Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: HOGhYUM1omM/5d7PxY+8ghm0yIqJs3Bzqa3N390rWNs=
Subject key identifier: 79:FF:16:A6:06:09:C8:DA:EE:83:A4:B7:2B:64:12:63:66:1E:62:EF
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 0194BCAA239BBEFE251AA0E046777CA37E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: VHqC+mTCryXt0b9/D4BOM6B/HEPBfas7Ps9AsobGq/A=)
2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:9b:be:fe:25:1a:a0:e0:46:77:7c:a3:7e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=79ff16a60609c8daee83a4b72b641263661e62ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:d4:1c:e5:e7:e0:9f:2b:d4:25:46:38:23:
71:d5:73:67:4f:4e:4c:e8:74:3b:9d:c1:45:46:48:
94:ed:9e:9f:51:be:ea:4e:ce:d1:a1:57:bb:e6:0f:
65:ae:04:3e:ea:a2:ca:4b:30:a2:31:26:70:60:ea:
6c:fe:28:b5:80:79:43:58:40:25:60:a0:d0:b9:7d:
bd:fc:10:27:ab:76:cd:4e:09:43:cb:a3:bd:50:35:
40:a2:05:00:ba:48:e3:ec:d7:ce:28:4c:30:bb:77:
b4:d7:b2:c5:e5:5c:9f:ab:23:81:14:fe:24:7f:c6:
57:bd:f3:f8:99:06:3c:03:b5:7a:b2:b9:95:78:24:
60:95:fe:fa:1d:fb:f9:8c:9d:f2:e4:17:9b:90:bc:
7e:5f:28:c8:fe:13:f3:9e:04:f6:cf:5d:a0:02:67:
14:91:9d:ba:2d:3d:6b:2e:41:82:df:b6:e5:38:63:
e4:5e:90:89:cc:a7:64:9e:4f:c7:68:ad:44:f7:31:
83:be:40:0d:4e:a0:c8:0e:c3:17:0f:9e:ab:e8:3a:
63:99:c8:be:ff:62:9a:e8:19:fd:57:da:db:ae:2a:
a0:a3:ef:84:25:d5:af:e5:c2:9c:f9:44:a6:71:65:
db:97:43:05:f1:15:3d:b4:1e:cc:26:31:1e:a0:f1:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FF:16:A6:06:09:C8:DA:EE:83:A4:B7:2B:64:12:63:66:1E:62:EF
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:bc:b7:03:9b:2c:a0:25:5a:d1:d3:c9:8b:7a:28:b4:f9:33:
14:2c:79:f1:15:b1:a4:a8:33:ec:c8:e4:f6:f4:de:55:64:24:
84:f1:ee:a8:29:e7:f6:17:4e:da:8f:87:9e:67:5a:fb:9d:6d:
34:84:17:51:9f:71:35:a6:30:4c:3e:0b:0d:56:e2:8c:8a:e3:
05:a6:fa:4b:5f:76:26:b1:22:8d:4c:38:19:cc:13:c2:32:ef:
a5:11:12:dd:31:ba:84:5b:b5:c2:8a:83:c8:c1:d2:59:ab:57:
56:19:5e:4d:46:7f:e5:8d:50:6f:5f:00:29:c0:1b:65:5a:f2:
b2:16:a8:71:f5:92:17:e5:58:dd:ec:72:34:15:0e:90:e3:25:
0a:5c:27:7c:db:32:43:8b:c1:71:72:64:c2:83:43:80:a8:ba:
47:98:27:9e:b9:d1:f1:07:06:1d:d3:f4:b4:63:e5:0f:86:85:
03:f1:d4:7d:3f:c5:ae:40:e4:c4:b9:de:8d:d2:45:8e:7c:cf:
34:3a:7d:77:8b:a9:80:62:67:70:58:cb:c3:00:1b:46:6d:8a:
8f:89:7f:e8:e2:24:71:e5:c2:b1:3d:68:06:25:98:39:55:75:
77:32:21:0d:31:7c:c0:e0:ac:2c:4f:e5:3e:ae:fc:70:90:00:
95:37:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:18 2025 by rpki-client