Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: jWXt+C+3Nl3ijINyM1a43FIQ8QDF7kj17cmATXQAkqM=
Subject key identifier: 43:69:E7:09:55:E5:45:2B:E4:A5:90:52:F2:3F:28:3F:DF:A4:1E:92
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 0194BD85516FC38F5FBC407C8D8650BE4C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0C9B
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: MdQW7ONfgbf5coi2y4EFTmevItlhiUac7wb9Q/oNWeY=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:51:6f:c3:8f:5f:bc:40:7c:8d:86:50:be:4c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=4369e70955e5452be4a59052f23f283fdfa41e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:4a:45:8c:e4:b5:c6:0a:49:40:98:d8:4c:
77:11:5f:57:a1:92:2a:3c:b3:99:63:88:ff:85:26:
31:b5:ad:00:18:08:2e:64:13:c7:9a:24:cb:30:7d:
14:f1:93:ec:e8:df:39:6d:06:f0:93:cb:d3:20:a7:
84:e9:dd:4d:8a:f7:ec:fb:ef:71:b4:d5:da:58:d6:
f4:cb:67:66:05:4a:66:43:69:96:03:fd:ef:e0:d3:
de:b2:22:98:33:5e:af:40:4c:ff:c8:61:5c:28:d2:
b2:95:f5:d5:2e:16:5e:92:97:cf:ad:a0:3a:ba:e0:
aa:79:04:e6:19:8c:79:8c:76:99:cb:88:70:de:82:
c3:5a:56:e5:e3:50:de:ed:e7:ec:fd:d0:6b:00:52:
f5:3b:7e:a1:0e:22:05:6c:b3:dd:34:3a:14:39:f1:
ab:f2:95:2c:12:9a:9f:90:94:16:f5:ab:8f:11:c7:
e9:f2:f6:1f:60:80:69:f3:38:3a:7e:37:65:27:54:
1d:1e:ce:df:06:99:52:b0:4d:ec:b1:c0:f9:17:57:
56:81:50:d9:0c:a0:89:9a:38:71:79:3e:85:bc:7c:
3b:22:e4:7f:26:34:3c:9b:db:fa:16:05:ca:63:13:
c1:26:5b:55:9f:69:be:d0:47:3e:43:9e:7d:37:db:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:E7:09:55:E5:45:2B:E4:A5:90:52:F2:3F:28:3F:DF:A4:1E:92
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0d:16:58:73:57:26:02:5f:97:05:ce:3f:be:61:e8:ef:4b:
8e:ae:2e:b1:49:d1:a0:52:e0:3f:1e:81:71:90:18:60:de:50:
5a:4c:1a:22:d9:50:f2:4a:d8:32:0b:9b:7e:ea:94:19:24:7e:
58:c3:ae:b7:da:67:a8:90:56:f4:3c:03:e9:6d:fe:8a:23:c3:
a6:86:b7:7f:b0:91:b8:24:18:44:f4:a4:53:80:af:be:33:5d:
f5:50:8d:51:78:64:92:84:e6:46:4b:ce:60:93:8d:f8:ed:b8:
7c:75:45:89:2c:cd:09:60:be:d3:33:53:90:27:0c:22:97:3a:
69:8b:ca:37:8f:58:50:1b:25:49:73:cc:a4:b3:32:67:49:39:
29:f1:69:d5:ce:ae:d1:d0:8f:b9:02:97:07:b5:2c:6c:6d:dd:
7f:5e:bc:60:ce:73:50:34:55:d4:90:1e:2e:46:eb:e7:1b:ff:
2b:54:82:ab:35:b1:6d:e3:cc:c0:19:2a:3b:64:6f:72:84:c9:
b7:25:ad:22:98:87:6a:b2:c4:81:53:dc:a3:65:77:5b:f4:26:
25:d5:00:46:81:93:96:ff:76:e4:43:e2:d4:3a:34:5a:c3:f0:
7d:f5:c0:37:11:cb:13:e3:44:65:c5:7c:39:f7:0e:5b:97:1a:
2c:35:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:22 2025 by rpki-client