Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/RQHoXAAlxK4pUoBY4jLXN8L0lc4.mft
File: RQHoXAAlxK4pUoBY4jLXN8L0lc4.mft (raw, json)
Hash identifier: /7YovPuwkOx9UqDmT51mgTDRFlm4edLPHym2g1iEIJg=
Subject key identifier: 4F:58:DD:C7:A2:B9:9F:42:05:14:12:D3:B2:C7:5A:86:65:F9:FB:94
Authority key identifier: 45:01:E8:5C:00:25:C4:AE:29:52:80:58:E2:32:D7:37:C2:F4:95:CE
Certificate issuer: /CN=4501e85c0025c4ae29528058e232d737c2f495ce
Certificate serial: 0194BCE0C8292BE6E56070E34C85CCABE1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQHoXAAlxK4pUoBY4jLXN8L0lc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/RQHoXAAlxK4pUoBY4jLXN8L0lc4.mft
Manifest number: 8C
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: RQHoXAAlxK4pUoBY4jLXN8L0lc4.crl (hash: l9hhHb9jOjnjdTk+evBpxKqxMEJAjMjDbf2hKkjqT8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c8:29:2b:e6:e5:60:70:e3:4c:85:cc:ab:e1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4501e85c0025c4ae29528058e232d737c2f495ce
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=4f58ddc7a2b99f42051412d3b2c75a8665f9fb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:8a:0b:69:9f:40:99:7f:cd:55:92:09:d8:
3b:26:88:49:ed:6e:c3:61:58:e0:03:92:e0:0c:40:
f1:e1:0f:ac:22:28:b7:3f:3c:d4:c4:60:e5:25:e1:
84:1e:46:0d:29:6f:ab:56:ce:4f:52:64:e7:7a:ef:
4d:4f:f1:23:33:82:38:fd:53:7c:1d:00:97:33:16:
61:1f:be:34:2f:ac:26:d0:49:00:a4:c3:cc:e3:12:
d5:3a:da:9e:b8:6a:63:6a:b4:29:47:ba:3d:a5:31:
d0:97:f2:c3:73:64:db:f7:99:86:e2:ec:b4:f0:75:
1e:bd:10:50:e5:b0:de:4e:09:31:45:f5:c2:f2:9c:
27:7f:f8:3c:b8:af:8f:cc:dd:b7:8f:7d:e2:7b:47:
8a:52:0f:19:c7:d0:e8:7d:80:20:a4:16:2d:d8:4c:
e7:b3:bc:3f:74:16:05:75:2c:97:de:76:6e:58:39:
ae:34:d0:5b:14:8f:b6:56:80:fa:57:3b:0d:d1:04:
00:bc:a6:64:6a:68:8a:cf:d5:c9:c5:5a:b1:06:d1:
6e:4e:91:9c:06:62:70:f7:32:90:0a:e5:77:ca:0f:
d6:35:ad:d7:f6:16:23:0f:90:53:56:11:bc:f8:e9:
53:8e:5c:05:12:db:4b:7a:3f:f7:96:47:7c:04:4f:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:DD:C7:A2:B9:9F:42:05:14:12:D3:B2:C7:5A:86:65:F9:FB:94
X509v3 Authority Key Identifier:
keyid:45:01:E8:5C:00:25:C4:AE:29:52:80:58:E2:32:D7:37:C2:F4:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQHoXAAlxK4pUoBY4jLXN8L0lc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/RQHoXAAlxK4pUoBY4jLXN8L0lc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/RQHoXAAlxK4pUoBY4jLXN8L0lc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:2b:85:43:f8:92:bb:6a:17:4f:b4:0a:e7:0b:08:74:25:
a7:37:ad:fa:e8:43:24:c3:b7:5a:74:5b:d2:5e:65:18:96:98:
a2:f3:bc:e3:53:17:b6:9b:fc:d6:23:34:13:e8:08:6b:6e:c8:
96:27:d9:37:d5:e8:67:be:5f:42:a0:b9:1c:ad:fa:57:ad:bb:
9e:f0:8b:14:c1:6a:16:9f:0b:be:6a:0b:f3:1c:b5:65:c3:3c:
be:64:ce:cb:23:c3:56:45:03:57:e0:5e:82:f6:b4:82:15:14:
5e:18:c8:1e:ad:2e:0d:3a:d6:3d:f8:aa:08:c1:58:11:50:51:
61:38:eb:7f:7c:dc:34:12:d3:94:5d:69:f2:59:03:75:12:92:
0f:8c:4f:5c:ca:d1:95:2e:c0:cb:b9:1a:3f:7f:fb:c4:4d:28:
74:77:8e:51:cd:66:d4:fd:71:80:fc:5c:01:6a:c8:ae:2f:67:
09:be:1d:64:82:fc:ac:a3:b0:ad:4e:be:02:04:df:4d:f8:b6:
0b:6d:d2:28:6d:34:7d:e1:ca:e0:05:ac:50:9d:7c:bf:99:09:
65:bc:e0:e2:ec:2f:5a:3a:a0:c2:bd:6c:31:b1:d3:8e:87:4e:
85:0f:38:ab:23:29:02:03:ee:26:df:76:52:da:e0:79:3e:2a:
30:f9:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:59 2025 by rpki-client