Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
File: EzzXwanHnILu5chqQjwXwdY8NBM.mft (raw, json)
Hash identifier: cI5xRc1LLp8tNGScKWHH/tjjP3VfbM9hNs3fyvk3AQY=
Subject key identifier: FE:E7:6C:A5:B7:65:43:CB:9A:11:00:CB:81:E7:C0:62:BD:E0:5C:97
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Certificate issuer: /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial: 0195E12247FE3D31C3FF07613DFF5D3E28FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 09:01:15 +0000
Manifest this update: Sat 29 Mar 2025 09:01:15 +0000
Manifest next update: Sun 30 Mar 2025 09:01:15 +0000
Files and hashes: 1: EzzXwanHnILu5chqQjwXwdY8NBM.crl (hash: kxpN1fsD16G+Nu5bAO7WNmEwbp3kwKv3e6VzEauoPpw=)
2: O4PSH-N8yj0S93DKDu2LBJ5eAtI.roa (hash: ASz/XoDRdaxMh3dSkJ1mqbsS8mqFUZOBdc4xyp39gUE=)
3: Y8EodOzkg41GjWx9slGHWzyOuz0.roa (hash: 9vunkyhjN/3Ybhldfd7RCxZi2c6G40osarupV7bQAZo=)
4: ZBh1egGDcx_kqFuB5rwFYJ-DCqk.roa (hash: qPf12jyNTOR8FvNK30Dxf4VOzSzaf5GjSxZL2b1IF0k=)
5: b70gq43k-MaL0OefVDOPR8ZVhZI.roa (hash: EQ+oXDITAZSbFhbC1cKPjbmkr2vmgnQcU0NvbLzpBf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:47:fe:3d:31:c3:ff:07:61:3d:ff:5d:3e:28:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Validity
Not Before: Mar 29 09:01:15 2025 GMT
Not After : Mar 30 09:01:15 2025 GMT
Subject: CN=fee76ca5b76543cb9a1100cb81e7c062bde05c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:b8:57:c6:66:e2:2c:ea:2c:ed:5e:0b:52:
8c:e4:b9:9c:91:39:4e:e3:a3:cd:dd:fd:e6:0d:87:
eb:88:d3:eb:67:47:82:33:c0:78:de:42:f3:55:98:
8d:f5:69:35:f5:cd:7c:6d:73:25:0f:cf:52:77:42:
10:67:b6:fd:2d:fd:26:05:e8:a7:8d:8a:df:d2:d4:
03:fa:85:1c:0a:82:76:00:76:b8:43:0f:1d:9c:7f:
74:88:41:82:75:f8:d4:f6:41:f3:ae:88:11:2a:b6:
2d:f9:43:eb:28:cd:87:9d:8a:ba:23:ba:51:bb:5d:
bb:f6:47:86:ec:b3:e8:b0:f3:6b:a0:0d:bb:2c:ad:
87:cf:b6:31:69:2e:7b:e8:04:0a:06:4b:42:fc:60:
01:f1:15:0d:27:65:20:ca:3e:ab:95:31:33:6f:ca:
20:74:d4:27:83:4f:cc:1c:98:32:e0:ed:8b:90:90:
16:8b:6f:29:3c:9a:69:72:a6:46:9b:fa:35:b8:80:
5b:b4:b0:f6:62:56:5f:78:b9:a8:f9:69:2c:75:31:
76:8f:e2:28:ef:ce:fd:7e:d8:78:7c:18:e9:88:b8:
e1:1e:09:14:25:ce:20:52:d4:15:16:d9:f0:2f:bd:
22:36:5b:3a:62:1f:14:b2:7c:9d:66:c4:da:9d:da:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E7:6C:A5:B7:65:43:CB:9A:11:00:CB:81:E7:C0:62:BD:E0:5C:97
X509v3 Authority Key Identifier:
keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ce:14:ae:50:7b:c9:d1:9c:8b:52:37:7b:01:9a:0f:ed:0d:
ff:37:65:5d:6a:5b:ce:d3:dc:b0:3d:a4:7d:3b:20:77:40:74:
c6:2b:ac:9d:0f:04:71:d1:02:9f:cf:17:9c:d9:6b:e6:fe:5a:
03:fc:9d:bd:0f:43:c9:3c:30:8f:ec:e3:47:c5:74:b4:09:db:
e5:0d:93:43:05:f2:8f:3a:3d:d6:41:53:f5:32:4c:1a:36:5e:
df:c5:76:b7:58:e4:b1:9e:98:94:85:6a:70:f0:21:b1:f7:08:
4e:ff:23:fd:87:8f:d2:ed:80:31:f7:dc:e3:b4:e7:aa:71:42:
90:6e:e8:04:d7:fe:78:92:6b:08:9f:b3:86:67:e8:a9:32:52:
25:4b:9c:c2:46:b8:94:7e:91:d3:da:d1:cf:70:fa:fb:d7:ed:
19:fb:5d:3a:64:28:48:8e:47:b9:18:f6:7e:20:41:19:46:c4:
56:1e:36:35:7f:ec:27:58:65:52:95:c7:f4:48:33:91:e9:b4:
e2:81:f0:7e:e1:87:70:37:38:f6:b2:64:b5:df:ca:a6:de:25:
bb:d3:26:f0:65:d5:9a:f6:3e:15:70:6c:e9:34:f1:dd:1d:52:
e3:e9:af:6b:df:59:fb:f6:40:9d:14:94:19:6f:e1:9e:c5:3e:
9a:bb:11:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:38:58 2025 by rpki-client