Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File: eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier: fuZaYPFoGq+H+mSFZTrLOKrPwPSliYn3fU/OZsu/d4E=
Subject key identifier: 6D:82:1C:0E:44:5D:F9:D1:4F:C2:59:8F:23:E1:2C:A0:13:75:6D:27
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 0194BC3BC3445F216AC17A57C4F9609127B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number: 0B38
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: b0H5BIPWspFi043SM6fKEKW_8OQ.roa (hash: ThJ0L4hUOokOS85srPc80jBMsa+mo0OF59zs8lkKdbA=)
2: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: 6QFqr63CpFiUxxL3/wGaF6w9d7Iwtmxq5LqRu2oAzN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c3:44:5f:21:6a:c1:7a:57:c4:f9:60:91:27:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=6d821c0e445df9d14fc2598f23e12ca013756d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:d1:58:67:98:06:1b:13:57:07:5c:51:2f:
78:7d:4b:9f:6e:98:63:6c:6c:aa:d8:28:99:86:36:
b5:c7:e9:b7:94:a2:93:d2:21:2d:7c:fa:71:79:25:
0a:da:69:d9:f9:41:5b:b3:04:cb:c9:7b:49:33:39:
4d:55:de:ca:9a:a4:18:b8:b6:39:8a:8e:8a:11:e7:
8c:1e:89:43:57:5b:87:6a:e4:36:7b:6f:0b:3f:54:
ea:57:9d:c5:5d:ef:f7:1d:ac:bd:8c:22:bd:31:94:
4c:66:c6:5b:a7:44:09:7e:43:e2:1f:98:9a:ea:fb:
87:2d:34:88:96:2f:90:4a:08:92:77:2c:3e:c2:88:
20:95:46:a9:5b:17:88:3f:dd:19:b6:ed:b7:a4:11:
9e:85:ac:68:1e:ee:5a:5a:ac:8d:d9:f6:28:68:79:
32:9d:02:6e:be:cf:20:ea:ab:e6:87:c0:2a:6a:ba:
e6:a5:d1:74:3e:66:17:14:56:c8:1a:1b:4c:c6:3d:
df:ae:e0:ee:b8:3a:e7:3b:70:8b:55:52:c4:c5:33:
99:99:84:d4:b0:35:ad:dd:cd:32:cf:94:18:43:78:
5d:ea:39:53:15:a3:48:04:79:12:36:8c:f7:e2:ec:
cb:91:a8:89:88:8d:8b:bc:a7:09:4a:87:31:c3:d3:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:82:1C:0E:44:5D:F9:D1:4F:C2:59:8F:23:E1:2C:A0:13:75:6D:27
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:c3:ce:f6:b2:10:99:a9:71:ab:78:bc:78:d5:37:b3:5a:
c7:c8:da:b2:00:71:27:2e:44:3b:2e:2e:a4:18:9f:d4:81:06:
db:35:25:a5:40:74:cf:91:4d:eb:1c:55:0c:0c:74:2c:cf:6f:
13:ba:f1:03:0e:48:ab:49:6d:c3:35:02:90:71:44:4d:e6:64:
e2:0f:ae:56:18:aa:6b:dc:60:a9:c4:e0:0b:4c:cb:9a:11:a1:
28:60:b4:3a:dc:eb:4c:ab:d9:04:ff:f7:47:51:33:56:f5:7b:
4c:e2:fe:3c:8f:d4:db:ed:81:7b:23:95:2c:75:1b:56:6f:9e:
61:4f:56:f0:87:7b:d2:d5:61:c0:5f:e5:20:3b:f6:7e:8b:b8:
16:65:0f:cd:0c:fd:4f:bd:92:dc:bc:08:a5:b1:f9:f6:ab:71:
bb:f7:3d:2d:48:12:a2:0f:a8:bf:9b:a8:eb:58:86:63:7e:c4:
5d:77:b1:07:7c:49:60:26:d7:9b:be:02:33:1a:7b:c9:28:6e:
d4:54:26:67:82:3e:a0:e4:58:96:19:58:55:ca:33:ea:79:3a:
15:d6:21:b7:cf:4d:cf:ab:6c:1b:a6:93:9a:a9:d9:b5:77:ca:
8c:22:7c:85:6e:aa:70:33:c5:3a:02:a5:13:91:bd:6c:8c:a7:
0a:05:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:11 2025 by rpki-client