Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier: sOLARsABsxLlaxalwPbS6n8rQ/cUROohbjK2T0FxfA8=
Subject key identifier: 42:1E:24:83:DA:6A:50:9C:62:F1:68:76:45:09:84:0E:99:5D:F1:E9
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 0194BD4E6349222B10E9B6757D92C205381E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: hkdrAqCaMB8pfb41vbIPMti+urwpnaMbg2VepVgAKvQ=)
2: nfi8L76Q0CcXdXMuyopjIwMNN1s.roa (hash: yyBzF5vSH0UZ1Eb70mzyyMArzuUjMy9cXtif0oEgNm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:63:49:22:2b:10:e9:b6:75:7d:92:c2:05:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=421e2483da6a509c62f168764509840e995df1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:b7:5d:83:05:71:2c:d8:38:b9:55:cd:f4:
df:c5:1b:f2:1b:eb:4f:4b:ad:ce:b7:e4:c9:58:d4:
06:ad:cf:67:21:37:e4:12:0a:74:2c:a4:fd:6e:d5:
dc:4d:bd:07:e1:a3:2f:09:bf:89:e0:71:28:f3:a9:
71:25:92:5d:b1:fb:ef:ad:dc:77:91:9f:54:65:68:
f8:b6:c4:58:6a:4b:c5:27:09:14:13:20:d8:fd:24:
d0:8c:99:4f:00:3c:bd:b1:7c:98:10:b0:74:fa:77:
8f:35:71:08:23:85:17:7d:1b:02:6b:1d:2f:e1:15:
49:76:5d:91:21:bb:36:e8:34:7f:ae:ec:0c:c7:b2:
2a:d2:4d:41:0a:82:4f:ad:1c:23:3e:51:db:2e:23:
9e:55:fe:ca:6d:ec:be:ab:02:a5:a4:d2:38:5e:f5:
33:3e:af:ec:5d:c4:80:f7:13:fa:fa:4c:7b:5c:fe:
0b:df:2e:7d:95:62:b1:33:60:d5:bd:a9:fe:ca:6a:
4b:47:27:94:c2:b5:7c:1a:1d:2e:7e:da:a1:83:9f:
a6:30:dd:9e:d5:cb:31:c8:25:58:fe:fc:a8:7a:e5:
6c:91:4b:a9:44:58:df:98:20:4e:61:7e:c4:48:dd:
67:97:4b:d8:09:4b:cf:97:46:69:7b:7b:5e:05:dc:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1E:24:83:DA:6A:50:9C:62:F1:68:76:45:09:84:0E:99:5D:F1:E9
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:b3:d4:a7:df:4d:a0:4d:6e:c6:51:8c:e5:60:52:fa:a2:
09:29:af:0f:8a:59:a6:df:88:f5:0c:c2:6f:77:76:b1:30:65:
07:9d:50:be:55:6a:07:25:ed:fb:7f:ba:e7:41:f1:a7:49:60:
f9:e9:01:d8:77:e8:43:c8:23:f3:37:d2:0b:64:52:0f:a2:e7:
58:8a:9b:2b:05:60:27:3a:dd:f8:b6:11:5a:f2:69:14:34:45:
1f:40:9a:87:c0:67:e6:9f:0b:32:6d:4f:97:32:00:6a:23:09:
31:51:bb:a7:d3:a7:4b:91:76:e0:32:45:1e:ee:d9:3c:92:f2:
39:04:d2:1e:91:29:22:09:73:c6:7b:95:84:87:f1:97:5b:cb:
5f:33:bd:9e:bb:9a:74:58:a3:bd:a6:ae:6b:30:2b:96:15:18:
c0:e8:8b:f4:8d:e8:49:d9:79:d5:4f:9d:3a:01:94:2d:97:47:
31:50:02:e2:0b:3f:8b:37:ee:e7:03:f1:df:ae:fa:82:26:68:
17:ad:e9:c0:49:c3:e7:4b:f6:9b:d6:2c:02:8c:e9:0c:f9:90:
1f:52:dd:f0:9d:13:e0:59:d2:ec:d5:f6:ee:aa:b5:d2:90:68:
13:74:6d:7d:cd:f3:18:98:4e:cc:f5:8b:fe:b0:ad:f1:64:2c:
6b:9c:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:24 2025 by rpki-client