Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: s4b5MnKdnibsNk++8bVv/GPUJ/fwWcEPWy+CynPdy2E=
Subject key identifier: DD:8A:95:50:A6:EE:17:5E:9E:46:49:EA:6E:AB:8C:72:72:00:87:F5
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 0194BCA97E72CAFEDBF4DC4172AE42AE10B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: DsnYhz3l-UjW4BEfkskBQyPqFHg.roa (hash: Ca24yg0KQW8MlNf8yUGGudiupYhIqA/czyOnT3n44ic=)
2: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: ZBvUNuR71rnmLfR26Jz09w+jUQFCjiio+U60iX1nQx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7e:72:ca:fe:db:f4:dc:41:72:ae:42:ae:10:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=dd8a9550a6ee175e9e4649ea6eab8c72720087f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:4d:bc:c5:2c:4d:57:97:2a:96:5f:54:6a:
e6:7d:e4:31:b8:a0:33:59:41:cb:bf:46:1d:dd:12:
88:61:e8:5d:b5:89:f9:2d:bb:47:64:83:e4:a8:49:
d5:91:25:4c:33:f2:c0:79:b3:5e:49:1f:3e:74:15:
f6:7a:d4:c9:77:21:7b:ba:73:95:54:d2:b1:d4:7b:
1c:72:35:7a:c9:a0:bf:89:8f:b8:7c:c3:76:e8:1a:
3c:72:68:7b:2f:f1:ba:07:f3:f4:23:84:cb:27:42:
5c:bf:ad:53:17:37:a8:59:f4:cb:af:03:37:a0:bb:
69:43:41:e0:b6:a4:96:41:23:7b:94:5d:ea:f4:c7:
4e:6a:49:4a:ae:3d:e0:40:3e:ca:a0:08:12:07:3f:
e5:67:75:05:51:44:c4:c5:ef:03:4d:a2:2f:b1:18:
ea:c4:9b:f0:30:9c:02:91:cc:0f:aa:32:48:24:6b:
c6:d9:4e:4c:4a:ff:ab:f2:05:41:22:36:9a:3c:32:
79:75:fa:09:cb:31:bf:50:96:5a:44:8b:24:ac:a0:
4b:8c:99:1d:74:1a:4b:32:24:92:85:26:8e:11:64:
c8:07:f9:b1:b5:79:e8:e3:c8:bc:d0:71:b6:0a:cc:
26:d1:9e:38:ef:d0:f0:84:4c:e4:f5:1f:3a:20:25:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8A:95:50:A6:EE:17:5E:9E:46:49:EA:6E:AB:8C:72:72:00:87:F5
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:09:fb:3d:dd:46:57:46:2b:a5:10:4e:30:c7:30:45:9f:3c:
03:d4:f1:dd:c2:70:cd:8a:e1:40:93:54:8e:8a:98:81:8f:d0:
bd:9a:ba:70:36:39:9e:34:af:f0:be:ab:c3:1f:8c:ca:61:37:
58:41:7b:d9:26:35:3d:ed:38:8c:c5:7d:41:10:ef:46:3c:90:
44:81:1a:44:c6:5e:d4:5a:f5:27:a6:16:be:3f:08:a4:43:05:
d8:67:70:39:e5:b9:6a:a4:15:89:06:44:22:8d:1f:34:f5:3b:
4c:71:7e:0f:01:1c:ba:4d:1a:59:d2:e3:82:dd:52:29:c9:08:
c5:74:87:f6:81:38:ab:05:0a:8c:c6:4d:eb:f5:65:33:9c:52:
09:d4:01:4d:f9:59:0b:ce:76:63:b4:60:e6:24:a5:61:0f:9d:
e3:86:4b:b8:16:ef:78:8a:26:cc:1e:96:6d:32:40:27:16:b5:
ac:2c:92:94:99:61:0d:28:17:3d:39:fb:70:a6:bf:6e:eb:76:
b5:9a:c8:68:ad:5b:05:7d:d0:b8:12:0b:2c:bd:49:8d:bc:e8:
5f:e7:fa:13:af:f7:f1:51:fe:2f:92:0e:39:4a:00:d7:4f:f4:
6d:ed:2e:92:72:2d:05:ea:bc:4a:b6:12:b7:47:7e:80:e6:13:
02:96:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:26 2025 by rpki-client