Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: l7Xi3bTFB8dfBCvVHa8qpLh3TYKOK7epuAi0Ceqcs/I=
Subject key identifier: 5F:15:82:57:D3:5D:EA:31:1C:EC:6F:70:49:31:58:E0:E8:AD:D8:30
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 0194BCAA10B54E4130E4A5B2E58F1BAC66AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 02C9
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: zdaEVzCTJtPVN554MST1a5wPRtAU7Bu9hmqvQwQYzaw=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:10:b5:4e:41:30:e4:a5:b2:e5:8f:1b:ac:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=5f158257d35dea311cec6f70493158e0e8add830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:19:1d:06:ef:e2:0a:bb:17:6e:ff:18:e2:
98:43:02:ad:1d:5c:f8:e9:46:47:5b:e4:a9:fc:65:
eb:2f:b0:d5:23:52:47:2e:aa:f7:f5:49:d9:e0:d7:
39:93:ce:bc:6e:53:51:3e:8a:43:0f:4d:51:5b:b0:
51:f2:c3:90:c8:7d:95:84:31:3e:02:9b:41:60:fe:
7d:93:d5:0f:3c:4c:59:4a:5d:30:c3:64:bd:c7:1a:
97:37:ad:6b:7e:c9:9c:48:21:23:77:32:66:9f:7f:
17:61:9d:90:92:9f:12:b1:6e:90:0a:ed:25:09:55:
c4:d6:cf:7c:40:fe:d5:27:df:70:eb:02:73:fc:ed:
64:38:e6:0a:d5:15:82:e5:8e:65:4d:b7:b2:16:26:
dd:81:17:d1:f9:5e:35:3e:11:a8:40:b2:a1:fb:f1:
93:dc:51:32:52:56:42:95:cc:dd:e4:ea:74:1e:80:
b1:10:b3:ed:18:d0:16:12:bb:b4:ae:6c:e8:eb:5b:
03:42:28:ba:42:57:bb:52:84:ba:a0:fe:a9:ac:54:
d4:59:e9:8f:22:4f:6f:32:ad:4f:ac:e1:1d:26:ef:
b1:35:83:9d:d0:ae:0b:28:06:8a:31:0a:4f:7f:ac:
74:0d:a0:78:f6:84:10:ae:ac:fa:a9:50:59:0b:c1:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:15:82:57:D3:5D:EA:31:1C:EC:6F:70:49:31:58:E0:E8:AD:D8:30
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8b:f8:60:3f:df:75:29:51:aa:39:74:0c:fc:c3:e7:d8:39:
0e:27:c9:76:58:15:d2:a7:a1:be:b2:b0:c6:ed:c1:8a:58:9e:
77:b4:8e:8b:4e:a4:15:ce:f1:b8:1c:24:36:e0:f9:d9:98:47:
0f:f5:16:0c:2d:d9:42:3e:a4:5f:1a:ac:21:81:8a:f4:d5:92:
31:e1:a2:04:1f:77:8f:65:60:b5:13:8a:7a:01:f8:d2:89:c9:
5c:60:0e:f6:6c:0b:71:5d:08:0f:52:1a:75:c7:a3:b1:24:a4:
1f:6e:b2:e4:32:fc:9e:27:3d:7d:b4:fe:f2:df:93:33:ec:91:
ae:86:31:58:5b:3b:a3:96:98:97:ec:50:e4:d5:97:1b:02:a6:
d5:de:ea:a7:bf:1d:b2:e4:77:61:c6:e5:1b:7d:dd:41:8f:a5:
56:7e:fb:e5:16:8a:60:97:4c:04:80:e2:3f:44:32:84:e8:26:
03:1a:98:fa:e5:a7:c9:37:e7:f1:de:d3:2f:cf:58:99:59:54:
a4:6f:b3:3f:6c:58:4b:92:6f:42:c8:8a:b3:c8:dd:99:e1:e6:
d9:bf:cd:04:cd:79:0d:00:1b:1b:88:1d:06:43:34:92:a1:42:
f1:9b:cf:b8:30:c3:48:d1:80:fb:2a:87:8c:a8:c0:27:99:37:
10:ac:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:50 2025 by rpki-client