Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: 1Y3k+efn+Q+FG0z2/EsQ67VPd739Fn16veTVQAbwZAM=
Subject key identifier: 23:CC:26:58:C2:C8:AE:FF:D6:1F:3C:70:8A:DC:63:BE:CC:75:C9:58
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 0194BCE0DF6367112D29B5565F7789614AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 137E
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: 8k9AIyiWPtLAhPEqPOP/OHpSYxj6QpCgfjbocaxXTQs=)
2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:63:67:11:2d:29:b5:56:5f:77:89:61:4a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=23cc2658c2c8aeffd61f3c708adc63becc75c958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:de:8c:8d:cf:22:3a:c3:59:a0:73:9c:19:
ca:45:15:4a:3a:d8:f8:94:9b:21:8a:b3:4f:11:20:
74:3d:0a:10:52:06:74:5f:b1:a3:be:f7:0e:f2:93:
a4:48:33:3e:72:47:fa:15:93:5a:6d:ec:81:3f:d7:
dd:01:16:d5:83:51:d6:41:ec:54:42:12:83:d2:38:
11:78:2c:5d:26:a9:ad:22:ba:de:2a:ce:58:a4:20:
13:a5:48:ee:70:c6:45:b4:ea:04:85:31:1c:4f:d5:
35:ca:ff:9f:54:e4:7f:18:a4:10:da:5f:6b:10:49:
0a:28:83:2f:3e:71:1e:f1:73:8e:dd:89:ac:9b:e3:
3e:28:58:16:24:92:b6:bb:20:b3:af:34:44:07:78:
c8:53:8f:ef:60:04:f5:38:5b:aa:e1:47:90:c0:12:
57:b7:99:4b:00:50:d0:56:98:84:e7:0f:65:25:e4:
2b:43:e5:05:b6:97:ba:89:7c:2c:ed:90:73:b5:e9:
93:5f:ba:b4:96:04:14:13:f0:a0:28:37:9c:d1:a8:
e9:17:40:ed:85:f1:45:b2:6a:c0:b2:e3:04:e6:ad:
a2:7a:26:4f:0e:b3:da:44:95:81:87:66:29:ef:1e:
b0:ef:d6:11:17:42:07:a7:b7:46:25:12:b5:80:1b:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:26:58:C2:C8:AE:FF:D6:1F:3C:70:8A:DC:63:BE:CC:75:C9:58
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c7:4a:af:bf:5a:8b:34:40:f8:a6:00:d0:84:1f:06:97:d9:
56:96:2a:48:0c:3b:db:e5:9e:fc:3d:2d:a3:de:b8:ce:89:a0:
5a:d3:af:c1:48:32:97:5b:6f:ed:1e:c3:df:17:bf:90:a7:3f:
89:d6:d1:c8:c1:79:04:7a:b3:84:de:4c:20:02:83:2e:42:15:
1e:54:26:34:76:18:35:a5:42:b8:c3:4f:4c:4a:7d:a4:e0:4a:
cb:4a:e9:1c:3c:a8:0b:41:76:7d:24:3a:52:7a:7d:4f:1a:93:
65:e2:3a:f4:40:92:0d:c1:d1:33:53:07:e1:a8:35:7a:02:11:
7b:36:68:18:36:86:e8:2f:22:46:57:42:8d:67:de:d2:ce:ed:
d6:e9:5f:76:62:9e:3c:5d:c4:60:5d:9a:85:99:33:17:97:4c:
a9:0a:32:16:35:66:6d:db:9e:50:77:f9:f1:d0:25:11:7b:d3:
cd:d6:65:13:eb:0d:fc:9d:25:0f:ac:ee:23:ef:48:26:28:d7:
88:77:df:4d:b5:d4:f5:6c:33:47:21:71:90:64:1e:62:c2:33:
6a:c3:3e:f5:16:70:73:13:77:d0:b7:56:bd:69:ef:a1:cd:9e:
40:ef:1f:ab:0c:25:a1:98:82:d6:71:41:c1:bf:8a:5a:97:13:
87:1f:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:36 2025 by rpki-client