Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: uEm3joUkbPH3u07DJxKhgWoGeh6BKlmTLP2+d47c4Og=
Subject key identifier: 7F:82:EB:49:27:51:A0:18:56:AC:29:CA:A2:35:9B:93:7E:71:03:94
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 0194BC728CA970763D3300148F36C90D9801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 02E4
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: fyoBGVf95dCA3Yk/nIf9e/qoh9au8j3L5tOp9+J3aUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8c:a9:70:76:3d:33:00:14:8f:36:c9:0d:98:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=7f82eb492751a01856ac29caa2359b937e710394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:2e:fb:1d:39:69:99:77:ad:d0:f3:85:62:
11:ba:35:f4:e1:f7:0b:c3:ae:43:95:45:2d:5b:fe:
8e:c0:bc:f9:4b:a0:b2:de:8e:e4:7f:82:a9:bc:1c:
82:c9:1d:cd:30:ff:aa:67:1f:98:a2:f6:65:7b:94:
58:b7:8e:e3:f6:11:af:e7:9b:c9:7f:75:19:3c:b5:
55:7a:a4:2f:e5:14:2d:7a:8f:36:9d:95:e3:e8:f0:
db:3d:d3:0d:7a:0d:ee:e5:9c:1f:3e:7c:56:d8:e3:
f6:7c:81:58:b1:fd:25:f0:d4:67:98:18:4e:bd:f0:
60:bd:ee:02:98:4e:92:24:d3:9b:b4:6d:86:1b:d1:
c0:4e:7a:f5:23:a6:39:b2:df:45:87:79:50:9b:62:
69:ea:8a:91:af:06:a2:4d:56:99:01:5d:eb:b8:09:
9f:90:7a:e6:2c:4a:f0:ac:20:c8:1d:8f:57:4b:29:
28:78:1f:a0:14:22:39:8c:49:d0:92:d1:7b:9c:cb:
62:24:6c:f3:c6:65:dd:a1:c7:53:99:39:af:65:5f:
28:33:4c:c3:72:28:be:e6:d9:7d:12:ce:be:0b:90:
23:68:b7:f0:7d:ea:a1:7e:7a:3d:29:e1:e8:80:f1:
c0:c8:ff:6c:80:7e:ed:67:7b:1d:fc:e5:73:0b:d4:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:82:EB:49:27:51:A0:18:56:AC:29:CA:A2:35:9B:93:7E:71:03:94
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:48:f5:73:8e:ba:13:48:f5:30:41:77:55:cd:27:7a:4a:
70:f6:45:33:a6:69:78:7b:26:05:73:d6:1f:66:94:07:a0:d7:
ae:80:5e:64:ca:af:12:0a:3d:9d:ee:51:59:3f:dd:bc:36:28:
35:40:9d:5c:90:21:34:c1:cc:d5:e3:04:ff:9c:ba:b5:60:0f:
e8:ac:9c:66:bf:00:0e:b1:85:d2:d9:71:4f:db:fb:d6:fe:36:
91:68:4a:10:3c:41:45:77:26:c4:7c:6b:11:c9:9d:d2:42:03:
08:b4:50:8d:62:36:9f:79:e3:64:f5:f9:97:90:58:7f:bb:63:
a0:2f:10:1c:05:f3:47:80:d5:e9:74:b6:f3:d4:cd:69:dd:fa:
00:65:c0:1c:16:5e:55:c1:ca:5c:ab:8c:4e:cf:e9:44:8f:2f:
47:5d:80:6e:a9:7a:5d:ce:93:d7:3d:fa:8b:26:a0:ac:68:6c:
0f:81:56:5b:9d:ec:b1:19:fc:ed:3e:9e:2d:72:85:09:b5:6e:
aa:47:c6:5f:fa:dd:74:18:3c:8e:3b:14:08:94:3f:b0:30:d5:
db:40:48:c7:2f:7b:a3:18:24:14:7c:55:63:37:b6:a8:cc:9d:
c1:36:bd:a5:c1:ad:28:86:04:cc:0a:41:85:cb:e2:b2:03:57:
6c:ae:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:20 2025 by rpki-client