Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
File: 4BpLB7xMpvoFciL96uhg9kRAR-A.mft (raw, json)
Hash identifier: Jx+qi+MxkcfnGShYR0Zi9fjeZrW3y9iURNldZhiDIXo=
Subject key identifier: F6:16:EC:FD:C4:E0:3F:0E:77:99:11:D3:D2:B4:B0:75:5E:95:82:76
Authority key identifier: E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
Certificate issuer: /CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Certificate serial: 0194BD4EC9106F27C13ECCC1852FE718BA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
Manifest number: 01FC
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: 4BpLB7xMpvoFciL96uhg9kRAR-A.crl (hash: eg7a5MRGo4/HOacPJgu7SevitFXcuBGQXlaerW5BHkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c9:10:6f:27:c1:3e:cc:c1:85:2f:e7:18:ba:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=f616ecfdc4e03f0e779911d3d2b4b0755e958276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:b8:99:26:c9:aa:e7:43:f1:3c:f3:e0:03:
ba:5a:32:3c:5d:1c:56:65:5e:a3:80:52:3c:36:1e:
8b:4c:90:23:1f:08:58:46:37:13:95:bb:0f:70:c5:
09:a1:da:97:61:ff:4c:56:dd:51:4d:6c:16:64:bf:
c6:75:26:93:be:65:02:37:54:ef:6e:a8:c1:e1:33:
4a:a3:e1:1c:cf:ea:4b:ef:51:dd:95:14:4a:f0:06:
43:ef:c0:a8:72:e6:4a:0a:fd:23:d1:82:f1:a6:82:
7f:d7:f4:4e:de:35:ae:58:ec:af:6e:64:78:11:4f:
e8:38:90:1b:d2:ff:b2:49:2d:54:9b:f7:f4:e4:25:
c5:94:1e:6c:ae:85:1b:f0:8c:9c:9a:9c:34:08:b1:
f9:35:b3:9b:44:a5:83:9a:c0:6c:bf:df:98:e7:6e:
bc:6b:95:e6:34:a6:52:58:26:20:e7:79:b2:ba:d9:
e7:59:d4:89:3f:60:72:08:bf:fc:ae:3e:29:9a:74:
84:61:47:05:5d:ed:d2:57:95:1a:e0:39:b0:7b:1d:
9f:29:0d:f5:9b:a9:de:9b:c0:d5:e7:cc:0d:38:e3:
2b:31:46:c6:a0:1a:4c:0c:d0:01:8d:60:d8:25:de:
4b:64:86:68:d4:ca:4f:c5:2f:35:f1:c3:53:30:56:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:EC:FD:C4:E0:3F:0E:77:99:11:D3:D2:B4:B0:75:5E:95:82:76
X509v3 Authority Key Identifier:
keyid:E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:da:a4:5d:5e:b0:05:9f:bb:20:86:a3:7b:4d:e8:41:1e:1a:
5a:47:bb:d0:2c:8c:cf:b4:7b:2d:6a:e0:79:94:bd:72:c6:5d:
d2:c8:92:d6:77:dc:bb:df:3c:6f:f0:60:57:47:7d:fa:45:40:
f5:0f:eb:49:5b:d0:3f:69:92:b8:e7:e3:f2:88:2a:4d:04:25:
b2:8e:9f:51:cd:a4:b6:c5:8e:a3:d1:82:55:d4:6e:c5:af:fb:
42:c6:dd:7e:ff:5a:9e:ec:69:da:48:3e:d9:ab:b9:69:c2:74:
b6:af:54:4e:bc:dc:11:6b:45:ca:9b:c7:06:52:f0:5f:ef:15:
4e:06:22:f7:ca:f0:e8:9d:d5:5b:fe:63:ed:8f:3b:91:12:c7:
18:0c:e5:51:62:c3:46:ca:b8:9a:48:2c:a8:ae:4d:e9:b2:61:
b8:b5:a7:f3:02:31:be:c9:77:74:ce:44:1f:ff:3c:1c:5a:6e:
dd:d1:a2:12:f1:a7:44:8f:86:a9:1b:6a:ae:d5:fb:69:1e:0e:
f9:bd:c0:1a:4d:6a:df:a6:56:16:47:ff:23:fb:07:eb:42:4a:
8f:b1:75:d0:08:18:6e:1d:2c:b0:24:96:50:70:8e:0c:d0:5e:
c8:17:47:cb:50:28:b3:83:8f:4b:d2:2e:98:7c:e7:7c:b6:01:
72:4e:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:25 2025 by rpki-client