Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
File: EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json)
Hash identifier: zHNRbjnuqe0FkcuLeivI8hJ8uW98KKzfoLtqowACI4g=
Subject key identifier: 09:B3:4C:E2:4D:0E:DD:94:04:37:E6:90:9B:C3:D7:86:D4:B3:43:B0
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Certificate issuer: /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial: 0194BC0528F322A6DFA7EE5DF999A1DB8FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa (hash: qKcKkoUboZrcqtoprL7lO+GfuPllhw7eINNwNRAw7pk=)
2: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: dNmrd+nkrvtdvvbFqU8A5KIix5lmBDcHD/As5Jzz7r8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:f3:22:a6:df:a7:ee:5d:f9:99:a1:db:8f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=09b34ce24d0edd940437e6909bc3d786d4b343b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:76:5f:d9:76:58:73:72:c5:98:4f:c0:50:
1a:09:ce:b3:65:fd:7c:fb:a9:c7:d0:46:7b:4e:c0:
76:40:7d:21:67:c6:29:3f:60:d2:48:18:e6:1d:53:
c6:73:dd:23:17:5d:b2:0b:ef:65:3d:6a:79:e3:3b:
15:1d:a8:d0:e8:88:bb:ff:5f:8d:e6:25:2e:69:9d:
9b:6d:f0:98:81:1e:75:e9:a8:ea:8d:07:3e:46:56:
c7:8f:a5:67:db:b0:b8:1c:85:df:e4:56:b0:a6:d3:
b2:69:cd:43:6f:26:a5:ab:cd:06:b6:74:8f:5f:69:
e2:fe:70:e4:b6:7f:c3:88:cc:75:75:c3:09:8b:e8:
32:64:57:c8:40:d0:ad:56:0d:af:4f:d8:fb:f4:5e:
c2:d5:6d:55:9d:4f:3c:df:fa:42:be:70:21:51:65:
3a:b2:04:04:95:ce:f4:36:65:a7:44:8d:96:12:f6:
ab:c5:d7:58:b4:c1:38:3d:34:86:ee:46:12:48:01:
7f:e8:b2:44:4b:dc:cd:63:28:cd:1e:8a:fc:b6:0e:
1e:10:81:2c:12:27:05:1a:a2:49:cd:48:2f:76:bb:
5b:a3:bf:dc:d1:c9:46:7b:d5:91:45:1a:3f:de:62:
15:a4:12:34:25:23:fe:de:94:72:80:e0:1e:d5:92:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:4C:E2:4D:0E:DD:94:04:37:E6:90:9B:C3:D7:86:D4:B3:43:B0
X509v3 Authority Key Identifier:
keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:09:48:4c:0d:cb:c4:09:d4:d2:01:de:79:0d:53:44:6e:18:
3f:36:9d:d1:76:32:c2:3b:c9:5c:b6:b7:b9:95:fa:cb:87:c5:
00:46:d0:af:c4:c9:b5:dc:d8:b6:3a:82:ed:e0:85:fa:3e:ec:
e3:e4:a9:c4:4c:d3:85:ac:56:b3:77:6e:18:a8:e7:d1:84:34:
a6:75:e9:7a:82:d1:39:86:cc:a8:a7:b4:af:f4:47:8b:81:64:
dc:8b:1a:75:43:e1:c6:d5:c2:60:19:5e:d0:6b:2b:e8:f7:13:
9c:4e:a7:db:13:62:cb:fe:54:51:22:cd:30:ea:8d:a4:a5:07:
bc:66:cc:4d:3c:66:f9:93:b4:19:77:79:a7:17:36:bb:75:1c:
0a:84:1f:12:f3:9d:1f:ec:88:68:a3:b5:0f:34:c9:c5:c5:25:
1a:1f:f8:77:5c:ab:74:09:9b:a9:df:cb:2b:77:e6:f7:36:02:
c2:5e:63:23:11:6c:50:86:02:bf:e2:2c:d0:4f:a9:51:ca:39:
4f:b1:7d:2c:0d:9f:57:44:6e:d3:df:a8:fd:3b:78:62:a9:f8:
1f:b3:05:b5:5c:ca:e6:15:97:3b:df:94:34:dc:5d:4f:48:33:
e7:a2:f7:18:68:c7:ae:4d:a1:09:98:d6:80:21:e7:6d:52:8a:
df:b0:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:41 2025 by rpki-client