Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: F3YetQezKImTnLadLwV5RbtU3wWer0jyTwJdrfEAyS0=
Subject key identifier: 05:FE:7D:86:DD:4F:32:6B:25:FD:29:2E:6C:4B:AF:3A:7B:AB:B6:27
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 0194BD175942FE9DCFAEF881D3203AB0776F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 0A2B
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: 9+QD38Co1PGKFQ8g9J2qyipNQg1abL3EzP6AqryOOSw=)
2: DQo4EErqs46yA4QIpyLHGlOprVU.roa (hash: jpEUtUNk7NIqvU0XQCmCZgYXNkApAZ2zVdQgWdhDGWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:59:42:fe:9d:cf:ae:f8:81:d3:20:3a:b0:77:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=05fe7d86dd4f326b25fd292e6c4baf3a7babb627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:5e:97:88:98:a5:3b:f6:ee:e1:0f:b4:8a:
c7:b8:d7:d8:2c:b4:40:31:91:52:e4:f7:cc:4b:57:
02:b5:d4:ee:b6:fb:ab:9c:cc:8f:13:75:2d:e7:b6:
45:eb:59:84:7e:f2:cf:f1:95:3e:37:d4:d7:6b:66:
63:94:7d:04:d9:ee:31:34:46:d8:1d:be:72:ae:0d:
ac:64:6c:35:de:28:71:32:9c:b8:ed:78:e8:03:0c:
97:9f:87:38:ba:d6:f3:ce:a3:16:0b:9c:6d:db:a3:
eb:a0:00:a7:e6:7d:60:27:4e:4b:19:2a:6b:29:a9:
94:59:37:6a:c5:49:ff:73:15:a4:a3:52:1f:d9:65:
27:ee:65:d1:23:bc:19:75:9b:ba:8f:bf:2b:8a:a9:
06:ed:ea:f6:3b:ed:ce:03:39:d8:06:3d:ca:90:e8:
0a:3a:fe:d3:a7:40:71:1e:8d:94:9d:92:56:02:1c:
13:f1:6e:52:57:d3:11:58:ce:fc:8b:45:f1:86:75:
c1:1b:d5:58:41:82:64:8c:3b:b6:47:80:37:d8:6f:
13:1f:de:ac:c2:1a:23:f3:d6:09:71:f7:6e:b8:ac:
58:f1:1a:d8:7c:7e:8a:9a:b8:76:bf:53:30:e3:86:
7c:15:45:0e:6c:d5:1f:00:c3:e8:be:a7:59:cc:92:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:7D:86:DD:4F:32:6B:25:FD:29:2E:6C:4B:AF:3A:7B:AB:B6:27
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6e:95:98:8f:a7:c6:41:8f:b4:7c:18:6e:9c:10:68:80:a6:
64:d0:8d:a2:be:54:5b:19:45:88:eb:0f:92:8a:4d:f0:d2:27:
4e:12:07:ac:3f:06:0c:19:b5:28:52:c5:58:cb:0c:05:21:42:
2f:58:1c:c8:ed:6e:98:f4:10:70:ce:71:52:b0:5c:90:ac:49:
50:4f:7d:b2:90:0a:87:bb:18:a7:19:d3:76:4b:a3:03:15:97:
4c:14:51:2b:99:ae:08:45:c2:23:47:36:b5:85:b3:9d:37:1e:
9c:81:d4:1a:d6:33:d5:a8:e2:9d:38:92:4e:46:e1:5c:26:7f:
49:b7:85:3a:c8:1b:17:58:b2:4b:b2:7b:23:54:5b:ee:d8:72:
38:a5:81:fc:34:ba:db:f2:73:c4:bb:e0:a0:56:c2:f6:af:27:
d9:43:63:98:d8:d4:63:d2:d0:04:b0:98:26:f5:d9:db:c8:e4:
76:99:2e:a4:92:f2:24:22:6b:6f:e9:45:df:df:4c:24:64:f6:
69:4a:c1:4c:bd:f9:30:ee:4d:5b:1c:fd:a9:34:1e:cb:2a:b6:
31:50:75:16:dd:0a:d9:e1:49:d7:18:c3:7d:df:bd:54:9b:9d:
17:4f:98:f7:67:41:2a:0f:9a:69:01:e2:2e:a9:f0:f6:8e:e6:
4e:69:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:54:34 2025 by rpki-client