Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: iyy0UtYKWGRYVxhq7wGApkIejz5Q84Cz9XB9aJ8i8mg=
Subject key identifier: 28:E7:6C:2A:18:44:D2:03:1B:3E:BC:0B:28:52:2A:1D:D8:4C:B5:12
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 0194BBCE8F3C496FCA001C589F06141F4ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0691
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: PqQiMerZT6vxsERqPMJaWF5uw13w6gAVt/WqEFEnOUg=)
2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8f:3c:49:6f:ca:00:1c:58:9f:06:14:1f:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=28e76c2a1844d2031b3ebc0b28522a1dd84cb512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:13:29:db:4e:99:1a:b7:3b:0d:18:f5:86:
a9:5e:9c:a4:08:a4:0e:b8:95:31:e9:74:5e:cb:51:
aa:bf:da:52:58:25:56:e2:b2:b6:89:52:58:92:5e:
3c:a2:d8:ec:59:64:55:a0:4a:85:5d:7e:a1:78:e8:
02:85:dd:91:eb:61:31:c2:78:29:2e:66:36:bd:7f:
eb:77:d5:62:50:b6:64:ca:6e:85:03:b7:4c:36:dd:
51:6c:b4:dd:90:eb:be:e9:0b:f1:3b:3f:67:11:9c:
56:fb:c6:b5:e1:42:c3:a4:e8:cc:50:b6:92:bf:76:
18:6e:8e:1a:01:43:a7:95:cf:cf:6e:eb:eb:1f:cb:
b0:78:f5:44:02:42:d8:be:5e:7f:dd:3f:1e:ae:2d:
73:7b:2c:89:db:5c:30:77:e9:7c:6c:69:81:a8:d6:
a9:c8:3a:64:3f:19:9e:00:6f:61:80:9c:41:1e:ac:
85:99:f7:cf:3a:a0:23:e7:5e:22:72:88:d3:51:11:
6a:92:c7:25:c0:4b:ab:a3:0e:58:1d:59:0e:d9:18:
16:37:94:4b:e2:a5:15:8e:36:19:18:c0:cd:dc:0d:
36:69:27:17:82:18:a3:e8:5d:6d:e3:3e:48:d2:21:
58:67:8a:30:39:56:db:98:a8:d4:69:c4:19:4c:53:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E7:6C:2A:18:44:D2:03:1B:3E:BC:0B:28:52:2A:1D:D8:4C:B5:12
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:59:ca:c9:12:29:b7:83:0d:15:43:59:d1:f3:3e:94:60:
06:7c:54:bc:f6:c7:09:86:f9:6d:59:28:0a:a4:fa:86:72:66:
be:b6:52:4c:f3:a4:d8:7e:91:75:f8:32:9b:ce:ef:04:c3:7c:
f1:b0:ab:b6:82:b2:28:f1:8d:eb:8f:65:d3:ed:c3:30:ac:f8:
e5:69:94:9c:63:19:71:9a:7c:1b:7c:ea:17:3d:2f:36:51:74:
86:8d:0f:24:45:04:00:5a:86:60:a4:6b:18:a5:be:2f:68:01:
3b:ec:9e:84:47:cb:7d:3e:c2:83:04:30:d9:51:9b:70:e1:e0:
f2:b4:94:41:89:7a:5b:81:29:8f:81:74:ae:c4:68:0c:1d:ed:
19:e8:70:f8:ac:b4:85:32:50:6c:bf:37:a1:9b:db:11:d1:87:
01:ec:2a:96:5a:c0:67:c0:86:a5:3a:6d:f9:91:97:da:c8:75:
b4:36:29:c2:5b:00:a3:cc:d6:5a:79:67:da:c8:d2:ca:6e:24:
66:8e:12:92:95:e5:22:96:98:aa:87:d7:34:2c:f7:5b:a6:5d:
a1:05:13:64:3b:e3:59:48:22:03:70:b9:32:c5:b1:22:39:06:
ab:9b:dd:18:ce:c0:4d:89:64:e1:14:0b:c8:f6:8b:de:68:6c:
6e:4f:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:02 2025 by rpki-client