Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: GJG0dpfldfiKront/LwU5V0D4z8L+//nasJdpmWBqdk=
Subject key identifier: 3C:26:7E:8A:CC:9C:47:81:D9:C2:86:44:8C:19:2A:54:C2:60:98:97
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 0194BD17ADA0AC338D50CA1A5F5608E8A20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 03EE
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: exH8SNLhbnNUm7DdLE3J2TlRMZOZWDQ2HJ3iTJ0lfHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:a0:ac:33:8d:50:ca:1a:5f:56:08:e8:a2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=3c267e8acc9c4781d9c286448c192a54c2609897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:d8:11:e4:ee:60:81:9f:3e:60:fd:3f:a2:
cf:ac:26:7a:52:ad:3a:8f:ba:bb:ca:b2:cb:73:76:
05:b7:e5:90:6d:dc:ed:3a:6f:c5:2d:4d:fb:d7:f7:
96:0b:9b:80:a8:d9:45:94:33:8f:f4:9e:07:83:0f:
50:3b:ed:a9:30:f4:b5:c9:69:9c:72:9a:91:df:07:
b3:bb:af:9c:34:4d:88:e2:28:7e:79:86:d8:af:bc:
d5:ab:a6:00:d2:3f:5e:b8:07:3f:87:cc:24:6a:70:
d8:6b:92:17:3a:f3:af:44:18:d8:38:0e:8b:e0:ce:
1e:0a:24:69:52:90:73:85:c5:1e:0f:4c:84:75:79:
2c:68:f9:b6:d3:98:af:83:39:18:4d:32:aa:3b:64:
7f:5b:58:1d:51:60:64:ba:40:51:4d:74:69:08:fd:
61:16:0b:65:2e:61:64:d6:1a:a8:8d:7c:ed:8f:64:
8f:23:16:70:b2:2b:62:20:63:72:d2:58:96:65:39:
b2:81:c9:79:48:fa:0e:de:e8:9f:f4:65:42:28:c3:
09:d3:ad:47:21:94:eb:a5:94:5f:fd:dc:d8:6a:23:
69:25:01:62:5c:e0:d7:6e:56:76:28:3f:3c:1a:a4:
1e:c0:a6:68:aa:82:79:a9:9c:02:e2:c0:6f:53:e9:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:7E:8A:CC:9C:47:81:D9:C2:86:44:8C:19:2A:54:C2:60:98:97
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:f3:34:fc:9d:38:b5:d9:be:9b:51:8c:c1:b5:a0:5e:5a:
85:6a:86:f3:79:ef:4d:f9:7f:45:fd:d4:00:86:b0:ac:83:b5:
33:b4:97:6a:f4:c3:49:2d:be:0b:2c:8b:66:cb:4d:4a:15:13:
7f:04:6d:9b:e4:df:c0:b2:59:ac:97:90:4b:51:08:f7:2e:ca:
fe:bc:87:6f:e3:32:e1:77:f3:e2:b3:7f:96:35:00:b1:9a:6c:
58:db:4a:09:f0:35:ec:84:5f:ef:05:38:9c:e1:95:45:cb:3c:
b5:0a:18:76:15:1d:fd:00:50:cc:08:bb:02:f3:ec:af:92:f1:
e2:53:ef:3e:2e:97:0d:27:3f:00:e4:30:18:d8:ea:4d:05:0a:
d4:ec:85:a3:42:c0:1d:27:73:de:6f:8b:dd:59:39:48:17:d7:
93:5c:04:56:96:9d:74:98:49:02:2b:eb:c1:75:a1:44:61:aa:
6a:10:62:40:cc:84:b5:4c:97:9a:d6:2e:d1:da:30:d8:a8:36:
00:76:e0:f3:94:f5:61:34:68:f6:0d:4e:ef:31:96:56:ba:da:
93:d1:a9:45:b5:b3:ea:0c:8b:56:b6:3f:92:7a:46:e7:15:ed:
88:fe:b4:ff:35:7e:d1:9c:ce:d0:03:a2:56:60:b7:cb:6b:30:
fd:fd:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:14 2025 by rpki-client