Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: hbbd/q/DBBlkw+szMa18xlJ/cs8GOz0fV87NizHXQzA=
Subject key identifier: 8E:DA:D9:BD:48:4E:C6:22:95:16:1D:07:A7:82:04:A3:A4:0E:46:3A
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 0194BC73057A5E15E105898C71568CFFB301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 02F6
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: h0Xg+xmXwWqB3aeeq8TZPVLkHTiQ3+84RPATVSrUUR8=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:05:7a:5e:15:e1:05:89:8c:71:56:8c:ff:b3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=8edad9bd484ec62295161d07a78204a3a40e463a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:4f:6f:ac:4a:fe:0b:3a:ea:96:cd:5f:c5:
eb:0c:b0:6e:b9:17:d3:02:92:9a:c5:62:17:6f:13:
f2:53:74:ec:fb:d5:3b:29:58:38:60:10:27:20:4f:
78:1a:03:22:8b:13:3b:85:de:46:2d:68:f9:d0:4c:
41:13:5c:36:c3:5a:1e:92:66:d0:7a:8c:61:65:ab:
da:b8:3f:9b:55:a6:c8:4d:86:88:ce:d2:a9:ce:97:
4d:7a:63:31:84:49:a9:e3:0a:33:35:40:93:d4:2d:
e8:fc:71:d9:70:b0:25:cc:31:8b:d1:74:68:e1:13:
2e:94:cd:fc:f7:b5:1d:c1:16:e3:aa:d7:be:93:5b:
97:fe:ac:b4:35:89:4e:d3:87:a5:66:21:ff:64:97:
cc:f9:14:e5:49:d6:bf:68:e1:4a:29:81:0e:bc:99:
b5:b0:37:76:7c:84:98:3d:23:0f:9d:44:0e:01:c3:
58:4a:f4:c2:07:70:1a:5c:60:ae:ad:c5:ea:de:f7:
23:61:73:03:97:7a:88:07:1d:1b:ab:45:e3:85:d8:
d8:ce:dc:15:f6:b4:aa:50:c4:a4:fe:05:dd:0f:17:
b5:1e:78:d7:7b:c0:53:ba:59:62:66:84:ae:97:0e:
9c:d8:d6:70:75:41:e6:ec:4f:07:24:bb:f8:9d:be:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:D9:BD:48:4E:C6:22:95:16:1D:07:A7:82:04:A3:A4:0E:46:3A
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:50:e2:0c:20:3a:31:19:97:8e:3f:e5:f2:76:5f:11:45:
d7:7e:0b:4e:a1:d6:7b:6f:2f:8a:43:6d:0d:c3:c0:c4:fd:15:
90:79:d0:57:cb:c4:f8:12:5d:51:51:18:43:58:61:83:22:9f:
10:d7:74:db:b2:16:40:d5:fd:78:00:42:ac:8e:dd:cf:e2:7c:
b2:e8:0f:73:89:58:0a:63:54:e6:8e:c1:25:88:a4:98:3e:16:
ab:39:08:a9:86:a4:ce:b4:73:ac:68:81:ae:4f:d7:1b:79:50:
ea:7f:f8:d6:40:60:56:43:a2:d3:be:d9:d6:de:05:38:97:5c:
df:e7:b2:f1:0d:92:36:20:0b:bf:5e:10:b5:68:6a:c2:79:1c:
95:fd:fb:ac:74:76:17:82:1f:d3:f9:2e:92:11:89:64:92:fe:
37:ee:a0:c5:e2:f8:e6:ed:4f:cf:b1:c9:a9:68:4a:8c:9e:45:
9f:46:6c:69:37:d8:ee:0d:2b:df:9d:bd:d5:b4:31:5b:95:4a:
cd:ad:6c:a2:ff:87:d2:65:5f:9b:4b:60:29:25:d8:14:7e:7f:
3d:f9:9c:eb:43:fc:bf:95:9c:a1:34:39:76:0e:d5:81:53:31:
7d:e3:1d:00:fc:03:d7:f2:7a:e1:f1:23:4d:d1:c7:6d:2c:b5:
43:72:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client