Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
File: 4gShwspKTbAzN142DeMjeQumpbk.mft (raw, json)
Hash identifier: RuLovw101BN8AiKm6d9B+eRq3Qx6RMRA4cxygmyCdRo=
Subject key identifier: 35:CC:C3:D4:D1:1A:7D:65:45:16:90:1F:E3:7A:30:90:6B:F4:95:C7
Authority key identifier: E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
Certificate issuer: /CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Certificate serial: 0194BD4E577A273DA72DA90925418C628974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
Manifest number: 0CBF
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: 4gShwspKTbAzN142DeMjeQumpbk.crl (hash: auBotWU9mUUJy6x+u228EYost7iBpLMksheZTfuDT7E=)
2: gA2VeOc__NflxeLdsWWIIUZ9Deg.roa (hash: ipk5YS27VQlaPqS1epEEueLOZHeXvism8b/2q3vbuaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:57:7a:27:3d:a7:2d:a9:09:25:41:8c:62:89:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=35ccc3d4d11a7d654516901fe37a30906bf495c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:92:64:e3:54:70:b1:81:2c:6d:9c:9d:87:d3:
bf:ec:23:f6:b0:29:89:a0:1b:3c:ba:64:05:f5:51:
29:7b:24:91:e0:f3:13:57:f9:16:ae:83:52:c0:60:
00:f5:67:e1:fb:2b:9d:5f:05:79:82:80:dc:0e:6d:
ff:66:13:66:a0:88:82:a3:e6:48:3c:d8:b0:c8:05:
32:a5:2e:5c:43:38:de:7f:c1:7b:2d:75:ca:33:56:
10:ae:87:9e:51:bb:8e:11:3c:fb:8b:56:a7:d3:0e:
9d:f7:77:b7:69:0e:34:f0:7f:bb:9a:08:8f:89:a7:
ce:71:dd:a8:b9:b8:fb:aa:15:be:2c:ae:39:62:7f:
54:b0:82:3a:25:cf:c7:b7:8a:60:4c:c0:f3:bc:9b:
e3:ad:37:14:00:73:d1:46:47:a0:9e:0c:bf:ff:3a:
93:8a:8d:1c:c1:b0:52:c7:0a:d2:7c:66:79:28:92:
18:f5:0f:5f:e6:c8:9d:52:d9:0b:6b:15:a0:72:37:
ab:40:7a:7a:29:24:95:e3:c8:50:63:f5:9c:2b:34:
58:9f:79:20:98:b1:2c:55:75:02:19:21:6c:2b:e5:
8e:b5:f5:af:f4:77:fe:58:10:26:ef:00:78:60:1f:
e6:55:2c:ac:07:6b:4d:9e:60:14:66:d7:d9:eb:a8:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:C3:D4:D1:1A:7D:65:45:16:90:1F:E3:7A:30:90:6B:F4:95:C7
X509v3 Authority Key Identifier:
keyid:E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:63:d0:a3:56:57:bc:1f:cc:ea:f6:36:24:5c:8a:89:d2:ee:
c0:fe:9e:fb:ae:3f:04:84:bd:79:20:90:46:b4:41:20:44:fc:
8e:44:df:69:39:33:ea:04:d2:6b:01:da:84:2b:0e:56:45:e5:
9a:d2:f7:fc:25:8e:b9:5d:12:6a:aa:06:f4:0d:77:34:fc:0b:
19:09:12:1e:34:58:47:34:9a:58:24:cf:eb:e2:71:8f:92:e4:
49:29:d7:56:d5:38:ee:70:a3:9b:df:39:0e:01:07:2e:2d:c4:
28:b2:7e:0b:16:96:06:d4:06:10:0c:03:91:bf:1a:36:c7:f7:
9b:ed:56:3b:13:30:8d:f8:da:3f:d0:10:74:c7:a6:83:b2:f5:
bf:13:2c:3f:73:25:d2:c1:cf:57:ac:50:9d:cc:b3:ba:64:5f:
e5:2e:c9:64:08:00:d4:d6:1c:15:43:e9:1b:96:e4:be:2c:f7:
02:54:5e:2d:e3:7e:95:f3:b4:df:48:e8:82:cf:d3:c6:fd:5b:
07:29:8c:b4:85:16:96:e1:76:c7:9c:54:f4:d2:16:40:1b:2f:
cf:c0:92:60:90:95:61:34:8c:73:8a:2c:55:c8:b2:26:b8:30:
70:ca:fc:1e:c8:1c:c4:2c:dd:d1:6f:98:f7:9e:7e:24:7d:09:
b8:ea:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:47 2025 by rpki-client