Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: 1grgmr+pb6mQ9OItgCAH0o5SVxDq8Qe50Qc3sc3XWt4=
Subject key identifier: B2:22:43:11:5A:AA:40:11:9F:AC:B3:6A:B8:B9:DF:1A:5C:EA:E0:14
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 0194BBCEA1E01527B229DC5EA72483AE3D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 093B
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: D5FbHhiMACAvcgM3H0fWol5bdkR01NH+RsPUsBAnPB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a1:e0:15:27:b2:29:dc:5e:a7:24:83:ae:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=b22243115aaa40119facb36ab8b9df1a5ceae014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:85:6f:a7:88:6a:21:3b:cb:28:a7:e7:41:
35:65:09:b5:87:50:62:10:27:8d:f0:51:eb:8c:ae:
2a:ba:6c:cd:e6:f4:76:46:ad:f4:39:83:40:38:bf:
db:5c:3e:b9:fe:91:c6:3e:24:9c:b0:bb:9c:e7:76:
35:79:2e:a7:2d:de:65:a3:53:97:b8:a8:ed:67:97:
bd:e9:e3:58:31:a1:0a:63:81:74:35:55:d3:26:17:
ba:50:31:dc:f3:dc:ec:ea:53:d6:8f:57:5e:08:4e:
45:41:7f:1a:c2:7c:56:d1:68:e7:26:d4:7c:d4:e0:
78:01:b6:59:f0:75:38:78:46:e7:67:16:56:88:b6:
89:4b:18:47:0a:90:ac:5c:d9:3b:3a:a2:c1:34:dc:
7e:a0:34:db:cd:fe:38:57:6c:55:bc:f6:15:3d:47:
70:b1:8d:97:e9:14:ef:c1:10:2f:89:75:00:bb:e8:
39:54:1a:e9:a0:49:fe:97:fe:bf:90:0a:33:d4:73:
8e:7d:cd:a4:4e:49:00:d2:c5:81:49:e5:be:ea:53:
74:91:79:d8:77:a2:d8:b1:b8:04:a6:58:e3:ee:e5:
f8:4c:b3:4b:bd:93:fd:c8:95:e2:8d:a3:2a:47:78:
c4:9c:0e:32:b2:57:a7:af:09:cd:da:b8:4e:6f:9f:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:22:43:11:5A:AA:40:11:9F:AC:B3:6A:B8:B9:DF:1A:5C:EA:E0:14
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:74:5d:6c:4d:20:3a:25:ad:4b:3d:26:af:8f:e7:9e:61:5c:
ec:28:90:bf:e7:27:5e:96:2c:65:90:65:15:7a:79:a4:f7:5a:
73:e0:37:02:de:29:55:c5:27:92:28:22:82:a5:39:56:f4:e2:
33:1e:8c:52:b6:d7:e2:cf:3b:7a:86:f1:55:b9:cc:40:13:41:
f8:42:ea:ab:99:33:a9:4d:9b:9e:9c:31:9b:18:fb:05:3b:aa:
a5:1a:ad:1d:7a:51:0b:46:75:0d:06:a7:b9:b1:07:0a:77:d8:
f8:b5:76:d8:bf:de:8a:93:02:2b:18:4a:6e:d1:50:59:1d:5c:
90:d2:78:42:d2:e8:2c:b4:21:4e:fe:75:5e:66:41:cb:28:7b:
20:88:3e:76:47:ec:aa:61:09:43:e6:3b:7e:3a:31:45:0b:fa:
57:6e:e4:e4:50:7d:b4:e3:db:bf:69:92:71:ad:6d:79:48:91:
54:95:23:b4:ee:73:d2:f5:6f:95:f2:75:ac:b9:2e:0a:04:57:
3a:2e:63:b7:c6:a2:ec:37:48:ff:4d:83:d8:fa:9f:01:84:77:
f3:a4:76:7c:2f:9f:d1:55:c2:e4:24:85:0b:07:dc:a1:2d:58:
f3:2a:88:05:9c:b6:cf:ab:16:1f:f8:7f:c8:ce:38:66:05:94:
63:8e:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:45 2025 by rpki-client