Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: inhAqoa64gzA8UUuwFP1KzLIn5EV25g+sB5jTAW5lvw=
Subject key identifier: 81:9D:CC:EB:DC:D2:6C:39:39:E7:D7:18:B3:37:DD:86:F1:7B:C4:40
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 0194BC3C0D8C367E9B46476C8A936F02C61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0784
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: 8Hx/1Z8sMsRHsyz883u+Hf9zrHTyva87Y0Jg8Xg1Lvc=)
2: LlU4QULfxG-fJbjUK6blpUANe_Q.roa (hash: 3vAOeQYnb+huFwQtsH8ApJ7rgbdzg+C7TMAlcbQDIOw=)
3: vtYtYuhvjg1T4BhVaI4zFpktgxQ.roa (hash: IKWSCdeiniVRZpzJ7VfSoxk6PI51vEUka7uIJk6vB8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0d:8c:36:7e:9b:46:47:6c:8a:93:6f:02:c6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=819dccebdcd26c3939e7d718b337dd86f17bc440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:58:e3:f8:71:70:25:af:6a:a0:52:23:d6:
2b:11:42:50:da:ac:b6:56:7f:dd:02:8a:fc:fa:ea:
b7:1c:e1:df:d4:b4:cd:93:44:fe:df:c0:01:b0:e0:
01:4c:81:7d:91:f2:79:fa:12:27:dc:1b:be:2e:07:
29:4a:72:fa:00:c4:84:f1:94:4c:2e:39:c6:d0:12:
12:7f:db:ff:b4:52:a9:0e:7b:d0:c9:bc:f6:62:36:
75:94:6b:4c:4a:5d:68:d8:b6:30:a0:40:e2:21:18:
1e:71:4b:ee:26:7b:13:8e:ee:6e:52:6d:c2:a3:1f:
16:d3:5f:d8:e4:6b:32:85:61:98:c2:35:9a:86:cc:
4c:02:af:44:df:1a:76:84:53:1d:0f:8c:7c:6b:8f:
cd:3a:fc:53:8b:93:8d:6f:96:76:5e:f4:7b:53:5e:
7f:90:e5:78:c1:4f:59:e6:ae:b3:dd:43:32:f0:58:
5e:95:1f:3e:d0:4b:8c:a4:47:f7:9f:83:50:36:1a:
49:83:2e:68:de:13:a2:c2:01:c2:9d:02:79:19:b1:
e8:be:67:f7:e7:a3:53:35:20:07:70:de:d3:df:f2:
9f:b0:09:ff:aa:08:2f:ab:f5:fe:22:46:1e:ae:06:
5d:55:e3:87:36:6a:d2:f9:3e:e2:9f:02:c6:7f:63:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9D:CC:EB:DC:D2:6C:39:39:E7:D7:18:B3:37:DD:86:F1:7B:C4:40
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ed:e7:a3:df:dd:dc:c8:44:df:1d:0c:32:78:e0:d5:cd:ae:
06:27:cb:6f:7f:24:2c:13:fd:b4:63:a4:26:94:6f:4b:2d:78:
05:5b:7a:26:9f:a9:23:fa:fb:6c:d9:45:07:35:b2:ee:b4:14:
d6:26:c8:cf:3c:50:ee:84:fc:bb:fe:ee:be:9f:ca:ff:bd:20:
64:d1:ae:95:46:17:5b:fc:0c:98:0c:8c:21:25:44:b9:53:50:
6c:58:e3:81:2b:7a:83:47:9d:22:5f:98:a4:87:a1:80:d4:c8:
c9:eb:d5:3d:70:66:58:f1:8f:88:06:5e:28:3e:9f:e6:5b:11:
52:a5:af:fa:6a:86:d7:53:ab:cd:4a:8e:02:92:e4:01:8f:1f:
91:69:e5:2a:09:d2:ec:3c:30:69:fb:ee:be:ad:b4:5b:23:e9:
f3:c7:a2:a2:62:7f:c8:be:37:13:71:03:6a:0b:20:77:ba:ca:
c3:85:68:fe:3c:e7:8f:a6:97:f3:84:26:d7:25:58:0a:be:3c:
9c:2e:82:d4:8b:4a:0a:52:fc:50:73:84:e8:d2:c1:5f:58:b6:
80:e4:43:20:44:4b:c2:a3:4a:6c:ac:8d:4b:1f:cc:03:03:fb:
3f:17:7f:63:55:ad:77:fb:5b:00:33:df:00:bd:a1:ea:4c:0b:
84:9a:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:34 2025 by rpki-client