Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: PUmxl8iiXb+qvu44o09c10zROt3NwKtPoqMmBx/JxDM=
Subject key identifier: 4C:FC:26:74:3E:3A:CA:19:B3:A9:B1:E8:38:22:33:5F:39:28:47:5A
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 0194BCA9B4C5B3BE55EA5508934CB327BAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 1011
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: rpzM9eslv3O1DH1BoxUDhxhN0NrnbL/+AY/jod1LDxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:c5:b3:be:55:ea:55:08:93:4c:b3:27:ba:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=4cfc26743e3aca19b3a9b1e83822335f3928475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:94:2e:bb:d0:dd:06:78:09:86:32:b9:1f:
d3:8d:db:62:1e:9f:c6:4b:d5:cb:f8:f5:17:63:24:
99:ea:c6:4a:bf:00:99:3d:83:ee:16:66:e7:f8:55:
9b:6b:d9:68:e1:14:8e:d5:1e:38:d1:dc:8d:29:73:
34:ff:a3:a2:d1:fd:dc:8c:f9:44:c1:cb:f1:5d:f6:
29:28:ff:f7:aa:cc:5e:8d:ad:48:64:da:27:e9:7b:
c5:f0:7a:5d:77:e9:ee:2e:34:c5:af:a0:c4:6b:d5:
2f:64:75:e0:12:1d:d9:f2:b3:bf:db:21:17:d6:5d:
cd:ca:ff:95:0d:a8:66:60:1a:b8:58:8a:6f:40:8d:
62:6c:de:5c:ad:61:aa:29:43:54:20:8d:89:44:62:
a2:2c:f1:e7:12:3d:22:d4:7c:8c:0b:16:4e:e2:af:
be:08:3e:3d:34:36:28:41:89:cc:f0:b7:60:1f:ea:
26:ad:43:4b:a9:aa:76:c6:0f:75:f9:bd:03:1f:b9:
b5:ce:8c:93:c9:4f:d1:20:f0:b3:c1:cc:f7:6b:b6:
e3:d9:a9:5b:a5:8a:7a:3f:29:72:51:29:15:49:76:
0a:da:47:25:28:74:27:36:2c:e4:a2:c7:71:e0:3b:
14:80:b5:f8:bb:04:57:35:4a:62:79:d4:27:ea:dd:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:26:74:3E:3A:CA:19:B3:A9:B1:E8:38:22:33:5F:39:28:47:5A
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f0:58:b3:97:c6:ea:3b:35:ac:10:2c:52:79:6d:86:f4:fe:
a0:2f:ba:f5:fe:cf:5c:ae:12:82:79:b8:c1:ab:ce:bb:71:4f:
8d:0a:3e:8b:ac:44:ab:59:e4:5e:6e:d2:b8:2b:a6:7c:a0:81:
e3:8a:87:b7:77:7a:16:f7:1c:fd:96:05:f4:3d:0a:ce:0e:fa:
af:05:02:67:ad:bb:9a:f3:db:a3:33:0d:de:d6:75:98:7f:95:
12:5f:c9:39:8f:4e:cc:3a:11:d3:f3:de:13:a1:70:cf:eb:f5:
92:f5:7a:f0:62:fe:27:e2:86:b0:b9:dc:b5:3d:92:52:81:d9:
5f:3b:5c:f7:64:6c:85:9c:d9:5c:50:57:dd:ae:19:0b:b5:81:
17:89:72:8c:56:52:5b:2a:42:b0:b7:39:10:1c:61:1a:f5:61:
51:65:21:9a:09:eb:5c:ad:96:52:ba:d2:d3:19:cb:7d:7d:89:
58:0c:f3:55:55:e3:d9:1e:99:a2:8c:fb:3e:bc:cc:92:c6:23:
d2:88:bc:04:98:7b:8c:2c:ab:35:4d:09:42:26:70:c9:85:c0:
d7:c5:bd:cc:fd:c4:cc:66:87:13:02:ac:23:2a:a5:ac:95:87:
2e:94:47:50:7d:d1:59:bf:6e:4f:f7:7c:83:a2:0d:0d:18:39:
c7:92:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:30:16 2025 by rpki-client