Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: ahM5zRXET8I4wnaPHRzG88+UJ3jqdw674qjaEt51Vuo=
Subject key identifier: A1:01:3B:41:AE:B0:E6:8F:C7:0C:7C:78:5A:8A:05:F7:F2:88:D9:01
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 0194BC04C7AAC0210CA64ABC6E0F92732764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 069F
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 1ypxGUz02dU-GrVHnawwOGAtbp8.roa (hash: s/FzoESG6FigLmQ9qVLEYvChgXRxC5KQ8IrkGKlYCxY=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: B3Asuy0d781guVvly5ly2io1wzPEKLbD5t4t0ZKqj8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:aa:c0:21:0c:a6:4a:bc:6e:0f:92:73:27:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=a1013b41aeb0e68fc70c7c785a8a05f7f288d901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:bd:d7:78:09:4d:5c:6c:71:52:7b:f4:8e:
3d:bd:33:ea:d5:20:89:00:be:3a:cf:0c:16:ed:52:
9d:e9:35:e9:a6:98:8a:76:74:84:67:27:87:65:4e:
27:cc:5a:c7:32:9b:1e:dc:b3:43:d4:b7:33:56:92:
d1:33:0c:68:df:58:69:e1:09:4e:b3:ea:03:1d:29:
8a:49:b6:54:85:d7:ab:e2:dd:ec:eb:1f:61:f2:68:
a1:3b:2e:2a:aa:3f:84:e5:3c:ee:24:08:48:24:9d:
02:54:3d:fa:96:b6:a5:5d:f5:37:f7:45:3b:56:b3:
9f:8f:34:1a:12:30:7a:1b:e9:c3:eb:cd:b8:a9:47:
d2:44:b5:4f:bd:a6:f2:91:e8:9c:22:f9:9a:36:e9:
d6:81:c5:23:99:b4:48:33:51:95:52:9c:97:f6:36:
c4:27:4d:de:d8:87:88:4c:cf:74:41:e5:67:43:00:
eb:c7:85:14:16:a8:45:2e:4e:41:39:6b:91:1d:c7:
3d:75:b7:d7:8a:de:71:92:38:ba:39:77:7d:3a:4d:
29:4d:30:68:e9:06:3c:ef:13:93:bb:0d:27:2f:43:
f4:25:68:5c:87:22:5e:7d:d1:b2:86:17:ad:c6:11:
d5:cd:1d:3d:a9:03:7e:23:5d:c9:e7:15:3e:ac:65:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:01:3B:41:AE:B0:E6:8F:C7:0C:7C:78:5A:8A:05:F7:F2:88:D9:01
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:db:02:9e:6c:fa:54:fd:10:b6:b0:b8:b7:32:28:da:9e:1c:
af:90:4c:dd:d0:7e:bd:36:d4:9a:0b:72:97:46:6f:f8:e1:0a:
c9:b5:2f:7f:55:cc:ca:20:a5:b8:9f:d8:ea:78:9a:84:7e:9c:
95:f6:ac:00:ae:bd:11:6c:da:c2:7b:bb:90:7b:98:7e:92:4a:
8f:da:34:c6:17:3f:e1:2f:3c:c8:fc:c8:d7:23:43:1f:5a:a9:
00:19:5a:bc:6f:6e:91:f6:e1:4b:2c:49:fb:70:74:3a:2d:cb:
fc:ee:1e:d4:7f:ce:8a:b9:6b:18:d6:f4:fa:2b:b8:28:ad:61:
0d:ce:3e:ad:a7:5d:b2:a1:51:43:11:eb:46:7c:b1:e0:c2:a1:
33:fa:15:8f:be:76:c5:ce:a2:65:75:a3:29:e7:2d:54:12:51:
3d:85:a9:53:5c:85:96:23:06:e3:08:75:80:8e:d5:0d:01:be:
b3:ae:15:b9:d2:f7:05:50:c3:06:56:1c:27:af:2b:7c:71:04:
3d:38:c6:48:56:00:43:e8:a5:0f:a4:1e:ca:c6:3b:12:2e:fc:
64:e3:ed:ed:4b:d2:45:04:5a:e9:8a:b1:a7:1b:de:23:ce:9e:
99:ba:3b:41:d8:f9:a2:ab:63:a6:b6:ff:c2:35:5b:7c:5d:30:
df:2a:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:11 2025 by rpki-client