Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: m2FNamEqICfNqZoX3Jtg2FiBAMaFP/DpDZAQks3Pr/s=
Subject key identifier: BA:A9:4C:68:8F:77:8C:E5:D1:3E:24:83:9E:9E:E2:EF:4B:97:1A:E1
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 0195DFD8F1ECF2EF907AD74DB2149DA6EBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 03:01:31 +0000
Manifest this update: Sat 29 Mar 2025 03:01:31 +0000
Manifest next update: Sun 30 Mar 2025 03:01:31 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: 09zsFkxT+R16RNk2/f2sAbaphxIvYuclpuwu0sYGR8I=)
2: W4XahjIUcn2mEvtXXAsHwpbRivY.roa (hash: 2OOpdjz9UpDKv+dUsZMaEoPO0IiMCjqOpoDoPFdecug=)
3: z46k-i-bjDUO4Ol48wcdFv3fJS8.roa (hash: sn1w3xRnzI7Jkm3KXN6s7I0s9xcKRoJb9fQHsE63d9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:f1:ec:f2:ef:90:7a:d7:4d:b2:14:9d:a6:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Mar 29 03:01:31 2025 GMT
Not After : Mar 30 03:01:31 2025 GMT
Subject: CN=baa94c688f778ce5d13e24839e9ee2ef4b971ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:72:cc:7d:ea:85:28:fb:63:56:f4:d2:79:
45:68:69:de:81:26:97:0b:20:bb:1b:91:30:17:39:
e8:78:4c:89:a7:fb:be:17:20:da:f6:b0:10:68:36:
cf:35:62:dc:23:39:bc:ff:04:40:fc:ff:9e:6c:fd:
b2:2d:a8:fe:d6:ff:3a:a4:08:7f:de:17:94:f8:ac:
2f:74:38:15:27:9b:1c:cd:f5:72:9c:00:4c:6c:1f:
c2:b7:b5:26:d3:a6:98:cd:14:f3:6f:e8:9d:9f:01:
6f:26:68:9f:8b:a1:94:3f:71:d2:4a:a4:7b:7b:47:
6e:52:23:55:53:67:c9:ae:93:66:43:09:f7:1d:8a:
a6:cf:49:2e:8a:16:94:56:b0:5f:ff:92:e5:5b:6e:
62:39:11:8a:90:e9:33:03:e1:f7:58:67:34:8e:b2:
05:99:e9:d7:eb:83:35:80:b0:9f:97:3a:a4:a5:36:
95:df:84:44:77:53:07:4c:13:7e:98:fa:f4:33:c0:
72:93:dc:d9:ff:47:24:3f:c4:a9:16:97:70:3d:bb:
73:db:50:c6:ff:8e:4c:d2:0b:0a:e4:e6:40:ed:e6:
c9:0c:d1:c2:26:10:83:a0:08:51:68:48:25:43:c1:
72:bf:66:0f:14:3a:4d:c5:91:27:69:f9:22:77:91:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A9:4C:68:8F:77:8C:E5:D1:3E:24:83:9E:9E:E2:EF:4B:97:1A:E1
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b2:69:7e:8d:28:b1:30:de:23:e3:54:fa:b5:ab:12:19:f8:
68:d9:3d:7f:ec:0a:5f:ac:56:05:a8:d8:ef:40:44:46:46:33:
95:09:96:9b:e2:2c:ca:ad:de:78:5e:f5:91:f8:8b:ed:91:a5:
93:69:84:ea:8f:24:65:40:8b:08:9c:47:b1:a8:89:b2:a8:88:
19:7d:3c:1f:d3:67:7c:2a:f7:a1:7e:4c:97:b6:57:6e:bb:22:
e7:37:65:2d:72:78:03:86:86:2d:6e:b5:ac:e6:3d:e8:5d:13:
1b:9f:a4:ba:18:3a:5b:a4:60:82:3c:f7:58:6a:6f:ae:48:8f:
c3:e7:45:8b:ce:26:17:a1:f4:55:36:df:91:b7:54:c5:0b:77:
b5:c1:95:4b:73:18:2a:c0:eb:2b:1c:fd:15:ab:fc:a8:95:3a:
ff:88:97:3d:dc:18:f0:d6:ef:84:90:bb:ca:28:ff:c2:87:ee:
e5:fa:60:33:a9:9a:c4:0a:f2:04:ff:00:24:7c:e9:fa:e9:3c:
9e:d8:af:bf:4f:bf:19:b5:8d:e2:ba:37:01:7f:ae:15:a8:8d:
42:88:cf:6e:5b:d4:d4:9e:d7:1a:a1:fc:95:38:8c:ad:32:ae:
22:d5:5a:7d:ad:a9:c5:a6:3c:6a:5e:29:18:22:44:2d:55:5b:
43:39:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:46:11 2025 by rpki-client