e:28:86:68:cc:b6:56:50:6e:9b:79:de:
eb:b8:0c:d0:c9:fa:e4:81:f7:b1:ca:b8:8d:7b:b5:
41:97:03:ac:b1:df:c4:6b:77:f3:ca:eb:23:70:46:
e5:63:80:35:75:6a:b8:a8:e9:6e:ba:a7:70:be:eb:
f8:6f:6b:38:a1:94:bf:4e:4a:1e:d3:8d:2b:60:25:
a7:4b:ab:e0:08:17:82:66:53:3e:f9:fa:fa:aa:d6:
ba:52:6b:90:5f:4c:7c:2d:93:c1:4a:51:b2:76:68:
62:da:18:64:9a:e8:e8:8e:6a:8d:a4:f8:ce:f5:f9:
4f:b6:8c:19:72:31:a2:d5:76:dc:52:08:25:e5:6b:
fd:7c:91:b1:72:bf:c5:b5:e8:5c:79:5d:a2:5f:8f:
36:68:9f:42:1b:49:ad:32:e1:ba:01:c6:b2:06:43:
12:3b:6b:85:ce:8c:d0:2d:90:4d:d3:4c:a0:0a:45:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:25:05:E8:9C:87:36:FC:D2:A6:03:EE:B8:86:09:58:62:0E:30:BF
X509v3 Authority Key Identifier:
keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:69:2e:33:9e:3f:5f:61:a2:63:b4:1d:ce:76:6a:f0:a4:6b:
ae:94:0e:9b:43:5d:96:28:9e:fa:3d:77:3e:ea:2c:f7:fa:49:
fc:53:16:de:21:ad:2a:07:54:2a:3f:40:45:0e:7b:ba:d9:ba:
2b:55:79:53:9c:d4:13:de:92:ac:ea:13:91:ab:3c:7f:ad:fc:
90:b8:c2:0e:4e:31:b8:ca:9d:3c:17:7d:1f:bd:ab:95:e3:8a:
f8:72:c3:13:ec:8e:a2:50:bc:1c:cc:7b:3c:7f:c4:98:ae:67:
7d:4f:89:e1:ca:26:da:db:54:ca:95:f8:74:c7:12:2f:74:25:
c9:5e:21:17:3e:74:54:f7:6e:c5:2e:b3:13:97:e5:bb:1f:a1:
ba:95:48:e6:2e:bb:42:0c:05:6d:ff:0c:71:fa:10:f8:6e:5a:
df:1d:06:ee:6d:5d:50:2c:30:cf:ca:4a:56:81:fe:7b:7d:18:
96:b9:74:a2:c3:8f:43:84:90:cd:dd:1b:63:f8:36:c1:7b:5d:
a2:39:89:c4:36:2d:06:15:c1:6b:69:ee:84:81:fb:30:e3:16:
f4:dd:81:28:52:b2:50:c8:09:49:32:f3:20:26:e7:80:b6:49:
c3:ca:f0:86:4f:d7:c8:e3:5b:0c:2b:ab:95:04:a6:ab:6b:32:
5e:39:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:27 2025 by rpki-client