Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: p4g5huduwzKCvlu9mvXINtUocPBv7VJJdeSMTz+OtH8=
Subject key identifier: D1:08:2B:72:AC:D0:A8:13:B7:AE:00:82:91:C1:31:FC:01:7D:3F:E8
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 0194BCA9C8EA7E6606FE3823587CC3F4BAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: 3P9lKPJswCijy8vOzYvcS0/46+ryYsdYFfsCXrTbV7g=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:ea:7e:66:06:fe:38:23:58:7c:c3:f4:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=d1082b72acd0a813b7ae008291c131fc017d3fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:1a:2f:76:66:50:5e:97:3b:f3:5f:2b:ce:
dc:e2:e3:15:c7:23:62:13:d6:f8:7d:f9:19:99:8d:
a6:6f:36:50:48:ee:ad:1f:75:a5:ee:ff:47:2e:90:
ac:c7:2b:72:df:b7:11:3e:f2:7d:3d:15:c1:73:70:
b0:96:50:2f:47:c6:b4:8d:dc:67:01:28:77:51:92:
6d:e2:19:f2:a8:c4:f2:47:c2:2c:ed:ea:05:57:32:
c6:da:e9:f7:6a:d7:bc:f6:91:8b:ce:ab:35:41:e3:
35:99:5b:f7:49:89:29:bd:a3:d6:a3:85:b8:38:b5:
bc:8f:75:3a:13:d1:b4:5d:9a:fb:d0:d9:79:e3:da:
97:29:ee:c3:7d:4f:8f:62:3d:fd:b5:6a:0c:56:e3:
94:b2:1e:17:1d:c7:51:2b:07:af:ea:e5:67:bc:26:
21:c0:24:af:50:d4:c8:24:60:e0:74:db:82:6b:fc:
62:c7:aa:fb:9f:60:e2:72:34:9f:e4:4f:1a:4c:a0:
75:6a:54:78:21:2d:a3:bd:f8:b0:47:e7:80:82:20:
48:be:ef:dd:92:bc:3a:4d:c7:b6:17:a7:a9:a4:b5:
c8:26:ca:e3:bc:f7:96:57:fc:8e:c1:07:7d:58:f4:
b9:a4:7c:a4:8d:6a:3a:63:aa:41:f9:94:6e:61:d8:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:2B:72:AC:D0:A8:13:B7:AE:00:82:91:C1:31:FC:01:7D:3F:E8
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:77:02:86:13:ab:9c:4c:e7:a3:d0:cf:67:02:8a:cd:3a:
68:60:ee:a0:d5:06:ec:a6:df:fc:8a:81:83:48:b4:11:35:0c:
c4:92:7a:01:d1:3a:1f:34:b5:4c:f7:1f:50:38:a1:0b:d5:0f:
98:c8:71:de:22:0a:62:b9:55:13:e8:42:52:5e:a9:7b:cb:5b:
d3:69:8e:98:cb:ad:4f:ef:ed:9c:9c:98:32:62:66:b1:91:03:
50:b9:07:8a:cf:ed:81:6e:08:ad:5b:af:bb:53:57:67:13:06:
8a:db:3f:d9:12:27:d0:29:5b:86:7c:be:19:6e:6c:49:9b:bb:
75:b1:3d:a4:a4:2b:be:22:6e:17:41:23:21:aa:44:5b:e8:f2:
26:83:ae:96:da:7c:a4:df:27:ec:16:88:b2:d7:87:7b:6e:c6:
5a:55:a6:ab:2d:52:10:fb:c0:47:f0:71:89:4b:df:c7:b2:86:
22:f1:18:3a:a8:08:15:cf:fb:6b:01:da:b6:7a:f7:a1:8f:34:
9b:fa:9a:53:dc:5a:04:b6:aa:81:c6:e8:c6:59:95:3f:77:ce:
c8:78:69:fd:cc:85:00:13:73:0a:7b:8d:89:d6:8c:e3:1c:36:
dd:4d:32:0c:e3:fc:3a:ef:4c:98:70:10:cf:99:61:65:0d:79:
3b:99:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:03 2025 by rpki-client