Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: EanhYDdWRc1IzPSuWTOY7sLlKZxG23mZs44Crug5R8w=
Subject key identifier: E0:53:FF:19:10:5D:28:E3:84:75:35:13:E9:B5:49:8E:69:4D:69:98
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 0194BC3C4E6B3A888B2AC5B5E9D156D55343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0856
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: kTUMoBjc7T9e6ypgIhatcBdiZDtLFe8LhjK+blxLpaA=)
2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:6b:3a:88:8b:2a:c5:b5:e9:d1:56:d5:53:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=e053ff19105d28e384753513e9b5498e694d6998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:f5:25:e3:ec:4f:5b:36:4d:4c:d1:57:4e:
36:72:35:8d:0c:95:82:64:71:af:d9:85:de:7d:12:
7c:62:47:c3:ae:f3:44:16:d0:3d:99:a8:c5:80:65:
80:c1:62:47:55:c9:fd:81:b2:06:d0:6a:af:8b:e0:
ac:d5:6c:54:8d:e7:bf:60:df:56:a2:4c:20:ab:6d:
01:a8:52:76:b7:15:a6:f8:f7:66:cd:eb:65:48:61:
5a:eb:1a:69:1a:e1:cd:30:d8:68:d2:35:04:2c:ed:
e9:08:f8:0c:d4:0f:46:b7:d6:13:55:a5:71:39:99:
fc:8a:4e:57:16:38:12:85:e4:1b:95:c0:2f:a0:c2:
a8:17:d3:d2:b8:6e:80:47:81:20:23:ac:30:b0:70:
8e:a6:e9:c8:f9:7c:32:02:f2:21:f1:ab:86:76:31:
05:1c:d6:87:32:9b:ff:84:ab:4d:ce:b6:75:0e:64:
90:61:1f:5f:2d:1f:8b:ba:38:da:2b:4d:6d:cd:16:
b8:74:f2:26:ac:1c:ca:00:5f:5e:81:f0:9e:46:cc:
65:4f:ee:a9:e5:30:2f:5e:74:71:4b:89:f6:e7:3c:
e7:09:8a:5f:49:02:1f:46:aa:58:1a:0b:70:9c:a0:
6d:2c:77:ee:64:ac:09:0c:30:d4:0e:7d:c5:14:f4:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:53:FF:19:10:5D:28:E3:84:75:35:13:E9:B5:49:8E:69:4D:69:98
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:08:ab:d9:8d:6f:ed:79:7a:29:98:4e:a5:5d:61:ee:ea:9f:
b1:64:5f:22:2b:b0:17:67:3a:bb:c1:07:6b:2b:f8:d2:88:3d:
43:f0:db:c3:a5:13:8b:2b:e7:ce:97:80:f8:7f:0c:36:f4:6e:
9c:8a:2e:83:be:43:71:24:40:6f:6f:bb:41:99:00:44:63:f2:
57:9d:7f:0e:d5:e7:6f:2b:75:ee:ab:d3:e4:ea:b4:74:c3:8a:
56:0c:93:b8:13:71:cf:76:c3:65:0e:b4:7b:bb:e0:5d:63:b7:
5d:f7:79:5e:91:f5:f0:99:2d:4f:75:6d:dd:7d:15:9d:a4:ac:
fe:79:46:92:df:8f:a1:ea:b7:9e:59:f6:d2:d2:29:23:b2:3a:
2a:d7:78:62:a8:a2:2d:dc:17:b8:98:36:73:9b:86:20:aa:3d:
1e:27:47:9a:96:2e:8b:96:4b:30:00:16:09:df:5e:e2:99:9d:
f6:66:48:2b:17:b2:aa:e8:66:ab:7f:a4:26:54:2d:26:b1:18:
b8:70:cb:4a:41:7c:be:86:b6:d6:8d:e4:aa:44:da:1d:ad:b9:
c4:a2:7a:2d:4e:50:0a:bc:aa:36:53:31:24:0d:41:04:4d:bb:
9c:11:93:6a:cc:9a:40:6e:f0:4d:b8:2f:25:e2:73:35:fb:1e:
97:2c:57:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:46 2025 by rpki-client