Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier: xbDATskwfvyCSbXiJKfUUfiONpQYFdK3EUroh6YEwG4=
Subject key identifier: 9D:E9:88:4E:0F:8B:60:0C:FC:01:33:1D:0F:33:60:77:5C:9E:9E:CD
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 0194BCE07BB5415DB10EDBE78A4D24F0FCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number: 0B13
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: izkUadWumyGYoFQlg3G/KcxRcWpO+5DW7D4QOzLv3uw=)
4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7b:b5:41:5d:b1:0e:db:e7:8a:4d:24:f0:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=9de9884e0f8b600cfc01331d0f3360775c9e9ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:39:b2:f7:b8:52:67:0d:81:be:e2:a0:b3:
d7:87:13:e7:9f:d2:1a:46:71:3a:01:a9:7e:6d:65:
60:26:e0:da:00:c3:ce:46:08:ca:6d:de:59:be:a9:
b6:5b:90:33:cf:44:2b:4e:26:5c:9f:bc:ca:50:10:
a3:29:8c:67:33:63:90:61:c5:78:ee:c4:72:6d:9f:
a4:1e:57:de:69:04:10:71:60:d8:8b:b2:47:db:2f:
bc:52:61:fe:67:b9:b9:1f:0a:ef:41:1f:c8:ef:a1:
6b:bf:00:5b:f4:d1:d7:14:37:53:2d:15:47:a2:64:
8e:2e:91:58:4b:e7:49:73:9a:90:c6:78:a6:fc:d9:
52:40:43:bd:92:f3:32:c5:50:85:60:e2:1c:f5:85:
1d:ea:a1:82:17:02:54:4c:1d:a6:73:04:89:19:14:
06:4f:fd:d0:06:f7:7a:20:2c:01:d5:9d:ca:b3:05:
8e:c5:a4:28:48:c5:d8:30:34:67:04:60:6a:01:d8:
36:a5:78:ca:9f:ed:76:9b:8d:da:96:c6:9c:79:ca:
56:dc:e5:a8:56:23:2f:52:b6:85:e8:ff:44:cb:bb:
37:95:b7:62:80:12:7f:02:54:84:8c:9b:5e:6b:39:
86:34:e1:e7:7c:9b:7d:5f:5d:9f:a0:21:fb:7a:7b:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E9:88:4E:0F:8B:60:0C:FC:01:33:1D:0F:33:60:77:5C:9E:9E:CD
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4e:3f:e8:44:a7:98:93:41:0a:55:a8:5f:ff:3b:af:21:a8:
65:bb:81:62:ef:05:83:9d:67:72:f3:8a:9b:8d:a9:da:89:42:
ae:61:2a:ce:b8:34:8f:f0:6f:a0:12:b7:9d:ce:94:c0:54:9a:
46:96:90:bc:ca:e3:b5:dd:7c:90:c6:3f:b4:47:9b:86:04:00:
78:ec:64:cf:c4:23:46:58:90:66:5d:a7:7c:96:ad:01:fd:ac:
a6:68:03:92:46:1d:d1:eb:6a:7a:75:7b:f2:19:d4:cf:5b:8d:
ca:33:bd:c1:56:e1:45:e2:60:69:97:40:e2:62:27:15:39:b3:
08:88:a7:51:66:4a:6c:3d:6f:eb:a8:b1:62:fb:99:ad:56:80:
9a:f2:d2:65:d6:e1:f6:9c:39:16:9f:2e:eb:71:cf:bf:11:1a:
23:92:a6:58:ad:a5:2b:7b:11:20:97:47:7e:1c:b0:bb:22:1d:
bb:43:c4:a3:c7:64:3f:6f:b7:78:9d:07:51:dd:2e:2e:91:3e:
1e:cf:ba:2b:c6:5b:ad:2c:9e:07:21:b5:b4:99:c8:33:77:a0:
ae:e4:68:fa:50:b7:7e:00:d4:2c:54:d0:ef:44:58:9a:60:30:
db:81:94:7d:db:06:2d:8e:3c:6a:2d:61:57:ca:37:88:8a:ea:
09:ac:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:35 2025 by rpki-client