Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: fUarNvn5wAbMLfwwRT+J+017ZM+n4IBfWXDYe5hgq6g=
Subject key identifier: 80:79:A6:7D:FC:92:4A:B3:63:8B:18:43:62:59:AB:A4:76:5E:74:7E
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 0194BC72EABAFD2942D021A29401980D27A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 0624
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 1-zD-VP--H8n0NROM6_MEnlnoArY.roa (hash: nJouFHvYIjsuEwuLWeuvNkKf+hqux6O1NRmsIOTPhUc=)
2: 1heB0YuNq-USGUveTj29qvEG1XU.roa (hash: 0NZHYUEHQ1C7qLoCH8KkLUBz6NfTEtAiQEDR0MzkAeo=)
3: CXfl0vZF1sbQq93reOXuNh2tfq0.roa (hash: ouJvYI4QUtdTBIQDtkd9tLF9CepiUn3okCMjYpiyZEI=)
4: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: IhoMQpMy5oyGR5PuoPcckGxdrFAqk3l96oBfeuNR8QE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ea:ba:fd:29:42:d0:21:a2:94:01:98:0d:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=8079a67dfc924ab3638b18436259aba4765e747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:e6:3c:80:0e:f2:47:01:1b:c2:e4:85:1d:
f0:22:9b:a6:11:5b:2e:f0:c7:a1:45:64:cf:7f:8f:
67:a6:21:21:25:02:7d:3d:fc:de:13:ad:59:bf:bd:
7a:60:c6:bc:cb:7b:db:6b:01:41:0f:41:96:da:67:
49:81:26:7d:16:2c:b8:a9:c5:4d:c6:47:d9:de:0a:
ff:d4:ce:6a:dc:34:2d:f8:24:04:49:4f:13:dc:e1:
3e:a4:7e:23:27:bb:c1:13:b7:4e:2e:a5:68:98:dd:
c3:86:1f:05:e1:03:ca:9d:38:50:32:a6:6c:23:55:
d7:7c:72:64:6a:01:1a:71:20:b4:7a:87:c7:cc:eb:
6d:ae:df:2a:ee:34:11:e8:f7:1f:1d:03:7b:f2:7e:
67:ce:b1:57:b6:10:b5:19:11:63:41:df:71:47:05:
ad:6f:ca:fc:fe:b8:d8:4b:0f:22:e2:0a:cd:de:77:
5f:bd:e3:0c:19:eb:4a:a6:01:eb:cf:2a:f5:c0:b4:
6e:68:85:9f:c0:09:3f:b7:a2:55:c5:97:5f:98:28:
88:46:d7:e3:87:d8:b6:80:96:c2:52:b8:59:87:e0:
5b:2e:58:4b:2d:d5:17:9a:f4:94:e4:7a:f2:9a:aa:
35:4d:56:fd:4a:a6:02:ef:65:d3:60:ed:55:ac:b0:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:A6:7D:FC:92:4A:B3:63:8B:18:43:62:59:AB:A4:76:5E:74:7E
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d9:f7:41:12:32:e7:8c:71:a5:0a:19:35:98:b0:a2:27:97:
9e:4b:87:4e:99:fb:c6:e7:79:e5:18:17:52:93:4a:69:bb:cd:
9c:c0:e8:15:6e:6f:49:aa:b7:6b:ec:5e:77:20:8c:29:12:b1:
c3:4a:1f:94:49:cf:98:29:ff:c3:41:14:c6:6f:84:09:70:29:
ad:d7:fb:0e:11:9d:d0:33:ef:c2:d7:80:48:64:1d:42:00:ba:
79:50:9f:ef:11:80:41:50:80:43:b6:26:ad:07:cf:9c:a9:2c:
51:5f:49:e2:70:04:19:b1:70:ce:47:15:ef:19:ae:f5:26:83:
8f:43:b8:a3:f2:e5:9b:7b:4e:ca:60:a4:0f:a7:9c:9f:a4:e1:
60:55:3e:c0:fb:2b:8f:1a:ff:45:6f:f0:57:af:4a:21:53:34:
ef:11:e6:89:f2:e2:78:af:c9:b4:e2:dc:09:88:56:51:ac:af:
90:30:ff:90:89:6f:9a:87:fa:3e:fd:75:6d:1a:8b:88:59:ce:
59:ce:b2:7b:39:75:a6:b3:8c:9d:53:a5:a4:d7:b4:90:12:0b:
4d:b7:aa:a2:aa:92:a2:19:34:ab:29:61:e9:a3:25:ee:39:a7:
9f:dc:58:86:8a:63:7e:42:3f:bd:8b:f4:c1:40:b1:aa:1a:bc:
10:5b:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:57 2025 by rpki-client