Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: y4jYJVarDhT9ppyEcooWxXm1dhUhOiwcGxXdLQIygUs=
Subject key identifier: 47:EB:5F:09:8E:CA:8A:D3:1E:22:75:8C:12:09:C4:72:70:E7:5F:4E
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 0194BC7294A7CA4BB86F2EF0808E82A9DA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: l/Md9ESWLG74l4IYQ6HDtZullR5POmsQSAMEoOjF6A0=)
2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=)
3: Xse_q1SIOApT0uJ4kO_NUiDFU1A.roa (hash: OR/vMeRN3fqz9meXU3XlPM8D3UPTvqtP1NKBnNpirBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:94:a7:ca:4b:b8:6f:2e:f0:80:8e:82:a9:da:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=47eb5f098eca8ad31e22758c1209c47270e75f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:0d:7f:80:cc:99:06:f0:43:b7:a9:f8:81:
e7:7e:1a:de:30:ec:9f:26:c7:44:d1:4d:e4:8b:be:
05:43:52:a9:6e:96:ef:f0:a8:c4:56:c6:3f:e5:e9:
cb:9d:2e:42:40:fe:e5:2b:10:ea:80:5a:85:ca:36:
93:72:f2:f3:c0:be:7d:83:1f:4e:6c:48:9c:2a:84:
5f:19:6d:05:00:01:f9:c6:04:5f:84:b0:7e:68:84:
ea:2d:46:ad:1e:54:af:e8:a5:85:cb:b2:9e:5a:b2:
aa:95:92:39:05:4e:40:04:b2:1e:c4:51:e0:d0:c0:
4a:52:ac:1d:96:6f:0f:e3:8d:62:10:65:66:01:3a:
69:60:00:37:f9:7e:b0:51:0e:76:5d:4c:e5:81:b8:
0b:c4:ef:72:e3:99:3d:bb:6a:0e:d4:a3:49:ef:8a:
1f:af:7b:57:73:56:9c:44:2a:57:df:03:eb:cd:3b:
17:d9:8b:f9:a7:72:d5:e6:f6:06:39:79:e2:8a:43:
32:1f:7b:31:c1:7e:d3:fa:f2:59:d0:8c:6e:4d:87:
1e:f3:d3:4f:8e:93:b6:41:fa:eb:ea:95:3b:ae:66:
33:ff:eb:93:52:97:05:66:c8:b5:26:13:67:45:da:
c7:6c:e3:0f:75:30:bc:c2:b2:83:61:06:e0:bc:85:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:5F:09:8E:CA:8A:D3:1E:22:75:8C:12:09:C4:72:70:E7:5F:4E
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:89:ee:15:60:3b:60:b3:56:c1:6c:78:7e:26:72:32:1a:
f8:52:51:ad:2e:28:f4:b7:0c:c2:96:e1:7d:d1:95:a2:3e:76:
d4:c4:10:43:cc:c6:97:68:d5:81:77:78:ab:78:c0:f6:38:9a:
15:d0:68:6f:c0:6f:6b:31:38:fb:01:45:df:a1:f8:30:c8:e4:
10:d7:bd:4f:a9:eb:25:59:d1:f0:50:53:df:6b:df:be:e1:6a:
73:ad:1f:b9:dc:b7:ff:62:da:d1:eb:20:3f:34:c8:d0:ef:c5:
08:e6:a6:ba:57:8e:e4:45:16:5b:4f:ba:8c:ab:a0:88:62:39:
84:c9:83:8e:3a:16:81:cd:19:d0:af:81:dd:b2:5c:80:78:59:
96:43:d7:db:06:25:4f:33:9e:6f:2e:6f:fc:06:2e:d2:ed:49:
46:18:96:6a:f2:28:12:30:0e:88:34:5d:ff:ba:ce:bf:93:b1:
75:1b:bf:77:0c:83:7a:1a:d7:0a:cc:a9:a7:3e:98:4a:b6:db:
3b:94:13:b3:c0:da:18:b6:e7:9f:9f:c9:a9:e1:62:57:83:0e:
2a:55:dc:c6:8d:96:c3:19:d3:ea:86:7c:6c:43:80:c7:d9:14:
fc:e0:e7:3a:1b:76:c1:8f:d1:4d:70:ea:35:7c:84:30:88:5c:
11:f7:90:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:57 2025 by rpki-client