Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
File: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft (raw, json)
Hash identifier: EJm9PSAI3UIHSmOrl+FKxdCyjbJ1KigJ4UThhggplzI=
Subject key identifier: 49:E1:B5:C6:4D:3A:5D:C3:A4:3C:07:E5:7D:70:13:B4:AA:B9:0C:41
Authority key identifier: E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
Certificate issuer: /CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Certificate serial: 0194BD4E3929D6B283DAB1FD2C969027A85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
Manifest number: 0304
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl (hash: RhDCX6KJLqlyZkC2MMBaKBAnCfa7Vm7psxNOOwyGZ9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:29:d6:b2:83:da:b1:fd:2c:96:90:27:a8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=49e1b5c64d3a5dc3a43c07e57d7013b4aab90c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:1f:47:98:08:73:1b:c9:1e:9e:91:b0:c6:
f8:4f:34:53:bb:d5:ad:46:92:d2:f2:65:ef:41:fe:
c7:22:7c:e6:81:24:c6:48:55:e8:ca:74:d3:b0:9c:
46:40:4c:5b:ec:05:66:54:fd:69:ed:ef:ee:f1:d2:
c1:94:da:19:f5:c5:3d:ac:4b:1c:7b:8a:d7:3f:c3:
95:dd:ca:4c:8b:73:0b:ee:81:9a:9f:1a:09:7a:87:
d5:2b:01:36:7d:36:76:9f:68:48:b7:58:65:6c:50:
86:56:dd:37:51:5d:0a:c8:0e:ed:df:2a:e9:72:23:
86:cd:54:85:40:16:a4:f7:e4:35:2a:17:6c:b1:e4:
3d:d5:27:db:03:17:39:c6:05:87:e7:14:f4:76:98:
d8:ed:84:e3:9b:33:52:b5:89:d1:30:ec:63:de:d4:
f5:16:53:52:71:55:af:a7:f8:ad:b3:24:83:c8:32:
6a:88:49:dd:08:22:7b:b0:93:7d:0a:5d:96:29:53:
22:9e:76:05:9d:11:52:a7:c6:a8:79:54:41:f3:25:
52:fd:b6:44:c8:eb:f1:14:ae:e6:52:d4:e6:cf:b5:
80:03:24:25:fb:5f:9b:3f:4e:a1:25:cd:05:d9:3f:
cc:b4:be:ef:ad:37:4d:91:af:a7:e8:5d:ee:23:f8:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:B5:C6:4D:3A:5D:C3:A4:3C:07:E5:7D:70:13:B4:AA:B9:0C:41
X509v3 Authority Key Identifier:
keyid:E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0d:35:52:fd:f2:a8:e7:28:05:d9:6a:72:4f:61:8c:41:b5:
3f:41:b4:e6:02:f5:31:2c:c6:d3:8a:c6:0d:4c:20:72:04:6e:
b4:13:4f:eb:a8:46:f6:08:96:11:3e:7e:c5:e2:ca:cb:9e:36:
4c:d0:1e:d8:b8:8c:4a:a9:03:dc:ba:1d:06:4a:d3:09:b0:24:
b9:f6:99:55:43:61:ca:4a:93:9e:3b:f0:74:3f:77:0e:60:bb:
35:76:ba:45:a2:30:58:95:bc:c7:99:ff:e5:30:97:6c:c7:c9:
90:96:f3:b3:df:2a:ad:32:74:f1:75:db:24:09:72:56:49:76:
b6:99:99:48:8a:55:bb:e1:87:b4:a4:d7:51:8c:70:bd:9f:d3:
9a:0c:d0:99:a5:2e:70:6a:6f:12:89:c0:e0:49:e1:2f:27:5a:
b1:8d:47:e8:42:59:2e:ad:70:48:c2:62:56:56:47:29:77:c6:
dc:21:86:41:35:34:d9:60:19:38:a2:13:f5:cb:26:d8:95:4a:
12:8a:a9:44:74:e8:b8:e7:0d:65:fe:1a:1c:30:41:7a:86:13:
d3:6a:42:0a:94:fb:43:c8:ee:e9:e6:8e:7a:c9:34:80:66:3d:
f3:47:3f:4a:a6:a3:4f:11:c0:ff:5c:19:9b:4b:3d:ff:50:62:
27:7a:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:12 2025 by rpki-client