Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: PAHAzIxFO0xRZZwBhK3xyCI1nmOxbfm9bzoF9wchRi0=
Subject key identifier: 43:09:4E:55:A7:7F:8B:7C:DB:05:39:44:36:4B:B7:1C:6D:4C:10:CC
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 0194BBCE6C2F12142FD5F2C38E56C0C82212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0AF9
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=)
2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: qMmK2C7ME/jgNNQVJiur5iUNHH5cQWs4T1DZiHKbkXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6c:2f:12:14:2f:d5:f2:c3:8e:56:c0:c8:22:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=43094e55a77f8b7cdb053944364bb71c6d4c10cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:b6:53:61:94:93:a6:ac:5c:14:eb:92:1d:
73:e9:fd:73:8a:d2:8b:72:ff:ab:c2:e1:a2:ba:46:
b9:3c:ec:d6:29:19:88:65:c1:9e:27:43:5a:ce:dc:
14:85:9e:20:b2:b9:85:ab:65:42:d1:c8:a0:e4:5e:
9b:44:7c:4a:89:a4:59:68:f0:7b:a7:2a:98:e9:0d:
ed:79:64:fe:46:9a:da:4d:f8:ac:50:17:9f:03:ce:
72:c3:c2:e5:79:0e:bc:37:5c:f9:33:18:ed:2e:e6:
b7:da:f6:56:d9:e6:6b:83:f1:c9:ce:94:38:96:32:
b8:5d:6d:a8:9c:60:00:fe:87:f6:d4:07:1e:93:65:
be:6c:83:52:a0:e4:79:62:a1:2e:d6:15:a2:04:ed:
ac:58:bf:f3:26:24:ff:22:70:64:44:30:54:fb:fc:
f0:0f:d4:87:96:5b:56:34:55:80:34:0e:08:9f:dd:
61:b8:97:5d:e2:4c:2d:9f:10:c6:47:cf:21:55:c6:
0d:48:e9:c0:08:c0:24:60:94:db:91:79:fa:e1:91:
19:eb:b8:f6:3c:28:27:09:f0:1a:fd:29:d9:ee:89:
37:f7:b1:46:be:92:1f:3a:15:30:09:41:32:49:53:
69:4e:65:f1:ef:c6:d4:3d:34:e2:6e:8e:cc:cf:5c:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:4E:55:A7:7F:8B:7C:DB:05:39:44:36:4B:B7:1C:6D:4C:10:CC
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:20:11:f3:ee:65:a6:c5:da:c0:60:85:97:eb:37:85:21:a7:
c8:24:6e:fb:e2:88:d8:95:3e:51:08:30:f4:30:5e:52:92:1f:
9a:8c:0b:5e:b1:96:10:e5:9f:e9:98:40:89:c7:6d:63:34:50:
d7:90:7e:92:09:ce:18:74:35:15:00:37:6c:46:27:06:97:e3:
2b:06:fb:44:84:f3:94:8c:89:2b:9f:cd:32:8a:f7:a5:ca:99:
1b:4e:62:47:52:44:e9:83:dd:dd:a7:27:2e:0a:72:b9:0a:be:
1e:d3:97:72:b1:1d:c9:6b:00:6c:fa:ba:20:43:b1:f4:f7:0f:
f2:97:13:59:d8:26:21:73:aa:d0:bb:88:66:fe:bb:df:61:79:
59:27:c1:65:06:bd:97:66:4a:3e:58:d4:a9:72:23:a1:c2:94:
dc:c3:61:bb:c5:e8:f7:e9:fe:bb:a9:5b:57:a8:66:be:6a:70:
6e:d5:93:8a:b1:da:a1:c1:b5:93:9e:3e:4a:09:1d:2f:01:6a:
ae:9d:e1:a0:6b:ba:d0:dd:cd:08:e7:5f:fc:47:de:e2:11:a4:
59:34:41:48:a8:20:92:5f:54:33:fb:6d:1f:9c:0f:47:e2:68:
ee:36:23:32:dd:41:7b:b2:28:b5:4a:02:4f:ef:8d:4a:97:08:
1a:0c:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:24 2025 by rpki-client