Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: +bmJC+flhHNXNgEkoWGb6vPwYt8L6joR7L3IEkJmyt8=
Subject key identifier: D3:89:F2:DC:AE:D6:48:15:33:E4:4C:8E:1A:12:D9:9E:98:CA:5B:42
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 0194BC3C359F0327F42CFF84C4BAAA370681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 05AF
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: wF+b+i6pd0/840dSdv9NFVfFaYJWpl9Jxsrb7aBsKog=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:35:9f:03:27:f4:2c:ff:84:c4:ba:aa:37:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=d389f2dcaed6481533e44c8e1a12d99e98ca5b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:05:99:f5:d3:e6:b7:9a:4f:d4:3c:ea:18:
ee:b2:4f:93:b6:0c:06:ec:66:81:e9:73:be:34:ba:
6d:c2:69:ad:6e:82:8d:8a:fe:42:4d:8b:1a:36:bc:
e2:1d:fa:4a:b3:8d:39:b1:cf:be:da:94:f3:42:ab:
e0:9b:bd:5f:14:c0:6f:dc:a7:a9:5f:41:88:ee:e7:
a3:ea:c0:e4:05:85:a0:83:d3:e3:c7:62:34:b6:d4:
f5:0a:83:fa:72:69:dd:13:76:54:34:c8:ee:1c:a8:
65:68:5f:bd:08:0f:6c:d5:b4:fc:0e:a4:14:58:76:
ae:14:e4:fd:38:ec:21:be:b8:21:db:cd:ca:65:52:
bc:74:f2:14:1b:e8:c0:88:7e:ab:39:66:09:dc:ad:
76:c6:61:b8:ec:0a:47:1f:1c:f1:52:f2:33:6b:e0:
e2:d4:8d:3a:7d:b4:95:8d:ce:a3:d7:e0:28:ca:1e:
eb:d4:c5:1b:0c:d6:f4:1f:c2:79:ce:40:75:7f:7b:
3c:79:d2:bc:25:a4:1b:24:52:dd:01:a9:90:e9:25:
05:af:6d:c5:9c:4a:54:4a:e0:44:e3:b9:0a:24:4f:
00:27:29:af:99:d9:e2:f0:e0:ed:6a:2d:83:9b:53:
59:81:ea:5e:7b:2d:ab:10:f4:59:f5:70:dd:eb:ad:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:89:F2:DC:AE:D6:48:15:33:E4:4C:8E:1A:12:D9:9E:98:CA:5B:42
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:97:9b:d2:ed:cc:32:ed:96:3a:ba:d2:f3:5f:d0:83:d0:ae:
c3:13:8b:4c:c3:ed:55:94:ba:f1:44:a7:ff:55:3b:a1:17:a0:
c7:9d:fc:65:bc:4c:22:30:69:77:3e:ab:5f:b7:f4:f2:ac:5e:
fd:c9:bb:75:5d:a8:5f:1a:6f:4d:ba:81:72:3a:dc:0a:33:d8:
6a:14:1a:b5:91:9d:43:4c:e2:fa:a8:ac:48:d2:f3:ac:44:97:
a5:81:02:f2:0c:83:c4:f3:4a:47:ac:24:48:db:51:87:79:aa:
85:05:d4:6c:68:48:e2:08:9d:96:9f:ad:f5:37:10:73:f8:df:
1c:1f:be:f7:70:ef:54:ed:13:ac:f5:08:39:61:29:78:22:aa:
94:71:f2:c4:bb:e3:c6:0b:93:a0:f5:07:8b:82:c0:76:0d:60:
78:91:23:98:7e:8d:dc:24:c7:a2:b4:a8:28:27:87:ee:da:26:
81:c7:30:94:1e:2a:64:be:4b:1d:7b:46:05:04:e3:28:d0:44:
14:83:21:35:55:9d:c4:be:f0:a4:8b:0e:c8:3a:42:d4:b2:fb:
73:31:2b:7d:8a:fb:b8:ad:6a:04:18:c1:7c:f3:9a:a9:8c:2e:
df:0b:6a:f1:8a:25:53:97:90:e6:7a:58:06:f4:50:d2:2d:5f:
c1:a2:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:15 2025 by rpki-client