Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: PSQqZs9IwtKsz31VGNQOqdfG/W3N2b8N2ZOvpwsYX6Y=
Subject key identifier: E0:18:04:2D:C7:60:AF:1E:EF:53:22:D5:91:53:26:09:CB:38:8A:BB
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 0194BC04E5A4B32F2EAA22429B54C3642C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 0F29
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: t0bJYZB7pl7PlZpczpCC4vPu/MxHEAprtUJ+h/83lHM=)
2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e5:a4:b3:2f:2e:aa:22:42:9b:54:c3:64:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=e018042dc760af1eef5322d591532609cb388abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:86:02:04:a9:0f:d7:6e:77:4d:d4:e3:9e:
b6:a0:a8:07:2b:ad:2d:1c:d8:10:b1:f7:fb:ee:2f:
3b:96:e5:c2:8d:1e:02:05:80:b2:f9:45:3c:86:5d:
2b:ef:f5:55:ba:c1:ab:d4:75:dd:29:c6:ef:7e:38:
87:91:9c:f4:ac:9d:97:67:f6:ea:93:63:0a:7c:bb:
43:5b:8d:65:a7:df:fe:9c:ed:43:38:5f:82:41:0d:
1a:5f:1a:a2:3f:76:55:c4:11:33:5c:0f:c3:40:92:
35:80:5a:40:25:b6:05:62:9e:71:e1:8c:67:3e:5f:
64:cb:e5:b7:5e:d0:26:20:fb:8e:25:cd:1d:d0:a0:
4b:60:54:0b:4d:5b:35:ff:2c:a7:5b:56:7f:e0:f5:
fc:1d:57:86:da:bd:56:34:ec:3b:43:bd:7e:a9:d4:
cc:01:48:e8:51:05:ae:69:df:92:cf:8d:74:79:7d:
ed:81:8a:d4:96:fe:e2:14:13:60:9b:65:ac:5a:e7:
fb:0e:e7:bd:54:38:a6:9c:a0:d6:b6:b0:2a:a3:3e:
cb:23:b4:c3:4d:b3:3d:cb:78:59:2c:c6:48:2d:94:
d8:6d:81:b3:9d:ee:e3:0a:33:52:74:e6:2c:8b:e5:
b6:0c:27:60:02:7e:94:11:28:8c:75:89:45:a6:bf:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:04:2D:C7:60:AF:1E:EF:53:22:D5:91:53:26:09:CB:38:8A:BB
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:bf:17:41:01:a9:49:19:1f:5e:73:72:6b:e3:10:77:b4:
c5:70:fb:07:4b:24:03:11:f0:31:7b:8d:1b:35:67:77:77:51:
01:5f:7d:95:2c:a6:d5:ee:35:4c:c4:04:de:b7:c9:48:fb:9b:
79:ab:12:19:87:34:d3:8a:05:5f:df:2c:51:d5:0e:b8:66:f2:
8c:d1:61:e3:72:3c:ad:9e:31:af:ec:53:d2:b5:55:c7:bf:6b:
51:e3:fe:bf:ac:70:f9:97:bb:80:c6:57:79:48:0e:b1:89:b9:
a7:23:ca:2a:ae:58:a6:2a:a4:47:92:7c:dd:a6:d0:56:31:3a:
4c:6e:52:ce:de:62:43:dd:54:b0:bc:10:5c:97:df:49:62:f9:
53:dd:85:01:41:12:2a:6a:d0:23:7c:dd:b9:56:72:ca:a6:75:
00:6c:56:92:3d:47:7f:e3:3d:57:0f:36:eb:30:5d:97:aa:ed:
2c:9c:4a:23:14:b1:d1:3c:64:ce:b2:83:d3:0d:db:a1:7b:4b:
c2:6c:cb:30:1f:f5:99:b9:87:23:20:d6:93:95:ec:be:66:21:
d6:76:47:62:b7:5d:17:61:d6:95:36:94:b5:95:ca:e4:6e:81:
40:c5:e9:bf:e5:67:e8:be:80:17:2b:56:f9:ca:c8:e3:37:77:
49:d9:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:15 2025 by rpki-client