Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier: qczPk8XVq6b7TuDH4ZQeRmBF1hPFQJcCSbj6jL1+mwo=
Subject key identifier: 65:24:98:C8:FB:3A:CC:F8:7A:9F:E7:72:C5:71:F9:9E:1C:17:CC:2E
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial: 0194BBCE254C786902721379CD6ECA0C3EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number: 117A
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: fV3XnFoBP07Lpa8McWmgjMeXWAJfNBuowsWFewu/d1w=)
2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:25:4c:78:69:02:72:13:79:cd:6e:ca:0c:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=652498c8fb3accf87a9fe772c571f99e1c17cc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:7f:25:7f:fe:12:60:b3:ed:b9:65:ac:5f:
dd:17:9a:db:4d:e8:92:91:10:29:0e:3c:f9:f9:0a:
12:3e:66:b3:27:76:4d:79:9a:68:69:9b:ba:f2:73:
39:98:7c:ce:b5:e7:69:64:68:f8:9d:8d:f2:d0:dc:
09:09:53:3b:69:3e:85:9b:dd:ac:ba:16:b3:00:09:
59:fd:c0:a1:80:84:b9:79:f8:0f:0c:c9:0f:43:19:
bc:85:9d:16:ad:74:6f:92:ce:1b:6e:4d:f2:d0:61:
c3:66:35:4c:5a:3a:c3:5c:27:ee:72:d6:83:da:46:
30:b7:97:d5:2d:56:dd:97:2b:8d:96:68:e9:f9:1a:
40:98:f5:ac:00:96:bc:90:56:18:a5:af:ae:01:06:
2d:f8:ce:94:92:6d:8a:3b:25:32:bb:34:fb:e6:17:
8a:21:cb:ee:d0:3b:56:ba:42:c9:92:59:c7:b1:ba:
44:66:e8:c3:c8:eb:9a:c0:23:c1:06:de:dd:39:8e:
09:78:87:81:a4:6d:f8:9b:59:8c:fe:75:6c:e0:be:
d6:58:cb:ca:ad:90:23:28:49:68:bb:c8:af:cf:d5:
fe:86:88:6d:81:eb:6f:04:bf:92:2c:f4:32:25:35:
73:45:8d:21:3d:20:35:a5:be:3a:ce:f5:01:6e:f0:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:24:98:C8:FB:3A:CC:F8:7A:9F:E7:72:C5:71:F9:9E:1C:17:CC:2E
X509v3 Authority Key Identifier:
keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:93:3f:bc:2c:0f:8c:78:d4:31:3d:67:e1:b1:87:3d:8a:f7:
e4:b8:49:cd:3c:8e:64:9e:3a:42:54:ec:df:4d:7b:48:74:48:
1c:74:9d:15:0f:ba:b5:bf:99:e9:ff:bc:f0:b5:db:eb:11:dd:
06:db:d9:0a:04:da:25:d5:74:af:0e:92:c8:58:28:73:31:5d:
85:05:c7:99:16:11:96:c1:b1:7a:1a:1a:bf:4b:86:fa:aa:b6:
e0:14:87:59:7d:6d:5f:9f:f6:93:a7:01:f8:36:eb:64:77:ff:
70:39:4e:f5:db:40:8a:0b:44:52:48:26:36:63:01:09:b2:ad:
3f:7a:b2:66:b8:b6:dc:a7:39:de:db:55:4f:7f:e3:3b:0f:31:
bd:48:ba:be:ca:72:ee:3d:cd:5b:8e:25:48:cd:3d:f5:9e:55:
fe:e4:51:ed:26:72:18:12:7c:94:bf:61:b5:31:5e:18:c6:45:
27:4c:69:77:c9:9a:a2:e3:26:c5:b9:05:c4:79:d7:e5:ed:f5:
ac:e4:f4:9c:5a:6b:90:f1:58:93:cc:b8:22:bf:b6:f7:98:45:
d9:fb:f0:81:e8:17:46:db:5d:36:63:e4:9a:a4:cd:2a:71:ac:
ba:7d:6d:0f:49:2f:74:87:1b:84:04:06:87:00:35:bf:2d:78:
6f:49:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:28 2025 by rpki-client