Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: 0HL7/pMbo4eLUfm7swcU8nZ0pNAlqd93n5enQ0W25PM=
Subject key identifier: 10:5E:29:60:1A:6D:3C:42:A5:C3:26:C6:1C:59:9D:B0:9F:49:9A:8C
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 0194BC3C25AE6FC2DC99A8B76408842FCDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: PqeMkuCcvrgo4U6+tBipmI7woexzfEYsY5OE0k6+1q4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:25:ae:6f:c2:dc:99:a8:b7:64:08:84:2f:cd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=105e29601a6d3c42a5c326c61c599db09f499a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:f9:19:c8:6d:32:51:50:fc:f7:d8:1c:ed:
46:6d:6d:05:97:ea:68:a8:73:e2:c4:4e:6a:6d:fa:
10:e0:69:1e:e4:4f:7a:3d:c9:b7:f4:38:81:f1:38:
39:47:a7:8d:f8:6d:05:2e:70:d8:b0:11:30:21:03:
9d:57:55:c2:08:6f:3f:4b:35:5e:80:a6:32:11:7a:
8e:75:f2:9d:ad:50:a4:08:8d:9a:50:d0:45:a2:09:
5e:16:b5:ab:4c:a1:79:f6:18:b3:a6:1c:e6:67:3c:
4b:22:9d:15:f7:d6:fd:f8:4b:38:cc:6e:03:0c:fe:
58:47:20:5b:01:73:ec:d1:f3:45:fc:4e:d9:24:3b:
7d:78:b1:a7:ab:05:21:45:4b:50:35:e9:2f:fa:e1:
8e:49:d1:6a:b6:d8:21:d8:22:39:56:99:5a:cb:36:
43:24:85:59:d4:a0:98:a5:bf:bc:4c:b9:1f:2c:b5:
e5:d5:9b:ed:34:52:91:2a:2a:37:da:95:34:26:13:
34:51:46:93:96:4a:31:ac:ab:72:f8:10:f8:70:7f:
78:44:20:af:bf:5b:dc:57:bf:43:59:62:95:cf:22:
7a:86:9d:b4:e1:51:d3:8c:ff:74:f0:21:ca:06:fe:
ba:e3:71:a1:5a:29:01:d5:ee:8e:cd:60:68:cb:c2:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5E:29:60:1A:6D:3C:42:A5:C3:26:C6:1C:59:9D:B0:9F:49:9A:8C
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d4:b7:1f:77:29:ab:e5:3e:ef:45:ad:cc:99:4d:13:8c:45:
37:9c:80:3f:13:db:12:0d:e8:fc:02:68:5d:b0:d8:f5:cc:19:
7e:93:dd:d3:e4:8f:e2:e6:a3:fe:57:7d:9c:8b:e5:21:ac:d5:
22:c0:5e:0d:e8:11:e5:53:47:e1:9a:ad:3f:ea:7a:8b:83:bb:
8b:cd:d1:5c:b7:a2:0d:1e:cb:f2:4e:62:be:1e:2f:91:b8:b2:
c9:25:ce:67:35:e6:2e:ea:9b:00:c6:e2:b2:9f:d6:44:50:3e:
1b:ef:df:df:5c:73:9a:3b:e6:e5:e3:e5:f8:f4:82:6c:bd:f1:
74:ba:28:5c:7d:8e:7f:78:a7:5a:51:64:10:bf:c5:27:08:2f:
b6:0a:12:61:04:af:2a:e8:cd:68:7f:cb:17:25:8c:7e:f3:ba:
3b:65:67:cf:92:b1:25:e0:7d:bd:9e:0a:4b:06:c7:18:0e:08:
b1:53:e9:91:56:a7:69:51:e1:54:7c:66:fe:07:0e:d8:6c:d7:
59:ba:0a:10:3e:c6:57:85:67:62:d2:85:f7:0d:e8:03:16:ad:
f4:51:41:fd:f5:fb:38:64:00:36:c9:19:3b:4d:80:74:27:fe:
da:1c:9b:6c:78:01:d8:48:df:71:92:cb:63:99:8a:3c:30:07:
88:af:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:22 2025 by rpki-client