Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: Dbx6gS96n5A1Z98ObmbfsfjzZ4e2x1pOd0jYgIdgQI4=
Subject key identifier: FE:47:E0:7F:7D:03:F7:4B:16:75:77:07:B7:61:1F:2B:46:74:77:C6
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 0194BD17C8E68683DBE2B20119EDB7A459EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0839
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: VM+GxZQNl7k93BSMXmy/Q5DewpiL3aLtrsUwRg6int4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c8:e6:86:83:db:e2:b2:01:19:ed:b7:a4:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=fe47e07f7d03f74b16757707b7611f2b467477c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:51:ac:95:99:b7:be:07:d3:d6:52:00:30:
f6:fe:61:04:07:af:3f:9b:91:d2:2e:dd:3c:03:06:
db:64:2e:0e:c5:46:53:2c:2e:ed:c8:95:c3:dc:6b:
15:1d:0c:56:fe:65:f7:08:40:83:4b:2a:12:c0:45:
f7:6b:62:88:5d:05:c6:d3:1a:a1:05:be:96:7c:7b:
34:b3:5a:ab:ae:62:6e:79:d8:10:18:25:90:d2:48:
96:c0:bc:1c:58:72:d2:f0:bb:3b:15:2e:4b:f7:bb:
a5:06:9a:5d:78:60:df:06:ee:c4:62:ed:19:25:b4:
f6:1b:bb:e4:63:6f:b4:82:0e:d4:dd:1e:26:95:1d:
8a:20:83:e7:7f:58:3e:36:5b:04:53:76:40:48:53:
b1:9b:18:66:b0:12:04:76:56:e1:a3:63:32:46:e7:
c4:38:e0:0d:03:58:ca:51:c1:ec:16:35:18:e9:7b:
00:19:0b:53:47:0e:aa:41:01:1e:f2:d4:f7:56:01:
a3:38:6f:cc:45:71:b8:3c:bf:6c:84:f1:ec:6c:6a:
1b:28:c2:fa:6b:2a:7c:60:53:2e:af:ea:03:58:9a:
f8:61:12:e3:ed:eb:f1:76:13:37:88:d0:b9:ae:af:
c4:39:c8:6d:19:c9:79:5d:24:ca:7f:6d:39:e8:52:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:E0:7F:7D:03:F7:4B:16:75:77:07:B7:61:1F:2B:46:74:77:C6
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c1:a6:3d:cd:4d:32:e6:9b:40:ce:a1:fa:89:98:c5:aa:5d:
94:cb:7c:87:b3:6a:54:61:5f:e1:7f:54:66:47:bf:63:3c:6b:
59:2e:a7:f9:36:25:55:20:0e:03:24:cf:a6:03:da:d0:4f:36:
f0:f1:fb:52:18:23:0d:5a:ba:d5:e4:ff:e8:5d:7c:f2:1c:b8:
7b:85:f4:4e:7b:83:70:66:c2:f3:b3:25:96:21:5b:38:19:cc:
f2:e2:5f:f3:b2:a8:21:35:0d:49:57:10:3c:81:65:07:22:85:
c3:68:ca:7f:a1:1d:71:3f:0d:5c:a0:5c:86:64:a9:b7:42:f5:
15:e8:37:ff:24:c7:91:ea:6a:26:d8:aa:21:65:2e:1a:50:0f:
c8:0a:3f:a1:6f:b2:27:25:ce:4b:00:45:3c:61:a0:43:5f:56:
d7:b4:57:96:f6:2f:4d:74:1f:eb:98:26:72:e9:b9:59:d3:ea:
71:d5:97:fb:1e:ed:cd:42:55:33:c6:0b:08:42:e9:65:11:e4:
d9:2b:61:0f:aa:3b:6c:f5:d3:0d:6e:b3:45:f1:81:e4:a1:b0:
12:fb:6f:1d:05:7e:7c:36:e8:f7:84:a7:e0:0b:ad:68:4e:85:
d1:f0:24:23:0e:84:f6:c7:ba:42:12:ab:eb:82:9b:4d:80:8f:
09:fc:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:38 2025 by rpki-client