Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
File: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft (raw, json)
Hash identifier: U4mB1A5kAEc3ycLhXsGASGRJ/tg8PviVA4pco1XHOa4=
Subject key identifier: 70:F2:7C:ED:54:F1:AA:90:53:4C:5A:D0:3A:F3:A3:63:BB:CF:7F:20
Authority key identifier: E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
Certificate issuer: /CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Certificate serial: 0194BD17A91F983E6E34EDBF99F9249255B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
Manifest number: 0F5C
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl (hash: oM7l1ulP12pMPl3tYG5AB3R7S4Bf53yk4yD3pmRu2jU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a9:1f:98:3e:6e:34:ed:bf:99:f9:24:92:55:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=70f27ced54f1aa90534c5ad03af3a363bbcf7f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:97:96:ec:a1:96:f9:47:16:9e:d9:e5:f8:
92:93:65:69:37:c1:6b:16:c5:58:1c:23:d8:44:4e:
76:4f:44:d5:5a:14:23:39:76:c2:44:70:c5:50:aa:
7f:80:34:56:2c:34:d6:e2:43:5b:43:ce:72:0b:31:
60:ed:9a:99:80:0d:b7:47:c8:ba:8a:9c:52:80:cd:
c7:33:07:53:f6:dc:59:c5:6c:62:dd:1d:65:3a:4b:
7d:ab:66:3c:89:4e:d1:60:9d:19:78:1a:c5:2d:bb:
ae:c4:b8:d9:a9:32:56:d3:5c:1f:e0:cf:75:2c:0b:
e9:c6:29:2d:f0:c0:87:4a:08:61:69:71:8b:16:f8:
35:bf:f7:60:ab:78:24:a2:e7:a0:02:84:e8:51:ca:
57:d5:ff:9b:7d:62:98:a5:79:f6:21:04:6d:12:96:
e9:17:3c:f6:3d:e7:ad:98:56:64:ad:83:6d:bb:3e:
55:b7:e1:1d:e6:a4:56:64:c9:21:53:48:32:c2:05:
a3:35:a0:6e:c7:3f:eb:8c:59:90:6c:9d:80:1b:24:
6b:d9:a8:89:e4:46:29:76:b6:ef:d4:9a:57:78:e5:
69:e6:7f:31:4f:9a:49:f3:11:f0:6b:ad:ce:f9:0a:
5d:d8:69:24:37:85:f9:20:99:0a:e5:d2:5f:5f:e2:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F2:7C:ED:54:F1:AA:90:53:4C:5A:D0:3A:F3:A3:63:BB:CF:7F:20
X509v3 Authority Key Identifier:
keyid:E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b6:cf:8a:bb:a4:65:ce:69:c6:54:55:94:e1:98:df:fe:b2:
f6:0f:6a:09:59:5c:22:2d:84:e8:62:65:51:e0:6b:a9:36:41:
c3:09:3e:7c:a7:73:9a:34:18:0f:a3:d8:89:7d:24:5e:bd:9b:
cb:c1:e7:40:02:88:9c:ca:14:9a:cb:2e:0f:bc:23:4d:c8:37:
e6:c6:eb:39:e6:34:6e:d2:de:35:a9:f9:c2:11:7c:2d:1d:2e:
3e:0c:cf:8a:09:35:26:5c:02:bd:2d:8a:6f:e1:fe:49:7c:6d:
4f:56:22:13:6f:50:b2:92:b8:37:33:4e:9c:e5:f0:f6:2a:8a:
de:73:fd:bc:74:d7:a4:ac:e5:3f:fe:b5:37:0c:44:72:cc:f5:
ce:bf:4f:f0:e3:31:54:30:c8:64:e9:e4:5d:ce:ef:19:07:04:
bc:60:6a:87:63:b8:7c:39:27:18:6f:75:ad:d8:36:bc:70:ed:
d3:fd:14:88:61:dd:a5:e8:09:ab:5d:64:0c:0b:cf:78:a9:34:
a6:78:93:e5:3f:19:0c:05:66:ee:c0:44:23:97:b1:98:84:a6:
83:f6:59:f5:2b:29:e7:a6:d9:9a:6a:f3:9b:8a:d1:59:12:c5:
8c:88:3e:d9:fc:76:24:54:ed:f7:91:26:20:62:51:97:6b:88:
9b:93:20:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:24 2025 by rpki-client