Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: O8wawugnXMW9frHYipFL7+KTwdiUhZpjXwm76EPDcps=
Subject key identifier: 17:EC:11:E0:EA:49:CD:16:65:D1:E4:C2:EE:CE:DB:EE:4C:D0:F3:4B
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 0194BD179FC0672EB331A8A2BF062A7E80F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 0EB6
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: 4esAAxClqhJFFRH9gfDVFBTZvgKPqWcw+JcEkTc+6+4=)
2: Ixi6Iu1s_azsg7gT1vp8GAKjehk.roa (hash: 2FsA5WHKtbk04OgMfAS2wYrqdHkHBCfhy5Jp5cWaqXg=)
3: j7PmpSFhgBjVYHJZ9v-oJkPT_1s.roa (hash: coCXdiUavSzSexx19Rr3HiHaVSAnRm2htTb2x9gwHcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9f:c0:67:2e:b3:31:a8:a2:bf:06:2a:7e:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=17ec11e0ea49cd1665d1e4c2eecedbee4cd0f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:60:cb:eb:e9:c2:e0:1f:62:49:f2:c6:b5:
5a:17:0e:65:e3:b5:5d:2f:97:66:20:dc:34:a1:21:
f9:4a:57:61:db:5e:ed:2d:9f:1c:b5:dc:cf:ce:2d:
55:10:c7:f2:d7:26:00:de:9d:94:d0:da:12:99:3a:
c0:05:b9:3f:d9:b2:7d:19:3c:a4:c6:37:e7:c3:39:
ca:49:5d:ed:9c:85:86:a7:72:1a:eb:c1:dd:12:86:
42:26:1b:2f:c0:95:eb:f0:4d:45:d4:b3:16:12:94:
e4:0b:eb:10:91:6d:d9:b0:2b:0b:cf:84:39:23:b9:
7d:11:26:bd:19:4c:42:a2:ba:d2:2f:9a:24:8f:69:
da:87:9a:f4:0e:e5:a6:ea:84:a8:63:5a:96:3c:49:
78:b4:93:f9:20:9a:32:83:5b:a2:fa:93:6b:5b:46:
3d:7d:2f:cc:2d:5c:21:54:db:5e:97:fd:ec:a5:80:
b2:60:79:e9:0f:79:3f:2a:90:c6:b3:c4:00:50:c8:
0d:17:ee:57:06:16:d6:2b:d5:73:f2:3a:93:b5:6c:
ae:72:93:b2:14:a5:62:41:52:79:e4:1f:d5:05:e1:
b2:09:44:8c:10:e5:20:e1:7f:97:b7:da:1c:e6:36:
8d:eb:f5:2d:19:9a:08:0f:1e:d1:c3:5b:3d:f9:12:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EC:11:E0:EA:49:CD:16:65:D1:E4:C2:EE:CE:DB:EE:4C:D0:F3:4B
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:25:00:06:3e:a2:db:6f:7d:26:d3:42:19:f3:b3:46:de:
8a:89:cd:98:a3:5a:43:ee:81:9f:08:b3:65:e2:35:8c:06:64:
af:f7:c3:a1:c7:78:45:75:5a:20:58:35:77:b9:1b:8d:57:92:
34:52:46:7b:71:e8:d1:20:18:3b:f8:bd:f2:a8:7a:8d:6c:e8:
04:80:a5:5d:14:27:2d:a5:a3:9d:c4:a1:0f:aa:f3:1c:39:22:
57:5a:6d:77:41:a3:10:c5:eb:d3:f8:30:30:0f:e1:b1:16:d7:
21:30:87:8b:c0:8c:27:4e:a8:25:0b:c2:34:f8:e0:d1:c8:a4:
54:c2:38:a8:bf:06:cf:25:85:0c:ee:3d:c0:89:55:3e:1b:72:
d8:c4:a1:21:cd:76:b2:d9:b4:38:6f:7a:ec:24:1e:5f:d4:83:
81:8c:9a:3b:b0:64:95:ee:d3:e7:57:78:be:b9:08:8e:47:5a:
78:76:4a:e7:44:0c:36:69:d4:00:39:d5:cc:9a:4f:46:e6:fe:
f0:30:ca:39:f5:47:f6:d5:87:92:c8:58:c6:be:63:a8:5a:41:
3c:48:f7:41:30:70:91:e2:86:9f:70:8e:39:be:a0:48:48:e1:
70:9b:8e:1f:fd:2d:08:4d:d5:fa:0b:f7:9b:24:2b:4f:78:d9:
e6:ed:e9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:15 2025 by rpki-client