Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier: vYdAUugjAL9Z4r4Wsm8tbBKk37yWpadeOB4e/Wrb04E=
Subject key identifier: 43:9C:2E:67:9E:A0:BF:5E:A7:AA:CD:F9:02:7A:01:F2:25:7C:C0:84
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial: 0194BC05182111F3445FF24FF7E5A3D63A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: BchPfWoZB09m3CZXhCvT16onQLZueuI+hjgmal4evxw=)
2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:18:21:11:f3:44:5f:f2:4f:f7:e5:a3:d6:3a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=439c2e679ea0bf5ea7aacdf9027a01f2257cc084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:64:a1:e0:2e:b1:5c:49:e3:94:17:b7:9c:
2c:bb:c5:79:d7:17:a9:16:9f:bb:88:ce:f0:b7:1f:
1d:18:15:6a:9c:4b:f1:88:09:4d:c1:a0:8d:2b:5c:
45:23:c2:0d:ff:9f:1c:12:4b:5e:0e:19:fe:f3:f1:
e9:45:03:8c:11:fd:39:00:ed:1c:7d:3c:f0:35:87:
b4:89:84:8b:1e:96:a3:58:00:63:da:24:74:ee:03:
f4:8f:2a:13:91:aa:6c:dc:42:ea:3a:bc:c5:d9:77:
3a:f2:b1:34:a0:d7:7c:47:27:f2:9c:9e:f1:d9:50:
8d:56:5b:32:3e:8e:7b:f3:93:78:dd:a7:e1:24:ab:
77:09:f8:a2:84:05:52:d6:66:39:8a:6e:7e:6b:56:
69:4f:bc:e9:f0:ab:98:67:a5:83:7c:d3:ce:c5:72:
50:39:dd:79:fb:84:07:54:d2:37:6f:e2:90:40:f3:
28:3e:de:0e:16:cb:a0:34:0b:33:2c:94:99:96:60:
7c:14:75:6e:15:1e:56:44:fa:f8:ef:3c:57:13:cf:
26:1a:97:b9:b8:aa:1e:43:26:fa:a6:1f:8b:47:bd:
a3:d9:89:8c:a3:4a:fa:a9:a4:6e:b7:ad:9f:10:d4:
45:85:17:5a:5a:81:5c:53:6d:f1:c0:2c:c7:77:dc:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:2E:67:9E:A0:BF:5E:A7:AA:CD:F9:02:7A:01:F2:25:7C:C0:84
X509v3 Authority Key Identifier:
keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:29:9e:65:94:ff:97:1f:71:ab:b7:0f:1d:11:3a:80:25:bc:
bc:ef:7b:89:fd:43:d6:bb:f9:ff:00:23:a6:95:eb:13:fc:dc:
ba:f0:79:72:7f:37:36:cf:8e:e5:1e:91:a8:b8:a8:1d:5a:c6:
b8:da:61:33:b9:34:4e:bb:19:73:b2:33:13:df:dd:37:37:4d:
e4:58:60:26:37:d4:5a:65:76:96:f0:3b:be:22:d7:0e:8e:95:
61:8a:d6:7a:34:b4:dd:ee:2e:0c:8b:61:85:09:0e:6d:6c:d3:
a4:9b:ae:05:43:fc:e7:66:30:40:e2:f1:49:c4:0a:6b:f5:4c:
08:a9:40:03:a7:1f:94:46:b9:5d:7b:9f:b6:81:a8:c3:70:c0:
4f:9d:a1:c8:4b:11:e8:fe:34:27:e1:65:21:ce:31:96:c7:87:
37:60:01:d8:7b:8e:bd:59:01:aa:bb:3a:f1:3c:81:8b:2c:b8:
37:d2:93:01:3d:15:a4:00:3a:ca:17:f1:bd:cd:81:7c:f4:95:
ec:0b:2f:6a:1d:8e:ff:71:18:94:24:b2:50:a8:b7:ee:e3:57:
c5:f4:0f:c5:2a:a6:68:5b:f6:39:70:cb:b6:c7:a7:73:7d:99:
38:40:f1:c9:69:d5:af:fa:20:82:0a:1c:47:2d:97:0b:f0:72:
6e:6a:00:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:49 2025 by rpki-client