Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier: 0q/wHjgafE75N6dreiqEE0bTVL9JGAzEgbpTyFtKVmA=
Subject key identifier: 34:CF:4F:90:3C:84:B7:FF:E9:00:E5:1F:AA:C1:67:60:81:2A:F5:F6
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial: 0194BBCDE1DAC6B5F6C0B8061E05A8C845A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number: 0F98
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: ZtWaerGU3NvWEguDh2up+s5ARJBzvGpTfWXyAXIpbTo=)
2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e1:da:c6:b5:f6:c0:b8:06:1e:05:a8:c8:45:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=34cf4f903c84b7ffe900e51faac16760812af5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:12:b5:4c:75:61:a2:fa:c7:d3:7e:57:3b:
0d:ef:ab:e4:e9:44:21:ac:79:21:55:3f:b0:bd:b2:
1d:e2:f1:bf:5f:d3:e1:69:7b:88:44:18:57:a6:7e:
2e:f3:4e:ef:09:62:34:92:d9:af:fc:a6:92:63:6a:
c6:c1:da:a2:44:de:94:c9:53:7a:2c:f1:2c:3b:5c:
db:50:2f:94:f4:36:16:79:de:bf:7b:f4:b5:c9:0b:
66:96:6e:bd:01:4e:30:c0:6c:b7:cc:3e:57:fd:55:
b9:ea:25:25:c7:4c:86:89:81:a8:14:9f:03:88:f2:
39:93:37:d5:5d:b0:4b:bb:b9:b7:68:72:2f:df:4a:
09:23:52:1a:04:3c:3b:f7:c0:62:a5:8f:08:c3:bc:
73:64:76:d1:de:ea:33:3c:2b:4d:39:30:1a:44:99:
3d:f8:2c:35:31:87:0c:ca:1e:39:cf:22:d2:ec:9b:
f5:c8:9b:25:6a:f3:f4:c3:fb:c7:c4:ef:5c:94:f5:
8c:16:fa:fc:ab:b8:91:89:b0:91:3e:1d:b7:b0:06:
99:66:76:c9:30:32:8a:ba:2c:b3:3c:21:c0:7c:fd:
70:5e:86:7b:2d:4b:8a:be:d3:c3:74:3e:22:60:b9:
fb:52:96:cf:24:a5:95:57:4a:af:c8:e2:8f:de:96:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:4F:90:3C:84:B7:FF:E9:00:E5:1F:AA:C1:67:60:81:2A:F5:F6
X509v3 Authority Key Identifier:
keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:1e:70:8d:3d:a7:ea:8c:1c:0e:ce:1e:f5:cc:eb:65:f4:e0:
50:98:42:1f:f5:4f:fa:3c:cb:4b:a7:f1:20:a6:96:42:c1:f2:
80:0c:d0:08:4c:e7:4f:5e:d7:e5:51:04:78:d0:ae:7d:7c:8e:
94:f6:9d:94:ab:89:67:8b:52:2f:fd:a2:e1:59:11:a7:12:fb:
26:25:82:57:de:6b:e9:53:25:91:76:b3:64:24:17:ae:f7:b8:
c9:a8:6e:81:6b:12:da:2c:ab:81:97:ad:af:b9:bc:e0:5c:6d:
c5:fc:91:cd:81:3f:5a:4d:e5:67:da:32:bd:23:00:39:ee:81:
d0:75:7f:8c:fc:2f:ad:7a:63:ca:f0:a6:52:80:ab:3d:8a:8d:
57:c9:6c:ed:fe:7c:c3:51:ce:91:3b:5b:f0:46:d9:f3:3c:a3:
85:71:36:41:f7:cd:b0:90:82:66:2e:d5:17:88:c2:ce:b1:5b:
9f:4f:e3:ef:5b:81:20:24:2a:3c:0d:fc:e2:b0:9a:a3:e2:09:
68:de:e5:f5:a9:7c:73:e4:b2:b8:d9:62:36:40:5a:99:07:c8:
b3:3d:0a:66:4c:d1:a7:85:9c:4f:d1:8c:c1:d3:92:08:0e:84:
55:c5:fe:98:c6:01:88:55:e8:15:42:51:9a:d2:5b:7a:4e:12:
d9:fe:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:07 2025 by rpki-client