Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File: 4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier: ZgLWOhSyTcHgAaUPSaI0Dnrq3Fnq24nS6bFB8j97oQw=
Subject key identifier: AE:86:42:71:DF:72:B6:E2:59:C6:F2:96:53:20:A0:84:AD:65:1A:F6
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial: 0194BC3C27BDFBB648513EF723C7F3DE24F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number: 0C0B
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: +O7iWu8vvsZblGHqBP3ki7LOgIsxTd9DZYBvIA5SxmQ=)
2: nlxhNU09PYV8ICYRds67uFQ8SD4.roa (hash: 5Mkpw05F7xKd7rn+KAmOk8IiGnvRNLjGed3AF2L+Quk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:27:bd:fb:b6:48:51:3e:f7:23:c7:f3:de:24:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=ae864271df72b6e259c6f2965320a084ad651af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fd:5f:9e:29:6c:9c:7e:3f:da:a8:32:d7:85:
09:a5:19:d7:71:e7:b3:df:39:e2:77:61:fa:44:d4:
93:e9:a4:c3:8e:93:40:4d:6f:02:ce:d6:4c:31:05:
b4:68:82:16:92:77:f7:1a:ac:be:66:d5:a0:bb:f5:
b1:0d:cf:95:ed:f0:09:b4:22:b3:b2:e9:52:33:61:
b2:5f:bc:43:eb:46:25:d2:75:65:a9:7e:dc:58:43:
46:f1:00:1c:4c:a0:bc:f6:7d:1f:e9:49:bb:b6:7b:
0c:2d:bc:aa:d5:29:9d:e5:ad:69:e1:ed:95:65:22:
3d:2d:28:5e:47:3f:96:da:c3:94:1c:82:fd:c5:0a:
01:ad:83:6d:c2:48:d3:74:d8:81:6a:4f:79:dc:e4:
c8:51:08:ba:76:3c:e5:c9:1b:39:21:a4:b9:b3:3e:
b9:df:7a:d0:d8:70:30:fd:0b:fa:d2:e0:8f:0d:91:
09:00:ea:91:9f:23:1f:a5:a6:52:bc:6c:69:93:15:
59:90:10:f7:5f:2d:c5:18:7c:bf:4e:09:46:a3:c2:
d6:37:c0:68:b8:a7:63:42:1b:89:59:e1:06:3e:1f:
a5:db:fb:9d:81:5b:a2:a8:fe:d6:b7:15:90:b3:2c:
f7:7b:db:66:dd:ab:cb:5b:68:6f:7c:33:93:83:3b:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:86:42:71:DF:72:B6:E2:59:C6:F2:96:53:20:A0:84:AD:65:1A:F6
X509v3 Authority Key Identifier:
keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:12:c9:aa:34:37:3b:b3:ec:c0:ca:eb:da:33:bb:95:e2:19:
b0:42:16:66:9c:86:da:b3:68:7e:57:18:38:07:27:0c:a3:8d:
58:e5:b5:03:4f:20:c4:d3:a6:ee:5f:6a:53:db:7d:ff:7d:bc:
fc:ae:b5:0d:c2:67:17:6a:2c:12:d7:51:dd:7a:03:fc:0d:53:
25:80:dd:c0:40:12:6d:25:d3:69:98:25:74:aa:c8:a9:d1:65:
52:16:df:c1:6b:44:30:f8:e9:5c:d5:b7:c2:5d:71:34:49:2e:
58:b6:09:1b:d1:b0:03:f2:fb:fb:97:3d:cd:b3:ca:5b:5d:ea:
5b:64:ad:6d:f1:bd:27:7d:4c:d7:eb:cd:8a:9a:4d:f4:87:71:
4e:eb:87:fe:82:06:1b:5b:d9:d2:81:82:37:ac:b7:9c:f0:4f:
ef:1a:6f:6f:4b:7d:db:b8:b2:9d:f1:77:14:48:a7:e1:77:f2:
00:67:f2:44:5f:c4:eb:b4:cb:5d:63:ab:4e:7e:59:0a:33:a0:
dd:0f:6e:1d:60:71:90:95:f7:0b:fb:c4:b4:15:73:9e:8a:b4:
42:35:2a:77:2a:c5:62:b2:2f:87:d1:9e:64:d9:3c:66:0c:2d:
3b:2b:c9:0d:03:af:b6:1d:a3:1f:8a:eb:54:ed:05:06:f3:93:
7b:3f:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:27:51 2025 by rpki-client