Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File: 4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier: KQD5TjQtHsWYScCS0sYEj4XxTdLeIJMshDoCKSWNom4=
Subject key identifier: 45:05:EA:A3:A9:B8:A8:3F:37:46:B7:64:5C:9A:D2:B5:DF:44:A6:16
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer: /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial: 0194BC3BBA878432219B33DE4EBE39AE0C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number: 0D12
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: 9g77dza1v4lDnjOGCB7Z3FezTxYyHXGIDdSElSx8SpE=)
2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:87:84:32:21:9b:33:de:4e:be:39:ae:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=4505eaa3a9b8a83f3746b7645c9ad2b5df44a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:8f:86:6a:59:52:96:59:c6:b1:4f:60:08:
6a:fe:37:fa:d0:9c:c3:9b:65:df:78:e8:d4:34:07:
70:c3:32:84:5f:cd:5a:80:c1:dd:3d:d7:4d:91:82:
1d:d6:90:54:61:a7:a9:d3:e7:1e:e5:95:42:df:66:
b7:8e:dd:68:23:9d:4e:a6:e9:ba:4a:bc:ea:09:91:
30:9d:2e:df:00:46:4c:49:63:da:05:51:88:4a:df:
bd:4d:c4:bb:bd:b7:96:f8:92:e9:7f:89:03:58:00:
c9:20:83:90:ca:bd:0b:2f:cc:59:d2:35:ba:9c:47:
9a:e1:5b:22:64:0c:31:b9:c4:9e:61:46:4f:b4:43:
df:22:4f:06:3f:44:31:c1:70:7b:a7:5d:97:a3:a9:
90:8e:68:0b:5d:40:c6:c6:bf:54:d9:a8:29:75:83:
54:fd:d7:d7:b7:34:c3:b1:3e:03:ad:30:b3:25:5e:
f3:34:6d:cf:b0:db:90:8c:24:59:e1:1e:1f:d3:bb:
c9:41:27:e9:3b:be:49:b9:e7:b4:9d:83:9e:ff:99:
30:42:ae:be:14:4f:dd:5a:77:64:a1:22:5e:91:fc:
4d:2e:bf:20:90:3f:5e:06:04:9a:cc:4b:63:5c:6b:
c3:e2:03:fb:b4:b8:84:47:11:5e:23:8d:73:b0:de:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:EA:A3:A9:B8:A8:3F:37:46:B7:64:5C:9A:D2:B5:DF:44:A6:16
X509v3 Authority Key Identifier:
keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:c0:56:5a:f5:db:b0:fb:af:0f:61:9f:fc:11:c2:d1:cd:
0d:4b:5e:6b:84:ca:a2:08:f3:a6:c8:8d:66:77:ae:86:45:4b:
23:34:cd:8c:bc:9a:4d:0b:f4:92:f0:da:86:6a:a8:1a:34:21:
55:9c:d7:7a:7d:34:44:56:5f:40:cf:76:ba:5c:52:7b:10:f6:
cc:f0:1d:d8:8b:cd:83:64:36:2b:df:bb:98:6f:b5:1c:f7:5f:
0d:bd:5b:1e:8e:66:06:64:2a:4c:fd:a4:45:d4:98:72:d6:45:
68:cd:ff:5e:a3:86:70:9c:a3:db:7a:d6:1b:9f:a4:a7:74:51:
a2:ca:72:2d:93:0e:07:fe:b6:16:01:d9:99:77:d5:e9:99:59:
53:99:cf:a4:43:9e:f9:b4:fd:fd:3a:c1:ef:e9:2a:6b:34:d2:
72:9c:51:05:08:c6:a3:35:6a:95:ae:ad:16:78:93:5e:85:27:
39:16:eb:4d:3d:27:15:82:28:95:af:b4:24:a9:08:db:86:7d:
c6:8b:7e:d6:cf:db:e9:10:5b:74:0e:6e:f2:9a:2c:6f:5d:be:
3f:18:3f:2c:a4:99:df:d6:dc:be:d3:24:c1:16:b8:d0:41:59:
59:97:7b:5d:dc:aa:0b:98:bc:59:71:89:16:01:fd:d4:26:e2:
50:aa:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:56 2025 by rpki-client