Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: +ZyHjE1UX9qjUHWklREZdDBjJKkRW3WZS4AMscwYaaw=
Subject key identifier: C8:B9:7F:7E:58:68:4E:57:4F:E2:85:9F:8B:07:85:5A:E0:26:A7:25
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 0194BD857C4B1243D13470DC6D198299689C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: ONadXa0ES+N9OUUkraR+/c5te8BZNtEydllgCdWM70w=)
2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:4b:12:43:d1:34:70:dc:6d:19:82:99:68:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=c8b97f7e58684e574fe2859f8b07855ae026a725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:82:99:0e:b3:9e:04:c7:e0:a3:7d:59:c3:
2a:23:b3:75:7e:d6:e4:d4:48:da:62:8f:1f:77:b0:
89:2f:20:09:88:0b:26:22:7d:6f:f0:16:a8:c2:a6:
78:7f:b2:bc:94:c1:ab:36:3d:84:f2:a6:1c:de:8e:
cc:22:2b:dd:17:b6:3b:a8:cf:c6:3b:e4:a1:99:fb:
4f:dc:0c:de:32:a6:4c:e7:d8:a4:1e:b1:4e:e3:99:
b0:11:d6:55:e7:05:32:94:70:80:be:8b:2d:5d:3e:
46:1d:a0:1b:21:34:9f:b1:b7:a2:4d:69:10:20:ab:
4e:60:bd:80:bb:f0:43:57:a6:e6:59:4e:de:7f:5e:
53:a4:ae:ee:64:c5:63:cb:34:14:c5:78:b8:6d:32:
92:52:24:ec:ff:29:19:71:4c:99:da:b0:6e:11:61:
ab:b6:67:1c:78:37:5e:d8:62:1d:6a:cb:05:e5:cf:
79:76:d9:4b:7d:3e:8c:59:05:6b:a6:2f:b9:fd:d2:
d4:10:7f:a2:61:ac:49:c2:dc:64:9c:7d:73:59:12:
0b:1f:c7:f7:09:34:29:c5:94:f4:7a:c7:b5:f0:76:
08:9c:e2:28:17:ff:71:8b:df:dc:07:7c:05:54:cb:
7b:37:9a:11:4b:23:e1:1a:fd:96:4b:50:f6:01:89:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:7F:7E:58:68:4E:57:4F:E2:85:9F:8B:07:85:5A:E0:26:A7:25
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:06:40:07:70:1d:38:6a:99:66:95:7c:2d:cb:c6:98:a7:
bb:2e:2c:ba:9b:03:ac:23:3b:f3:cb:c4:9f:85:16:83:ef:06:
8b:bf:7a:f6:4b:79:c8:13:56:81:b1:fb:71:f6:ce:c6:ff:00:
ca:39:2c:ce:39:a6:a8:f3:f8:44:72:1c:79:64:a8:56:bd:6a:
7e:ba:45:06:b7:6f:77:84:66:e7:3a:79:cd:3f:01:70:6a:25:
c6:4d:ba:17:6f:d7:87:b4:08:f0:6c:19:38:54:3b:eb:27:46:
b0:05:b0:39:f1:c7:73:e8:7d:ec:10:9f:58:dc:d7:a1:ed:cf:
2f:17:62:ca:72:ed:02:58:fc:01:b2:b1:4e:ce:3b:cc:78:79:
66:f3:24:0a:8a:7f:61:63:cf:5e:b0:47:28:f1:a8:81:f3:b6:
94:ff:20:15:83:86:87:10:59:f4:78:40:2a:c4:c5:bd:2f:dc:
3d:c8:41:2a:e4:59:58:ec:5b:7d:37:96:23:e3:56:c6:18:a9:
7e:c0:9e:f9:65:4e:f3:a6:cf:13:22:a6:31:f8:fa:64:e7:c8:
ab:28:89:ba:ac:70:a1:58:a9:71:81:1e:99:4e:17:46:65:eb:
de:76:7c:70:bf:9b:b7:b0:8f:26:ba:f5:47:e4:62:c6:3a:30:
d0:7a:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:17 2025 by rpki-client