Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: Wr1Esr+xIDERSJVzBS71OxtgEKBiZsN64Y8l5yi0qeU=
Subject key identifier: 6C:66:21:66:A7:3F:BD:0F:DE:5B:B8:72:C0:54:12:A6:31:7C:73:9C
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 0194BCA9CE87B281A20A82317A7ED574CC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 103D
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: VlFmurPBQAIsfV5WP7mF/jK8uLawaZUbiuEYc8dVtuo=)
2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ce:87:b2:81:a2:0a:82:31:7a:7e:d5:74:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=6c662166a73fbd0fde5bb872c05412a6317c739c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:09:d3:3d:71:2e:0a:da:ed:e3:e6:49:1b:
70:f8:04:ed:8e:6d:64:34:eb:39:b4:53:72:fa:05:
f0:52:9e:f2:6a:31:a9:c7:4a:ed:6d:16:e5:51:16:
7f:ac:3e:bc:2d:fb:61:63:35:29:42:f6:14:d8:24:
60:61:2c:85:8f:76:db:d5:3c:55:32:bd:af:be:38:
5a:e0:ee:e7:12:d8:46:70:b4:d4:9e:eb:0e:e7:ba:
4b:d5:7f:8e:d2:a5:83:b5:57:5e:54:97:99:c5:7e:
be:05:9b:42:79:df:dc:51:64:5e:c3:79:41:18:4c:
4f:77:d8:a1:7d:4a:0f:49:b2:ef:f5:63:01:d2:1b:
cd:55:b7:06:6e:cc:36:a8:ae:f1:50:d9:14:b1:3f:
69:be:a7:7c:74:e8:0d:8c:fb:1d:67:49:c9:3c:eb:
9f:e0:64:91:41:68:29:36:96:8c:eb:37:cb:80:d4:
24:65:6a:38:82:fa:2f:bd:81:df:19:67:0d:5c:06:
b3:a3:d2:86:8e:df:57:57:a5:ba:c5:ef:aa:6d:61:
17:71:2f:bf:ed:84:9e:59:ba:7f:fb:0f:0c:2e:21:
91:88:df:0e:cf:8d:a1:2d:9a:88:be:6d:d3:7e:9b:
0c:cd:8f:84:25:f3:7c:a6:c6:76:2b:88:1e:4d:cf:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:21:66:A7:3F:BD:0F:DE:5B:B8:72:C0:54:12:A6:31:7C:73:9C
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cf:3e:3a:7a:23:31:09:de:c8:37:ac:20:05:9d:1b:9d:87:
d4:6c:5c:83:2c:58:5d:42:04:d6:04:6e:94:0d:90:98:08:11:
3c:38:e4:07:e3:4c:da:70:a9:45:c8:0d:ce:95:4e:74:40:59:
99:56:85:88:49:0c:7b:b5:0d:59:3a:b8:41:18:f9:17:0e:95:
61:40:3f:05:e4:5e:a4:5c:49:5f:c1:dc:3b:8e:0f:80:4e:d7:
78:16:10:e2:45:6b:8c:3c:63:71:5f:40:1c:fb:ec:82:84:e2:
ba:49:a9:ea:bc:3f:3f:47:cc:41:ae:0a:5e:c6:4b:87:5d:b3:
e0:39:8f:76:7e:2f:b5:a4:fc:8d:e9:1f:4b:0e:ae:b5:34:d5:
fe:73:6a:c9:4b:61:24:d1:7f:89:8d:8e:d0:09:96:b6:1e:56:
76:16:ae:98:3b:af:19:51:88:e0:29:fb:b9:75:12:e8:38:df:
fd:52:01:bc:87:39:9c:6b:f2:8c:7e:68:78:a4:4f:b7:d2:cf:
3e:6e:ca:98:ee:72:05:fb:a0:07:df:db:31:a4:a4:49:1d:fe:
0f:6a:07:c7:6a:7f:d0:6d:5c:b6:a1:cd:f3:77:e4:e0:4a:3d:
cc:c1:96:d2:27:85:74:50:39:3c:e7:a3:25:cf:93:24:97:0f:
30:1a:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:52 2025 by rpki-client