Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: x4NKwokWX0fyEvVjye7W4rDGThyYQjMsiUe7GbhuNTs=
Subject key identifier: B5:11:4C:0E:7B:E6:FE:FA:4C:28:47:EA:3D:F2:5E:53:7D:CE:E1:DD
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 0194BD17AE76A8C40848DB73B8E51718C6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: /ALiAkb/Btwn4JHpcTXMRiV/XaaA9oZJxU2CmrO7CdI=)
2: K7SH4zYCXr-cp1q6N2Mp-Gdj1PU.roa (hash: fOTEXpl4gYkXzMjvkhlooQdp3U8U0Z9lMps20TcryK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ae:76:a8:c4:08:48:db:73:b8:e5:17:18:c6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=b5114c0e7be6fefa4c2847ea3df25e537dcee1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:67:f1:54:25:ed:32:3d:65:ea:72:da:09:
9f:d6:45:98:78:fc:44:5c:4a:bb:c7:c5:74:d1:22:
7a:11:c1:33:c5:31:0c:ef:39:27:62:5e:ba:32:ae:
b9:d8:a7:b0:17:02:08:02:01:5b:39:2c:f4:91:89:
59:8d:f1:fe:98:ad:8c:5c:b9:3c:0a:4d:5d:f7:d7:
f8:91:a9:c7:0f:16:93:6d:a7:f5:98:91:08:fb:0b:
cc:9e:89:a9:67:fb:90:c0:64:4a:4c:ee:6d:be:48:
06:38:15:38:41:82:fd:2c:73:03:f1:22:db:86:7e:
a1:01:a9:5b:ec:99:b5:d7:e4:65:68:7b:b6:3f:b8:
83:b0:6b:89:75:c4:f7:7c:e2:d4:c1:64:05:cb:61:
5b:f9:72:74:09:b0:7b:a5:ad:a2:50:3c:6e:0a:d4:
dd:bd:0a:21:5e:d3:2e:ee:f4:a6:72:c9:01:59:79:
23:7f:30:07:36:22:9e:6b:ed:3f:71:e7:fd:40:72:
fb:85:70:87:bc:8c:1c:45:eb:d3:5d:cd:d5:6f:b9:
79:5b:e8:0f:c9:13:3c:9b:6b:b8:15:ae:cf:2c:3d:
90:b4:51:32:95:2f:c6:ea:1b:34:e1:cb:6c:a7:ae:
da:33:da:38:6e:a7:16:8c:ae:7e:9c:43:e0:89:06:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:4C:0E:7B:E6:FE:FA:4C:28:47:EA:3D:F2:5E:53:7D:CE:E1:DD
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f4:75:ce:23:61:bf:cd:d0:95:31:de:78:d3:40:f7:66:c5:
9f:5e:90:e5:ed:42:17:77:90:45:37:20:2e:8c:32:f7:a9:d8:
d5:05:ae:1d:2d:b8:41:a1:dd:2c:65:76:46:d9:88:15:af:50:
07:b3:51:37:50:18:2e:ba:10:a0:d9:83:ef:38:56:a3:a3:a5:
b8:96:96:ca:b5:eb:b5:97:d7:f6:c0:a2:c5:2f:8f:38:4e:7a:
b1:79:29:4f:ac:eb:87:fb:74:5f:1a:22:46:86:a5:da:01:67:
0b:98:01:0a:86:db:3c:ee:7d:82:35:4c:e7:cb:b5:4c:78:5f:
5f:b5:05:3f:70:b6:48:b1:d0:41:d5:03:83:e8:4d:49:c1:72:
82:d5:6b:f6:69:d0:d2:a5:b1:54:83:44:a9:8c:40:77:54:27:
b0:b7:ac:23:89:9a:eb:c9:29:02:71:ea:fb:06:4e:62:1a:b6:
0d:f9:91:7f:d2:0a:de:48:2e:2e:c4:ec:14:c2:ac:41:93:99:
2d:e2:6a:d5:ed:57:e1:01:2c:cb:6f:22:2a:2d:8a:68:b4:9b:
01:f6:de:fb:80:40:51:7f:1b:95:2e:30:1d:a6:b2:bf:a2:31:
06:68:59:bb:be:a7:0d:f8:f0:39:af:6a:ca:83:ac:dd:62:fa:
9d:33:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:59 2025 by rpki-client