Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: VDGSzLqQA4W/q87p3vhWd8mDzJzrWtZB0vtxJAjvxCQ=
Subject key identifier: 65:E2:08:1A:02:C2:F8:45:99:CA:61:44:B6:24:55:44:1D:81:2F:D5
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 0194BD85A8A8F33ADC6ACD380A213F160998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: nO78jqP6rR+MfIGM2F3uNscDRzxeA098ItfrHO51qFs=)
2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
3: iDJMZTn0ZQsbFebdZO8EqvngV-M.roa (hash: DFTmsPgWe97cJSGWeErnYcp9qELmEJE971RJTfF9FUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a8:a8:f3:3a:dc:6a:cd:38:0a:21:3f:16:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=65e2081a02c2f84599ca6144b62455441d812fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:4c:fa:2c:d0:e3:52:76:5c:15:dd:16:f9:
d4:57:c7:07:e8:7c:7e:97:a2:8b:4b:a6:42:fa:89:
3f:20:6d:93:40:78:af:12:48:79:90:49:fb:bb:c5:
11:24:bd:29:ef:95:09:56:6a:76:e7:f8:bc:10:db:
28:f6:30:37:50:cf:eb:6c:95:16:40:0e:f4:7d:3b:
cf:62:03:42:ff:f3:db:4d:fe:7b:79:cd:c6:07:89:
ca:aa:a3:44:bd:c6:8b:95:64:0e:2a:c3:b5:7d:94:
d6:bd:7a:81:67:cc:fc:02:52:ca:9d:99:21:76:66:
38:ed:a1:58:86:58:0b:1a:5d:c5:f4:ff:ef:ef:8d:
13:00:25:a5:d6:db:12:36:44:d0:4e:db:20:7f:bb:
9b:62:21:0b:6e:fc:ca:34:1a:66:d6:84:db:ba:58:
98:15:4b:42:70:bf:7d:51:f3:73:48:87:44:86:40:
ae:03:55:9d:53:e9:5f:11:2e:05:d8:31:c9:ea:d2:
8d:c0:12:ce:65:7d:99:58:5a:aa:12:eb:af:6d:9d:
6c:94:ca:71:15:8a:4a:4b:fb:d9:5d:5e:9b:e3:c1:
ff:d4:08:6d:2e:df:63:ad:03:41:97:24:90:c0:e6:
09:6c:3a:85:66:79:ff:73:96:ea:76:48:f5:6a:f3:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:08:1A:02:C2:F8:45:99:CA:61:44:B6:24:55:44:1D:81:2F:D5
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5e:13:07:5b:73:40:6a:26:e6:38:78:ad:7c:0f:00:56:ae:
65:82:ec:91:e6:d1:ce:4c:ea:fd:36:a2:9f:40:cd:c4:ab:c8:
29:e1:d2:21:66:91:9c:63:c2:e9:2c:6c:8f:e3:64:7e:c6:84:
a5:13:82:c6:9f:aa:a9:81:e8:59:47:e8:f6:3a:12:99:99:9b:
c3:c8:cf:71:55:56:0b:dd:1a:ec:13:aa:9d:5f:6d:91:3b:0b:
d1:3e:4c:d0:c5:ae:b8:a3:0e:34:30:ed:90:a5:3b:a9:ab:95:
09:03:9b:07:a0:e0:d5:a6:89:1f:38:ad:5c:24:30:4c:b8:1c:
df:80:fe:4d:1f:73:a9:fc:0f:9c:49:78:7c:9a:39:d2:ac:1a:
8e:ab:81:72:58:b6:c4:a9:7e:2c:09:a9:f5:0b:f0:b7:d2:81:
b3:fd:31:34:ad:02:c2:a2:c0:10:fa:98:8a:dd:9e:ad:ca:9f:
23:ca:1c:1f:c6:69:68:5d:17:87:13:5d:de:0f:80:6b:15:9c:
39:26:80:6d:29:29:96:63:e7:1e:a6:35:bd:db:87:7c:94:32:
19:e2:dd:fc:80:4c:bc:3b:36:25:d3:94:87:b0:db:b7:6c:1e:
6f:2f:17:80:ef:ba:5e:bc:ef:78:c2:5c:86:54:e2:2d:49:f2:
25:49:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:56 2025 by rpki-client