Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: mQ0f5eNCdfSQbPcBCtYQn2SwAFQ3wHUsFAKy1Rghz9E=
Subject key identifier: 05:94:FC:34:0A:2C:5E:16:FC:AF:61:CA:C4:82:0B:F1:F3:10:6E:5C
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 0194BC052B029FE5343F548F93A63D4342B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 10EA
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: 2xvVuZugB1cVd6GcR10PUQSVg2F08a/buL0klui34cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2b:02:9f:e5:34:3f:54:8f:93:a6:3d:43:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=0594fc340a2c5e16fcaf61cac4820bf1f3106e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:09:70:aa:bb:1f:82:6e:81:8b:e0:83:fe:
64:87:c8:bf:3a:95:f6:3a:b1:31:96:39:81:55:ae:
46:5b:12:0f:a8:1b:33:29:58:bb:e6:4d:34:9e:a5:
d9:4e:88:04:b9:9b:63:04:50:14:18:e1:bd:2e:e3:
af:61:a8:e4:45:26:30:98:83:87:6f:56:55:5f:48:
2f:da:21:33:82:d3:6d:3f:37:f4:84:af:b7:dc:56:
3d:08:b7:c0:f6:53:dd:36:8e:8c:fd:00:5c:17:ee:
89:39:be:a3:fe:33:46:9d:dd:99:79:44:7e:53:16:
1e:59:39:8a:53:1b:17:d5:63:71:85:79:2a:dc:03:
70:73:31:84:5c:77:d8:18:80:ba:5a:3c:01:47:94:
52:a1:dd:79:df:05:8d:b7:99:da:47:a6:71:cd:ec:
9d:48:4f:f0:a9:6c:90:b8:3c:62:b4:b0:fe:07:25:
be:38:6a:86:d4:d3:71:a0:b0:c3:a4:8e:65:43:e5:
1d:8d:5d:5b:34:79:f0:17:e1:75:37:bc:07:b4:e0:
3f:e6:49:97:27:29:43:44:67:4d:7e:00:a1:9e:20:
23:9a:6a:2d:42:ba:c8:0f:a6:a4:59:ea:2e:46:ce:
39:ed:0d:79:4e:c6:89:9a:a3:eb:cb:1a:da:6f:88:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:FC:34:0A:2C:5E:16:FC:AF:61:CA:C4:82:0B:F1:F3:10:6E:5C
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:90:a7:43:17:b9:24:f8:7a:b2:81:a9:ab:02:b1:d8:fc:20:
49:41:14:e9:95:47:15:17:3b:d7:c6:2e:dd:c6:2e:82:50:1c:
88:66:6d:d9:bc:99:b0:5e:0f:50:64:96:a3:5a:6e:de:ed:e0:
80:54:95:a3:ea:d9:f0:b3:0a:72:75:97:4a:82:19:c8:f3:98:
46:4e:99:d1:76:1b:93:9d:cb:67:8e:9f:07:30:fc:7c:27:b9:
c3:17:13:c5:d0:bc:6e:1d:a9:c4:2b:f1:44:8f:18:35:d0:63:
d4:d4:12:59:b3:6c:eb:4d:dd:2e:21:99:1f:f0:4d:2e:ff:9d:
14:a8:c7:21:47:83:21:bb:74:9d:41:5d:50:87:50:10:4e:a4:
eb:cf:2b:2b:ba:b2:53:90:1a:94:8a:48:13:cf:62:e3:cd:ee:
a4:17:cf:5f:c2:53:20:5e:ef:e3:25:cc:5f:21:5b:d8:db:c6:
3f:c8:68:41:90:9f:85:e6:0d:b0:3b:b6:29:b9:d1:0a:67:11:
cb:1a:b0:fa:03:88:43:6b:86:0b:06:5d:a7:6c:f7:30:8f:87:
79:eb:10:c7:a0:ae:cc:3d:6c:a2:8c:43:04:e5:87:19:e9:49:
8a:9a:38:b5:10:7d:c3:12:93:84:69:fc:54:86:3a:8b:67:43:
e1:a0:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:21 2025 by rpki-client