Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: mE+GDoNgfF/YN6Pjpah4mriwErg15xzu1yNVYdtmGlE=
Subject key identifier: FD:88:42:D5:78:47:A3:03:94:34:D1:32:8B:A1:5A:8C:DC:2E:B2:20
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 0194BBCEAFE30DBF1F597DFF7E6C7CD6FBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: F9
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=)
2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: 6iSCCcaYvSObaHc1hLaOiPZX8ZYTuLyvzGknoST3ciI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:e3:0d:bf:1f:59:7d:ff:7e:6c:7c:d6:fb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=fd8842d57847a3039434d1328ba15a8cdc2eb220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:96:b1:ab:0d:a8:79:04:d4:7e:d3:3b:0c:
e6:4d:17:df:6c:17:b3:aa:fd:cb:e2:e5:52:8a:8f:
20:1e:71:c4:8a:a4:ce:67:4e:49:64:84:6a:a3:45:
b7:01:e8:f8:37:ab:02:d2:59:79:38:5e:ba:20:6b:
e0:5c:b0:cf:ad:34:28:77:22:c4:61:7a:ea:18:cf:
98:12:c5:d3:2b:bf:c5:8f:7e:c3:06:3c:d0:74:5c:
7a:67:45:1f:ce:b9:5b:9f:f3:dd:9b:a1:59:2c:ef:
de:ed:1b:c3:0e:af:04:a0:47:34:e5:5e:fd:3d:a5:
49:c3:ab:d5:3e:e9:05:c0:e4:19:b5:e6:c5:5c:82:
89:b1:c8:cd:63:85:bf:c0:38:44:44:c9:dd:8c:1c:
77:a9:d0:09:2b:e6:08:f6:3c:0e:a9:51:b3:87:bc:
9b:44:e6:5b:f9:b1:03:a1:72:61:f1:58:81:37:17:
e5:34:eb:a9:97:94:31:af:23:36:4e:1b:74:f0:83:
e1:bd:28:f0:d0:f9:a5:2a:33:7b:49:a2:a6:a5:1a:
c9:ce:b2:11:46:2c:3b:28:04:1c:4d:b5:1d:40:f4:
83:85:64:36:ed:7b:66:73:8a:f8:30:1c:94:7f:89:
4a:b1:a1:52:06:f1:e0:da:10:8b:c6:7e:9e:91:bd:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:42:D5:78:47:A3:03:94:34:D1:32:8B:A1:5A:8C:DC:2E:B2:20
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:79:4e:5d:1f:a4:5b:c6:ab:47:95:e3:9e:b8:5e:b4:36:8a:
33:5d:00:cf:19:13:21:bf:e5:3c:d3:64:1e:24:da:72:0c:c1:
fe:5c:77:ad:57:41:c6:54:22:23:fb:e4:e7:85:53:87:e8:fb:
45:cd:ec:0f:d7:f3:f4:37:85:2a:bd:bc:c3:94:e3:94:ac:9b:
4c:b8:72:0a:03:9c:c3:a8:40:9e:c1:01:e8:97:be:77:a0:c5:
b7:0d:4f:ed:7d:26:10:93:4b:60:e1:08:32:38:da:85:97:bd:
b4:4d:a5:82:0e:18:3f:0d:9a:13:8e:c1:45:8f:42:74:a6:5f:
6f:50:52:89:98:79:3e:15:b6:8d:e1:88:c8:79:73:73:d1:f2:
fb:6b:37:5b:9b:a8:65:94:ce:5a:50:4a:59:b7:78:6c:4b:05:
56:bb:4c:0b:3b:8a:85:5a:16:90:f4:92:af:45:c5:da:3c:20:
e4:fe:06:5f:62:f3:5b:ae:29:9c:9b:77:31:a6:1c:c3:ee:ec:
77:93:0f:99:74:ef:12:ee:7d:76:42:9a:14:80:49:56:6c:c0:
dc:bc:26:fd:76:ce:6a:d8:ee:35:b8:3c:84:db:aa:b5:9d:56:
e1:df:bd:fd:31:95:2b:f3:4c:76:f3:c5:c8:3f:5d:40:6a:35:
11:ec:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:35 2025 by rpki-client