Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft
File: ePKehzghWcpegTh9fud-US-tFjY.mft (raw, json)
Hash identifier: O+2cIuLvwJ/Nj5SER+kzk9jGY8sjD4OSoc7dty2TOCg=
Subject key identifier: 8C:07:93:AF:12:56:AB:66:82:DA:58:15:0B:CB:DE:75:A2:0B:22:53
Authority key identifier: 78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
Certificate issuer: /CN=78f29e87382159ca5e81387d7ee77e512fad1636
Certificate serial: 01962ECFA1CD770D1E9518FEBBB92FEE9DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft
Manifest number: 053B
Signing time: Sun 13 Apr 2025 11:01:21 +0000
Manifest this update: Sun 13 Apr 2025 11:01:21 +0000
Manifest next update: Mon 14 Apr 2025 11:01:21 +0000
Files and hashes: 1: ePKehzghWcpegTh9fud-US-tFjY.crl (hash: nnsc5EUjnMsZha3BRUo22Vc8LEf8KWiLdtvMZLysTKE=)
2: zTW-DDqj_DKyybC8B3Erc_k4_OE.roa (hash: aF2vKf/Dc/OONsqmm+OYYMGFEckKwY/y3uqC3qA2PH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:a1:cd:77:0d:1e:95:18:fe:bb:b9:2f:ee:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f29e87382159ca5e81387d7ee77e512fad1636
Validity
Not Before: Apr 13 11:01:21 2025 GMT
Not After : Apr 14 11:01:21 2025 GMT
Subject: CN=8c0793af1256ab6682da58150bcbde75a20b2253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:87:58:05:71:34:37:b4:5c:b1:33:d6:a4:
bd:ee:ec:19:1a:9c:89:1f:cb:03:b0:6a:b8:6e:bb:
5f:cb:ea:c0:6a:29:69:0b:48:a0:e8:4d:8c:5a:20:
fd:33:70:21:a6:7d:dd:0a:e3:21:cf:cd:1a:a4:c3:
6b:a6:78:2d:38:2f:78:30:8b:8a:cc:37:68:c2:68:
a2:48:9a:67:23:2c:ab:79:e7:b7:65:d8:2e:0b:b3:
b3:a4:ae:a0:8c:db:4e:ed:62:73:2a:9c:29:51:a8:
c9:f2:ea:f7:8b:86:ef:fd:6d:29:ae:b2:d5:65:27:
24:da:3c:d5:e7:70:97:be:e6:54:07:e2:7d:13:43:
e0:1c:c5:dc:8e:25:96:e0:af:5e:dd:cb:24:80:e6:
19:4c:b1:42:96:86:88:7b:05:a0:ea:ce:01:4c:9f:
00:1c:1b:8f:22:60:fb:38:38:f7:97:e2:aa:c1:49:
8a:3d:16:f1:dd:af:c7:e3:20:a6:05:b0:b5:46:6e:
3c:0b:44:9a:4f:54:c8:ce:f3:ba:c3:3b:44:0f:26:
12:0a:e4:33:22:1b:89:9a:dc:1b:62:16:82:80:0a:
b2:fa:99:45:f7:2c:5e:93:e6:e9:9b:92:ac:b6:0c:
4b:4b:59:ef:8f:c1:62:b3:e9:ad:bb:09:24:ac:f2:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:93:AF:12:56:AB:66:82:DA:58:15:0B:CB:DE:75:A2:0B:22:53
X509v3 Authority Key Identifier:
keyid:78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:70:17:e4:c2:2a:0c:fe:20:70:27:66:f3:f4:b6:1b:d0:
24:ab:86:eb:bb:35:b3:0a:78:05:8d:45:65:7c:1b:f0:55:0f:
43:48:73:70:7c:b7:84:62:78:21:05:5c:6e:87:9e:f9:c1:fd:
c6:8a:db:7b:82:e1:20:4a:4f:7e:bc:00:12:fa:63:31:98:a6:
9c:1c:34:35:f8:07:f6:97:e7:a3:74:70:2c:4d:c1:b9:7a:2c:
04:52:0d:24:94:cf:d1:20:9a:b6:fb:dd:b7:57:23:ad:0c:b8:
ee:d9:83:be:4b:9f:96:b5:06:3c:31:74:9e:ed:cc:75:23:13:
c3:70:f8:01:c9:16:e4:ae:55:d4:24:7e:04:e8:f1:da:91:83:
4e:36:54:e6:1a:1e:51:ad:fe:f8:c5:a0:5a:dc:a1:5d:9a:f8:
82:e0:28:d4:b8:38:32:96:bb:2c:d3:a7:ab:ff:00:98:fd:e6:
f7:32:2e:cc:f1:d6:29:82:20:ba:1d:a2:cb:8d:f5:38:ee:de:
65:0b:1d:21:f0:a8:93:61:e7:bd:19:c9:00:7c:ee:8d:56:b6:
02:d5:f1:1e:e6:73:b0:af:42:6e:80:9e:3c:c1:e6:36:ee:d8:
bd:29:b5:7a:23:ec:6d:c8:9e:89:40:26:e0:43:d6:e0:d7:9c:
40:04:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net