Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: +bqk7oJXpl7Mx0/00M+z5TxvixYgOUg+aT3hIwd3Wu0=
Subject key identifier: A5:3F:84:9D:F8:8E:99:C3:05:D5:92:7F:0F:19:FB:01:EB:28:53:F4
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 0194BC04E5FF733F4CE04DD82CB6AE0568E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 1088
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=)
2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: 7uz3INxpUttpVJPamTPUwRDIsOAz/oI0WgmgO4BtQ4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e5:ff:73:3f:4c:e0:4d:d8:2c:b6:ae:05:68:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=a53f849df88e99c305d5927f0f19fb01eb2853f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:28:74:ce:7c:8f:36:5b:17:65:ca:a4:e1:
47:fb:2a:fd:81:4b:71:6e:29:34:b0:73:2a:e4:62:
20:ac:80:a0:b8:99:28:4d:0f:c1:2d:f0:d2:ff:a0:
7c:3b:3d:c9:48:e6:11:de:c9:a9:c0:c4:1c:ed:06:
d9:05:16:91:b5:44:f7:95:c6:be:20:99:dc:60:9c:
70:bf:6c:65:2e:a0:a4:63:31:c3:d2:88:0b:0f:73:
27:41:08:fb:85:d4:be:ca:71:30:88:80:c5:80:0a:
e7:8e:77:9b:f8:a5:e6:81:c2:66:b5:8f:53:20:d6:
5f:77:5c:9a:39:40:b1:b2:99:d2:6e:e7:f3:fc:47:
fa:62:a6:6c:49:01:14:c4:00:0e:a0:c0:73:e4:e0:
6d:1d:ef:27:5b:a7:aa:c7:2a:4c:54:2e:55:55:57:
66:52:78:85:71:43:e5:5f:70:10:cb:65:c8:7a:7d:
ef:c7:5c:36:fb:3d:2c:94:b6:2f:47:ee:4d:a2:9f:
87:4d:14:7c:e7:d7:1c:73:02:b9:28:b7:24:21:fd:
e9:ef:29:d3:ba:8b:ac:8a:29:cd:e8:20:74:67:ec:
f1:a3:c6:3a:fd:bd:d5:9a:d6:89:89:e4:b1:0f:d6:
8a:9d:1b:d7:e2:44:59:9a:86:09:cf:f8:c2:be:2e:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:84:9D:F8:8E:99:C3:05:D5:92:7F:0F:19:FB:01:EB:28:53:F4
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f8:7e:9c:d1:17:bf:4c:d4:5e:c3:49:dd:30:99:5d:8d:33:
8a:7d:9d:ae:54:a2:08:71:e8:ab:2e:80:d5:66:95:83:4b:fb:
f7:cb:b9:c7:01:84:fc:15:87:ba:62:92:a1:42:6c:b9:56:48:
54:83:a5:a9:82:05:72:e6:69:5a:47:3f:dc:dd:c0:f0:6b:10:
65:9e:9c:13:98:29:e2:2d:7c:fc:10:7a:55:d4:04:29:6f:3f:
9f:07:27:00:4b:f8:14:8a:c3:81:d5:a6:48:1e:7c:00:01:fc:
89:8f:0c:69:4e:19:95:49:f4:ef:52:e6:61:cf:fb:ee:10:d8:
e7:0d:2e:d3:f5:a0:42:51:b3:57:fc:65:b2:a2:e6:f5:5d:39:
e5:49:d9:8a:ad:41:26:1e:3c:ca:76:3f:6f:1d:c0:6a:d2:9a:
f6:4e:f7:d9:7f:47:4d:d2:c7:b4:5f:32:80:a5:3b:2e:55:96:
da:55:45:bb:da:39:3d:21:f0:09:6e:10:60:c6:76:84:e2:b6:
84:77:d9:9d:92:a0:34:0b:94:8d:59:56:06:4b:83:62:5f:e2:
68:03:fe:e8:e9:40:ba:84:d7:44:1a:f7:52:9b:35:a9:82:cf:
4d:76:94:47:62:94:60:07:d5:f4:07:89:42:40:23:ed:3a:7a:
77:40:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:54 2025 by rpki-client