Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
File: 4KM3CoQbiT57aPhqOTNjWC4QVkg.mft (raw, json)
Hash identifier: hUZTAcS4TcKz5/U9Tz7FTWnjKDNVGhqcKx+eDXSBCpM=
Subject key identifier: 1E:E5:09:88:50:EE:1A:D3:D0:E4:3B:5D:94:CC:22:BA:BA:0E:6E:4C
Authority key identifier: E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
Certificate issuer: /CN=e0a3370a841b893e7b68f86a393363582e105648
Certificate serial: 0194BC3BC23BE0CD485E7FE2557770C75F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
Manifest number: 0904
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 4KM3CoQbiT57aPhqOTNjWC4QVkg.crl (hash: RGTrfNKUAZIfDfoPNQrZD2yHPM7FEmoLsppE0bcV/XQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:3b:e0:cd:48:5e:7f:e2:55:77:70:c7:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a3370a841b893e7b68f86a393363582e105648
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=1ee5098850ee1ad3d0e43b5d94cc22baba0e6e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:0f:99:a7:7a:44:2d:89:20:80:9d:02:9c:
61:b9:f9:ba:d2:45:80:c6:5f:3b:3c:aa:ae:0b:62:
2f:89:63:a7:30:dc:12:9a:78:4e:ae:93:03:f5:06:
c9:af:52:30:2a:ac:8b:87:7c:9f:bf:ef:3b:4c:02:
f0:2d:a9:53:3a:98:d2:94:36:2c:cc:f3:4d:0c:db:
e8:63:01:4f:9b:45:a6:a7:67:02:54:46:5b:c1:51:
7c:73:ee:49:a5:f0:d2:47:e9:91:15:64:ef:b3:e6:
61:29:c5:94:fc:1a:c8:25:ed:39:16:9f:8d:2a:58:
c5:c3:a1:6b:96:67:79:60:a0:87:2d:c0:bb:74:b5:
db:f6:34:66:38:ab:37:39:7b:f3:e0:a5:19:fa:b7:
79:a1:c1:d2:62:f5:65:3f:38:f1:82:23:b8:d4:42:
66:a6:dd:4b:c8:16:82:75:e6:95:20:e8:19:62:e0:
b0:85:cc:b4:3f:2a:c1:0d:40:0d:55:fb:7e:10:6c:
5c:81:ac:ee:6c:33:7f:4f:d7:76:69:6d:82:47:6b:
a8:0b:d6:cf:06:64:e6:52:e0:0f:1c:cd:2f:93:b2:
cc:36:b0:f8:fc:b8:ad:63:75:ea:8b:83:93:51:40:
56:8f:62:58:ae:78:f1:d8:7e:3e:57:30:99:8d:ba:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:09:88:50:EE:1A:D3:D0:E4:3B:5D:94:CC:22:BA:BA:0E:6E:4C
X509v3 Authority Key Identifier:
keyid:E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1f:d6:3c:e8:3d:69:c4:d8:08:66:26:94:e0:03:ff:16:14:
ba:b2:30:26:34:e8:05:d5:e4:f0:be:c9:4c:1b:35:9e:4b:55:
f7:12:60:34:17:26:f6:ca:54:d7:bd:48:21:83:2f:fb:2d:f2:
6b:27:ea:de:0d:97:e2:ec:f9:00:2f:6e:83:4b:7d:b5:73:3b:
25:98:42:d9:40:18:14:0f:d7:ed:0a:92:af:5e:83:c3:95:aa:
36:d9:98:bd:59:ab:1d:8d:6c:e1:98:28:8b:b2:67:0c:b1:7b:
54:a4:9e:f7:08:9f:86:6a:41:9c:85:69:c7:ec:a6:26:78:a8:
c9:07:a0:06:99:d1:5b:5e:99:bf:44:d4:9d:48:70:b5:75:fe:
02:f1:c1:58:20:9e:6e:12:98:02:13:96:f3:15:e8:fb:0d:4a:
1f:84:60:cf:0d:b8:25:84:4e:74:cd:cb:0f:29:73:85:3c:08:
72:f9:b9:44:db:02:ee:3b:33:38:12:d9:ab:db:97:cb:f8:08:
33:09:50:b0:7a:9d:4f:29:5f:f8:40:0b:7e:d6:39:e9:20:7c:
8b:95:37:db:ba:5b:14:37:c9:b2:7b:48:cf:be:02:c8:d2:c0:
f9:43:64:2d:de:31:1f:97:47:19:53:ca:3d:e8:09:59:41:0e:
fe:3a:e4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:04 2025 by rpki-client