Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b4cd4b-88f2-4e82-b366-99d7c8401683/1/4T6m_xbPc7pgFIzjAJ9w-KPCKPY.mft
File: 4T6m_xbPc7pgFIzjAJ9w-KPCKPY.mft (raw, json)
Hash identifier: ZI6g9uQbMs8aMfCbAUD9b/53dCeouOFGOy5FCEpmC2I=
Subject key identifier: 09:C5:4B:EA:1B:D7:17:9E:A9:C0:B6:42:66:91:35:4B:05:65:29:06
Authority key identifier: E1:3E:A6:FF:16:CF:73:BA:60:14:8C:E3:00:9F:70:F8:A3:C2:28:F6
Certificate issuer: /CN=e13ea6ff16cf73ba60148ce3009f70f8a3c228f6
Certificate serial: 0194BBCE6909B5130312B2B4EEB0671A9FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T6m_xbPc7pgFIzjAJ9w-KPCKPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b4cd4b-88f2-4e82-b366-99d7c8401683/1/4T6m_xbPc7pgFIzjAJ9w-KPCKPY.mft
Manifest number: 07F3
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 4T6m_xbPc7pgFIzjAJ9w-KPCKPY.crl (hash: gk0hURFiHi9gDKviPzSs7YWrbEPK5vyGH4kF5/b7Uk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:09:b5:13:03:12:b2:b4:ee:b0:67:1a:9f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13ea6ff16cf73ba60148ce3009f70f8a3c228f6
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=09c54bea1bd7179ea9c0b6426691354b05652906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:db:bc:9e:cc:a2:3a:ae:0a:a6:00:d0:5a:
2b:bb:9f:c3:1d:92:c5:8f:1a:94:82:a5:ea:ea:27:
47:d6:e4:a3:1e:c7:9c:42:1d:42:12:a7:b6:db:c5:
45:5a:7a:47:60:12:0b:5d:e7:af:4f:74:5f:f8:d4:
86:6c:63:b3:ae:be:43:2a:0b:af:eb:55:cd:82:87:
ac:d9:f3:47:5e:d6:2d:09:93:31:61:f5:d0:b9:3f:
0c:9e:8d:bb:4a:1e:5a:a5:9d:5e:63:22:94:29:a2:
1c:49:47:5e:15:96:d3:e0:15:61:0d:fd:a6:00:a6:
7d:94:29:58:99:fc:92:ab:24:11:d8:21:04:c8:78:
43:dc:fb:6e:05:02:89:f6:90:56:e8:0c:e2:3f:34:
64:cd:da:ac:a3:24:da:99:27:56:53:08:bf:ba:c5:
c0:68:1c:53:e2:0c:e7:38:66:d3:03:59:f9:d5:d0:
3e:58:a3:40:9b:78:98:74:7d:35:35:a4:7d:6c:e3:
89:d5:28:ce:88:a2:42:1d:4a:21:03:ba:51:81:96:
a2:99:e6:b7:21:4b:6c:a2:b6:5b:39:27:bb:66:d3:
75:6e:aa:91:9f:8d:a0:7f:60:6d:80:68:4a:b6:a0:
a0:01:ea:99:01:4e:70:d8:fe:f5:8d:15:b8:d6:6d:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C5:4B:EA:1B:D7:17:9E:A9:C0:B6:42:66:91:35:4B:05:65:29:06
X509v3 Authority Key Identifier:
keyid:E1:3E:A6:FF:16:CF:73:BA:60:14:8C:E3:00:9F:70:F8:A3:C2:28:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T6m_xbPc7pgFIzjAJ9w-KPCKPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b4cd4b-88f2-4e82-b366-99d7c8401683/1/4T6m_xbPc7pgFIzjAJ9w-KPCKPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b4cd4b-88f2-4e82-b366-99d7c8401683/1/4T6m_xbPc7pgFIzjAJ9w-KPCKPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1c:71:69:3f:64:49:0c:4d:2e:c9:9a:57:ea:0c:de:67:5a:
4d:68:c5:58:40:76:95:f0:a4:d4:49:a6:48:cd:04:15:7a:5b:
d5:c6:3d:56:27:98:34:cc:c5:a0:ea:4a:7b:8f:b9:fb:65:65:
88:5b:c5:f9:13:83:5d:80:c4:a6:15:a0:c8:cb:98:e9:20:e2:
24:ae:fa:26:12:0d:c3:83:c7:46:91:f1:22:1c:f3:ae:71:b8:
ff:82:01:82:7b:35:6c:94:92:fb:61:ac:a6:92:16:d1:22:bc:
46:ee:b3:e7:cf:fd:f8:23:66:2b:72:10:01:a7:ab:22:ba:12:
ed:3e:b1:09:3f:5a:35:ff:6e:e0:b8:ff:c7:a8:06:c3:12:77:
ac:4f:27:e2:15:3d:99:17:26:a2:8d:70:7b:cd:46:d1:2f:7b:
c4:f9:a7:7b:38:bd:bc:c5:d6:b4:19:eb:ee:79:a5:53:1d:59:
f6:c5:04:a2:77:9f:84:b8:0e:18:bc:77:0e:4b:0e:72:77:a9:
17:1f:35:0c:9a:17:5b:bd:79:ac:df:bd:be:3c:40:af:cb:17:
4c:9f:30:18:a3:7b:c2:2e:94:5c:02:24:54:b7:b7:9c:7c:08:
e0:9a:b1:bd:03:8c:54:03:ee:ef:c0:ba:27:f2:43:cd:b4:31:
cb:5e:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:53 2025 by rpki-client