Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: auH/+vhOpX2Kf68H0Fdhw6P8ma/05ftOyLIATY95yss=
Subject key identifier: 4D:DB:AB:F3:38:48:E1:9E:45:D9:D6:E6:AB:36:05:00:58:94:21:07
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 0194BC3C48FB13CFC7576B07402AAB8C60AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 026E
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: QZxWdaw7DpUxq3Cmi/i/IrX2MYbYAEj8YcVJGRtSREk=)
2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:48:fb:13:cf:c7:57:6b:07:40:2a:ab:8c:60:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=4ddbabf33848e19e45d9d6e6ab36050058942107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:4d:d2:58:7c:2e:22:6c:c2:56:e1:48:89:
69:aa:67:04:d5:d2:c9:98:ff:96:fd:6c:2a:25:43:
dd:07:59:dd:1b:ea:75:f3:d3:57:6a:c1:2d:74:39:
5d:86:c4:3a:2c:a8:6c:94:9d:40:4f:ff:10:5c:1a:
8c:0d:fd:7a:91:18:16:17:40:48:41:4e:a1:0a:78:
eb:08:0d:5c:a7:97:e2:5c:46:87:08:aa:ee:8a:78:
fe:a5:cf:49:d3:e2:dd:bd:0b:9d:83:02:81:f6:56:
f4:76:aa:48:8f:45:c2:52:a0:d2:db:62:bf:bf:36:
c7:1d:90:b5:f5:7f:ce:8e:b7:39:19:72:99:7f:de:
3f:26:c9:6d:ba:3f:82:74:57:a7:22:66:fc:69:c9:
0c:df:c4:cc:eb:92:cb:cb:5f:11:fb:58:8e:9f:69:
75:1e:ab:4a:5b:ac:cf:6c:f7:f4:b4:23:cc:f8:88:
b6:15:37:97:43:cc:a1:1d:07:01:00:b4:59:24:fa:
5b:77:f9:d1:c1:3a:eb:43:e1:d0:41:59:65:ac:c0:
42:6d:7c:c4:a3:6c:9c:61:b0:1e:29:cd:4d:29:d4:
f4:6b:4d:08:c9:30:88:e6:46:2d:d6:58:cd:d9:7c:
46:4b:38:0f:59:75:c5:d8:7e:49:21:6e:9b:59:b9:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DB:AB:F3:38:48:E1:9E:45:D9:D6:E6:AB:36:05:00:58:94:21:07
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:df:a6:67:3d:e1:02:1f:63:9a:d7:06:b2:f1:e7:f3:a4:ec:
e8:2d:37:58:95:67:c6:81:4a:0c:dc:05:f8:11:9d:cf:8c:ea:
c0:01:88:44:bc:6f:05:c0:8c:a2:19:76:d6:df:23:d8:89:11:
7d:86:bb:89:0a:43:35:e0:dc:cd:48:59:67:97:f8:5a:86:9b:
d2:7c:a5:e1:30:77:18:49:7e:27:f3:00:8e:5c:82:1c:f8:77:
dd:2b:ac:84:15:ab:0d:8b:44:be:49:3f:3d:90:b3:ca:ed:be:
00:f0:73:7d:88:b1:e8:c6:d7:ee:21:35:89:aa:e5:06:14:4c:
b9:30:41:77:6a:58:c5:dc:88:1a:ac:d3:e9:f2:27:f8:39:f4:
0e:d3:88:1f:25:37:2c:27:5c:42:9d:42:91:01:0a:a6:00:0d:
ab:70:bb:10:3b:58:35:bb:e6:84:ce:b0:b3:53:74:59:19:d3:
ea:15:13:bb:1d:51:c1:1c:e2:3a:ec:3a:41:30:00:ad:22:aa:
29:ef:aa:db:de:a7:90:38:0f:f7:c2:8b:7b:76:e9:a6:55:d3:
4c:51:e9:7c:9a:c0:c9:c1:c8:97:24:dc:43:3d:eb:cc:81:b6:
49:df:87:b5:89:69:b0:72:bb:5f:ab:94:7c:e2:b4:e6:ff:eb:
b4:74:3c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:40 2025 by rpki-client