Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: m9I5AOuGqVkLmN2NO9yy9CbdRYyDSPl0wx9S2Jdm02s=
Subject key identifier: 70:60:71:A6:2A:83:19:A4:A8:C6:85:1F:09:C4:D5:38:FF:F4:0C:B7
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 0194BD17CA2DF8DB45797219A7FFBCB697A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 0F85
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: +cPH03gUG9EmLSo1fYGz2m+Ku8H4zW6MX/51Y6Ay6DQ=)
2: TlWh2FiC6L1EjrJJE9K2hqgG6QM.roa (hash: KfB3SRGDOEDGj5LQWUrH02oNNKr12IvZ1o4EmR6ZIco=)
3: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ca:2d:f8:db:45:79:72:19:a7:ff:bc:b6:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=706071a62a8319a4a8c6851f09c4d538fff40cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:57:80:3d:fa:e4:ba:6c:12:6f:f8:40:ef:
a9:87:62:ba:e7:22:33:59:e1:d8:e8:dd:e6:f9:15:
49:70:7e:28:13:6f:c0:ad:2e:d4:02:53:dc:b1:f6:
43:93:ca:e0:0f:39:e3:87:02:2b:2a:e5:09:6e:72:
4f:c5:b5:e3:2d:f3:f8:8b:c8:8c:0c:55:14:fe:84:
6a:5f:10:fd:09:f0:b1:ec:85:c6:13:c0:21:c0:6e:
44:75:48:ac:06:65:88:88:57:78:f3:8a:35:5b:92:
db:bd:d5:8c:7f:70:0f:26:ee:60:07:d7:d2:e6:2d:
f5:18:4a:96:b6:51:ce:94:13:94:ad:37:ab:a7:1e:
a4:6c:88:3b:11:82:f1:35:eb:93:e2:bc:14:a1:78:
c0:c0:1e:10:57:b1:31:0a:9c:cb:f4:7c:a6:7e:dc:
33:c9:9a:44:63:72:6f:d2:e1:f3:3f:9a:42:4a:a9:
2e:2a:d3:98:0f:d0:78:86:b9:7d:77:e2:99:84:a6:
70:3e:7c:69:44:91:e5:97:2a:f7:4c:4c:99:5c:65:
e8:e9:7e:57:a1:ec:b6:c8:1b:44:7e:f7:1c:32:33:
63:b4:56:52:3e:b2:e1:39:c6:27:f0:02:56:1c:c1:
f6:3c:88:92:85:d4:d3:f5:79:45:84:97:47:09:85:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:71:A6:2A:83:19:A4:A8:C6:85:1F:09:C4:D5:38:FF:F4:0C:B7
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6c:ae:41:63:35:a5:a7:f2:06:19:66:96:3a:71:1a:b8:08:
26:c5:7f:3c:43:36:91:3b:e1:af:33:33:61:dd:6d:4d:ab:e2:
84:00:4e:d0:b3:65:5d:05:dd:f5:4d:36:86:47:64:b4:f6:9a:
2e:2a:19:9c:b3:bf:bb:b8:67:3f:d7:35:0a:59:ae:4b:35:cd:
99:66:e2:5b:7a:66:e7:1f:cd:69:ac:a2:ec:e4:14:43:46:de:
6e:9c:f6:b7:f5:45:aa:b8:ce:8f:90:30:20:44:d9:74:75:71:
44:96:ff:8d:66:65:14:d5:54:00:15:d6:d8:6c:c8:f0:8f:2a:
12:41:6f:11:78:a9:70:33:1b:33:c1:2c:ee:85:97:71:18:28:
32:6a:31:74:c0:13:c3:02:d1:0a:04:d1:fd:e7:81:1e:81:b7:
09:e7:15:0e:a5:7f:a8:28:ca:d5:d7:42:84:be:d5:27:bd:75:
48:9e:22:fb:e4:56:eb:5d:4b:e8:99:dd:1c:5e:d8:b5:35:24:
b0:2b:43:55:e7:6e:69:1b:39:e1:79:b1:74:6b:ea:a3:ae:18:
a4:24:cd:0c:86:e5:96:9b:bd:60:09:a5:65:95:44:c0:14:7a:
84:2e:13:81:5e:ea:ff:14:56:83:79:6e:13:81:f1:06:df:7c:
95:f0:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:26 2025 by rpki-client