Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier: icJ28HVsCh2U4iLoJ4tA5Br3KByl83FHNwWPp4GVsp0=
Subject key identifier: A2:1B:3E:40:05:E5:C4:47:EA:70:AF:33:01:AE:C3:E9:AA:8E:C8:E6
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial: 0194BCAA2329562EEBBF005EAC9BD53BF5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: GirYQ15nKtV366AGMHnIhvUf5E2cS3v3xyxNdU3GDlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:29:56:2e:eb:bf:00:5e:ac:9b:d5:3b:f5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=a21b3e4005e5c447ea70af3301aec3e9aa8ec8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:33:91:85:20:60:83:a6:c0:c5:69:ab:79:
66:87:06:d1:5a:6c:92:ee:cf:22:7f:7b:44:40:49:
61:f9:04:69:1f:33:89:6a:cd:d6:5e:dd:36:df:b9:
b7:f6:8c:6d:fc:e6:38:ed:57:7b:49:f2:fc:6f:bc:
16:23:a2:80:99:dd:62:df:a8:8e:ac:b4:48:ef:14:
b5:62:17:47:60:04:e0:c0:d0:14:3c:51:07:22:39:
07:85:b3:20:af:d8:fc:4d:49:ce:8e:e1:92:54:06:
5a:3b:2e:53:01:1f:f6:2a:91:5f:3f:79:ae:48:64:
04:80:2d:b1:28:f1:36:79:e3:69:35:28:6a:61:25:
5c:1d:c4:44:ec:f0:8b:82:31:b7:65:f7:e7:c6:50:
26:3b:69:4b:0a:13:df:59:36:d6:a3:2e:1e:be:82:
66:0c:83:19:69:f5:4f:d4:24:b6:0e:a0:02:e1:ca:
17:a4:ec:b3:cd:3a:31:85:a7:05:9e:82:55:dd:9f:
08:d9:29:4c:4a:6a:62:85:ae:b8:0e:e4:f1:bd:eb:
31:16:7d:1b:0b:c5:3a:22:44:5b:37:c2:14:49:77:
03:7b:3f:64:91:41:d4:69:96:95:25:fe:27:9d:9c:
f2:77:63:6d:97:ab:a8:d8:c4:ec:ba:1d:97:7a:7a:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1B:3E:40:05:E5:C4:47:EA:70:AF:33:01:AE:C3:E9:AA:8E:C8:E6
X509v3 Authority Key Identifier:
keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:ce:03:b9:4b:bf:ad:16:fa:fe:11:b0:a0:e5:58:09:e4:
8b:f9:18:36:d8:0d:c0:68:a8:b9:aa:ba:f9:b0:a6:df:6e:5b:
cb:87:ad:8a:99:65:a2:db:ca:e0:d5:64:24:87:40:5f:b9:66:
e3:6e:23:de:7f:35:3a:a5:0e:56:61:e0:87:ed:61:aa:1c:3f:
2a:f9:e7:d1:3c:c0:8d:b6:2b:fe:39:df:4e:75:55:df:c3:8f:
76:d1:a4:22:3a:68:96:87:9f:0f:07:ac:54:70:91:d1:31:2f:
bc:b2:92:41:be:48:0c:67:f1:bf:a3:84:e8:e1:2f:5b:9b:62:
ab:58:2f:55:3a:bc:f8:1d:2a:61:36:5e:fd:7e:61:57:ce:ef:
c6:ec:20:a7:27:c8:de:8a:e5:f6:1c:8f:73:d5:60:20:17:26:
31:56:d2:29:77:30:ec:f5:40:2d:10:0e:b0:95:35:6b:ce:4b:
f7:35:3a:ee:cc:69:4f:d7:67:9b:1b:36:4d:ee:87:93:df:db:
d8:a0:44:cb:e0:17:9e:d5:2c:f1:1d:a9:6b:9a:71:1d:de:3f:
19:1a:21:8a:8a:c7:20:82:37:be:4e:17:9d:bd:d2:3e:60:9a:
fa:d9:1a:10:26:58:33:a3:70:31:12:c8:bb:be:1f:45:72:2b:
f8:51:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:42 2025 by rpki-client