Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: gZUnJ/VXOdfq8/YN3tPeNhvo/DnqBy6qriCGVZ3GETo=
Subject key identifier: E0:EC:E4:EC:47:9F:D8:CF:08:F0:75:32:8C:01:C4:23:49:40:68:EB
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 0194BC3C0B074D4D2D9C15A015E6F0F78E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0B38
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: 7wLV2Se54frJI6zqJ1qgODxpsGcpwLN/R1vvuCASTvo=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:07:4d:4d:2d:9c:15:a0:15:e6:f0:f7:8e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=e0ece4ec479fd8cf08f075328c01c423494068eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:da:f3:4c:ac:2a:b2:ed:8b:b8:a3:1b:c0:
9c:7b:7d:d2:4e:c0:25:b8:e8:e7:c7:a1:df:f6:32:
af:e5:e3:37:24:1b:1b:3a:0f:c1:14:79:07:72:ea:
83:0a:ca:fa:e6:18:7f:8b:f3:61:98:20:74:9b:bf:
af:57:f1:9e:5e:c4:ff:3a:08:82:cb:ba:b9:0c:cd:
4b:b0:ef:76:6a:66:1c:3f:e2:8a:3a:61:cd:96:bb:
36:c5:05:8c:eb:36:60:47:ea:56:79:56:e3:18:83:
25:0e:30:af:59:e5:7d:fb:57:a4:18:cd:6c:06:c6:
b8:7d:26:65:fe:86:02:46:ae:8b:38:35:c3:da:12:
0d:b0:b9:fd:5e:44:f1:dd:0c:5a:79:0e:7e:0a:e1:
b9:77:36:0a:79:d1:f9:62:1c:c9:8c:01:97:f2:25:
bf:8c:1e:66:6a:23:b3:4c:7d:72:a5:f7:85:e1:ee:
c1:79:8a:70:17:17:7c:5e:d4:d3:92:ab:d1:b5:94:
7c:8b:56:d0:1f:39:7d:0d:55:08:57:c4:da:27:5d:
76:cc:75:c8:84:c0:a9:6c:a5:07:c7:e7:b6:df:02:
58:3f:54:2e:bc:f9:26:1d:e5:07:95:72:09:3a:f0:
8f:1b:31:45:c1:e5:10:04:64:db:76:97:d6:d9:4d:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EC:E4:EC:47:9F:D8:CF:08:F0:75:32:8C:01:C4:23:49:40:68:EB
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ea:d0:a0:f6:82:bc:dd:50:3f:1c:06:14:f5:60:19:7b:02:
0f:2c:27:77:89:85:6c:c2:89:b0:e1:8c:2f:8d:09:bc:00:bb:
73:08:ea:e1:26:7f:c0:4d:3d:00:96:df:2e:20:a3:59:9c:4a:
8c:d1:29:47:30:bc:16:e0:a2:e6:52:df:2c:5f:d8:7e:eb:ed:
3a:5e:aa:2b:32:93:29:af:37:32:8a:d6:27:d0:17:a4:07:14:
25:c0:ed:87:69:49:46:64:11:29:be:f4:30:4c:f3:ff:46:48:
d5:04:f8:76:d7:4c:5f:fc:8c:4b:14:89:11:a0:91:bf:16:e6:
32:3f:26:16:8d:dc:f3:21:2b:8b:60:cb:31:be:57:9e:b5:99:
84:53:d6:05:f0:bb:58:5d:b8:46:26:eb:4c:83:fe:10:1b:29:
8a:5a:22:f8:70:4f:4e:b7:cc:aa:0b:2b:0a:79:41:09:d0:bf:
4f:66:44:59:f6:70:a6:7c:9f:83:61:cf:a1:7d:20:c9:a8:96:
b8:89:82:91:b1:57:e8:7d:51:3b:16:b3:ac:74:72:ad:bf:07:
5c:4c:5b:a7:3f:ee:14:9f:ce:af:e3:fc:54:a2:24:a3:e6:e8:
4d:fd:cf:82:9b:dc:c9:05:33:86:f8:54:be:c5:42:d4:51:51:
ad:2a:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:19 2025 by rpki-client