Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: Imueo5LDIkMhfKlp2yltVJZVALGoTkJMOU2LGk8UVYE=
Subject key identifier: 5B:3E:3A:25:2C:A6:A7:2D:15:62:68:EB:DE:FE:51:03:C8:25:B8:D0
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 0194BC3CA15707B9F1151CEDBEA47F816109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0C4A
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: mZjmAYZh0l4HaLT0lRuL2VwKyhDdE9+yqWJLkkWxCA0=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a1:57:07:b9:f1:15:1c:ed:be:a4:7f:81:61:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=5b3e3a252ca6a72d156268ebdefe5103c825b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:1c:3a:87:bc:67:3c:eb:41:0d:c8:b9:a9:
ae:b3:12:ee:36:d4:4c:34:3e:2b:4c:19:c0:a8:03:
85:90:09:44:ae:1b:94:42:8a:b4:d4:6a:f6:d8:9d:
0c:fb:91:aa:d6:9d:f8:f9:7b:6a:e6:f4:27:29:aa:
4d:dc:bd:e5:a1:5f:ac:66:4b:a8:57:8a:5b:1f:b2:
b0:50:bf:5d:80:b0:ee:5f:86:dc:c7:89:34:0a:44:
0a:15:5d:54:bc:ec:f6:ef:57:31:62:33:25:83:92:
12:c2:24:da:db:06:29:ce:27:ce:0f:7e:09:eb:ff:
7d:ec:40:d9:5a:c1:6b:4d:95:7f:ab:bf:fa:94:13:
9c:cc:ca:65:81:85:a6:6b:02:69:a1:c7:11:db:bf:
d2:83:74:e9:3b:fd:ce:84:d5:6e:7c:f5:da:9c:64:
2a:e8:6b:5d:84:fb:29:96:ec:ce:53:16:1a:8a:5f:
46:64:fc:61:91:2b:20:99:af:b5:51:be:20:eb:a2:
d8:1e:4c:b4:7f:5b:41:a9:aa:c9:19:e8:88:23:f8:
53:66:c3:7e:28:ca:5d:26:fd:45:9c:a1:42:2b:36:
43:0e:25:e3:ac:48:c2:a6:fa:4b:5d:ee:47:f5:71:
87:07:36:c0:0b:79:c5:3a:ed:5c:75:b0:89:fd:f0:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3E:3A:25:2C:A6:A7:2D:15:62:68:EB:DE:FE:51:03:C8:25:B8:D0
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:19:f5:2c:de:9c:22:8e:3d:de:44:ae:cb:96:70:d5:51:78:
1b:d4:68:76:b1:d8:72:02:40:25:d5:37:8d:64:fc:21:44:3f:
85:d4:13:03:ba:e1:d9:d3:75:9c:bc:b0:02:92:e0:14:2a:7f:
ba:60:c6:64:ec:8d:eb:1b:64:13:89:2e:d4:16:2a:4b:6a:37:
3f:00:cc:aa:07:02:01:dc:dd:fc:3d:1c:29:d6:1c:8c:e7:a1:
d3:a9:81:93:f1:f5:2c:08:2a:b1:3f:b3:41:39:4c:e5:e1:e8:
ea:ba:75:a3:a3:69:b1:cf:25:19:c1:2e:0b:d0:c3:8b:02:00:
ee:99:45:12:28:0e:3a:a7:51:87:86:05:43:08:27:9e:41:7f:
df:e6:15:a8:02:87:6b:37:91:bb:8f:6f:ab:1a:20:d1:5d:eb:
17:85:cd:33:5b:e1:8c:ca:c8:5d:29:43:3a:a6:57:ee:6d:4e:
2b:f4:bd:62:08:f4:71:3a:bf:0c:84:19:75:98:af:f0:97:ab:
06:ea:5a:a6:87:a0:af:24:db:b4:c1:3b:3f:6a:10:c3:02:96:
4c:71:4d:cd:52:84:8a:dc:64:8e:26:27:f9:a3:95:3e:8a:42:
c5:80:42:58:d9:08:dd:82:fd:91:9d:a2:86:07:eb:ef:fb:13:
b6:8b:ce:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:58:20 2025 by rpki-client