Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: 5O0sC9jRNHFGMQHWAqnz6yCfD46labETN+rsxlJ/V8g=
Subject key identifier: 7C:6A:71:35:71:76:34:5C:51:42:2F:34:A5:D8:E3:7C:0F:BD:DF:70
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 01962F74D5B013ECA26AD52361CC46291CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 14:01:48 +0000
Manifest this update: Sun 13 Apr 2025 14:01:48 +0000
Manifest next update: Mon 14 Apr 2025 14:01:48 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: z8MWp48EiPryFbQ3E7LuQOrYl3o12BIiDrjZ8/f+bTI=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:d5:b0:13:ec:a2:6a:d5:23:61:cc:46:29:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Apr 13 14:01:48 2025 GMT
Not After : Apr 14 14:01:48 2025 GMT
Subject: CN=7c6a71357176345c51422f34a5d8e37c0fbddf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:24:85:6f:6b:e5:b3:34:2f:42:49:42:8b:
12:73:98:71:bd:89:c0:82:ef:37:d5:da:ef:94:a5:
40:b6:1f:a6:9e:ec:4a:f3:3f:48:b9:78:2c:e7:13:
b1:17:cd:e5:15:e2:58:74:02:bd:a2:04:65:4c:34:
1f:07:44:78:a7:8b:e7:e1:ba:f4:ee:93:5c:7f:2c:
e1:29:1d:e2:f1:1d:e8:80:e4:bd:c1:73:86:bc:3e:
ce:32:27:ac:01:59:86:7a:11:75:88:e8:57:fc:9b:
68:d4:1b:42:26:64:78:28:e0:1b:98:66:34:d9:fb:
3d:34:0b:80:02:27:a7:63:f9:6d:e5:68:d3:a3:c5:
74:25:bc:8d:8b:d4:a9:92:81:b6:d9:76:18:4e:fa:
f2:75:3d:b2:c9:53:6a:5e:27:de:14:a8:e1:af:ba:
27:47:8a:ea:36:eb:d1:11:8c:8b:61:4b:54:08:a4:
b3:bb:49:bf:90:03:49:14:29:e4:fe:b2:0d:ac:04:
4c:f3:b8:78:29:8c:cc:d3:ec:e7:62:7b:3a:65:95:
82:42:f9:71:66:fd:e5:0c:bb:b6:f4:87:e3:3f:ab:
c5:34:09:10:ce:ec:04:cb:59:ab:52:e0:a8:fc:23:
8b:90:f4:9d:32:b6:b3:73:b5:90:34:ec:30:03:7e:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6A:71:35:71:76:34:5C:51:42:2F:34:A5:D8:E3:7C:0F:BD:DF:70
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dd:15:48:60:80:ab:6e:26:39:1a:e0:83:bb:76:51:bc:a4:
69:f8:dd:5d:81:c8:15:15:78:58:16:ad:a6:7b:3e:a7:c9:eb:
e3:17:1f:09:63:28:26:c8:b5:54:d3:ce:98:9f:d8:85:3e:12:
4c:82:68:a3:64:9a:20:ad:4a:d3:0a:10:c0:44:79:bb:b0:7f:
32:2f:d3:3a:c1:99:75:88:a4:c4:22:e1:19:65:cf:a6:fe:4a:
f2:86:e4:8b:bc:f4:03:86:5a:c1:c6:9b:65:d8:e7:af:a3:0c:
d1:83:33:42:68:a7:a2:03:19:e0:1b:f9:c7:c4:4b:7c:b4:71:
e4:5b:37:bb:10:5f:9f:8a:8f:b6:37:99:93:18:0a:35:63:e9:
d7:68:24:9a:89:7e:42:c3:f9:a8:19:b3:7a:ee:3a:11:8d:1c:
2e:14:eb:d7:a2:55:3e:87:1b:e4:18:1a:d4:6f:a6:7c:d8:dc:
80:6d:12:eb:71:81:c0:12:a5:0e:2a:ab:4b:7e:8a:33:53:53:
cd:ea:a5:45:36:04:70:91:fc:7a:15:aa:7e:14:92:17:aa:2f:
94:e6:08:8f:27:0c:f1:46:fd:6f:32:b2:11:8d:68:7f:28:9d:
0d:6c:cf:57:b1:6c:1a:69:57:44:79:72:ce:8d:96:c1:dc:e7:
bf:7a:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net