Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: pdiaZMZ16UzJOii9Mq/9dJOqPoicStkBLnehXPZ14jU=
Subject key identifier: 99:0C:9B:31:02:93:E3:1B:F1:22:29:CC:81:A1:6F:A2:41:E1:C0:E8
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 0194BCA96915FA4CEFEF3C7216209CBC7914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 07A0
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: CrtwAj/M19/c6ulVNVOgc7OBPCp5+oEWW/lVg7pbmQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:69:15:fa:4c:ef:ef:3c:72:16:20:9c:bc:79:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=990c9b310293e31bf12229cc81a16fa241e1c0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:49:46:3a:c7:45:b3:09:02:f1:62:ea:3c:
62:b4:90:8a:aa:f1:ce:6b:10:9a:d7:7d:29:77:0b:
26:6e:ab:b3:6a:5d:31:4e:31:25:f7:cb:07:75:5e:
f6:9a:88:e8:fe:75:92:26:17:d1:c4:e8:d6:6e:33:
a7:95:7c:ed:41:c6:5d:29:01:32:73:fe:82:8f:56:
b1:37:4e:1e:8e:a9:46:56:65:a4:de:74:b3:54:a0:
fc:87:86:82:7f:15:31:83:98:38:9b:27:c3:c4:d8:
1c:6e:13:c5:93:bc:8e:ec:49:0a:2e:df:c7:92:02:
77:8f:ed:d2:c7:c1:2e:70:69:08:2a:a8:8d:4a:0c:
1b:9c:0e:61:70:b2:d1:26:52:1f:c2:47:34:45:b6:
f5:a7:7c:c6:fe:8a:fb:b4:a2:3a:90:3a:d2:e1:cf:
3c:f6:d3:ef:d5:eb:63:94:d7:d6:b8:c8:56:b7:45:
fb:7e:6a:e0:b6:1c:bf:cf:de:a8:2b:3a:4c:7f:1c:
e4:c6:26:37:43:ab:9c:f8:31:00:00:68:49:c5:55:
23:fd:f8:71:14:82:10:dd:23:cf:f2:51:d4:02:3b:
9a:a4:da:cc:ea:0b:79:7f:c5:27:3d:f1:08:af:90:
fa:f7:a9:b4:89:16:de:9e:fa:0f:64:01:c5:fc:7b:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:9B:31:02:93:E3:1B:F1:22:29:CC:81:A1:6F:A2:41:E1:C0:E8
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:72:e5:65:3e:1e:25:61:bb:d0:8f:a2:6f:09:2b:f6:70:d6:
a4:f9:8d:91:c5:be:86:b4:a3:cf:65:79:dc:17:69:bd:43:a7:
c0:12:af:9b:1d:9f:5a:72:4d:41:ef:18:0f:ab:8d:03:78:16:
9b:9f:fb:6c:e4:4d:61:da:11:c7:61:27:8a:fb:9e:bd:7b:9e:
d9:a6:dd:fa:3c:94:48:ac:32:51:e2:28:9d:65:09:5b:a3:73:
8b:88:80:c7:cf:d9:b9:78:ed:62:4e:81:53:f7:14:f3:48:c2:
ea:e0:32:06:03:29:94:44:d1:98:cb:f8:7e:0d:6f:89:d0:3d:
1d:9b:0d:04:72:b0:a0:f1:4e:6a:b9:5d:f4:38:27:63:0f:15:
28:89:9e:6b:ca:63:d3:c4:d7:90:65:4d:b6:0d:03:85:b5:3f:
75:8f:3b:16:07:86:4d:f9:b9:db:e3:9d:27:03:0e:4d:1d:8e:
be:13:2d:06:4d:75:f4:76:c2:c4:0f:4b:e2:d2:f1:c9:17:8b:
4a:9a:8a:eb:55:39:ea:fb:df:dd:0b:9d:13:42:c3:91:f3:81:
60:dd:54:04:a6:c8:fc:b8:a9:3f:27:d2:18:13:05:2f:8b:6b:
87:bf:fc:13:66:2e:7d:cf:96:9e:33:18:fc:84:1c:ff:86:2b:
f7:7a:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:30 2025 by rpki-client