Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: cMBoWk49QaEQGapIK93sk02dN04upwbvGlLmHDnkHrc=
Subject key identifier: 92:70:D2:F5:1C:E4:A4:C6:5E:7B:54:EF:1B:AE:F0:FC:96:C9:E2:1B
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 0194BD858CB56A7A6B697E82C9C91163D44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 0FC2
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: Ktijaz6ExPRnUuMwriYKdqhLye8Ktr4VXLCsG40wt0E=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8c:b5:6a:7a:6b:69:7e:82:c9:c9:11:63:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=9270d2f51ce4a4c65e7b54ef1baef0fc96c9e21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:82:0e:8d:7c:2f:e5:83:0c:65:40:77:20:
3e:9c:b9:16:56:b4:36:a8:ab:b7:b1:b9:55:ff:b2:
a0:dc:91:cc:6c:bd:43:75:e1:1a:fc:ad:73:0e:5c:
c5:8a:23:c7:c8:2b:32:b0:64:c4:e3:df:a9:19:be:
5f:79:e8:71:a0:e5:1b:ad:48:ad:8a:90:ea:27:3f:
ae:2f:17:cd:af:5f:26:d8:3d:d3:87:c4:48:ec:db:
65:71:09:56:d8:3e:e2:e1:c7:27:12:0a:93:c8:0f:
b9:a7:bb:e7:c4:e5:8e:26:31:1b:73:93:ed:fb:cf:
81:bf:d9:dc:db:96:db:5f:c4:a3:ed:d8:00:96:86:
05:96:3f:59:d7:26:c9:a3:fd:63:3c:5d:36:54:5b:
e1:95:7e:93:c1:ed:31:16:d1:c3:9e:2d:4a:b4:8a:
8f:16:dd:48:65:38:77:c5:06:f5:93:c0:df:b4:10:
4a:09:b4:69:bb:50:93:57:f8:44:33:01:d3:e4:f8:
a8:a3:17:62:c4:40:c8:4a:a7:07:df:1f:e5:15:a3:
33:55:80:6d:3c:10:d3:8f:8c:d1:24:b5:a5:38:de:
31:4a:51:95:38:22:5f:91:93:36:4e:6e:6b:f4:ec:
9e:a8:79:27:70:80:8b:46:c4:f0:54:bc:84:e3:7d:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:70:D2:F5:1C:E4:A4:C6:5E:7B:54:EF:1B:AE:F0:FC:96:C9:E2:1B
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fd:c1:04:56:91:af:13:0c:02:0b:ca:2b:3e:c8:42:e3:01:
00:2b:7e:db:07:e0:09:4c:71:4b:d5:68:82:b1:0b:75:4a:84:
45:7f:92:37:eb:b8:76:b3:02:d4:d8:0c:43:a9:30:e9:01:78:
8f:07:1d:26:4a:d9:39:21:ac:e7:e9:fb:87:68:6b:63:33:05:
02:84:ae:ac:29:49:91:39:b1:de:1c:aa:e0:96:6c:79:d7:7f:
20:16:22:f8:86:71:d9:e4:ad:24:bc:20:3f:67:66:2f:e8:3d:
96:7c:26:b1:43:c7:db:e5:93:1d:9f:f9:f3:f2:b3:40:58:64:
e6:a2:2e:3a:22:c3:b5:3b:c8:e3:a2:c0:60:c3:78:18:7e:bd:
e4:a6:a9:8c:a8:a8:67:e2:a9:4d:41:48:8c:58:f8:44:88:89:
cb:f0:0e:87:2b:40:32:83:02:1e:2d:5c:b7:f8:92:49:ae:4d:
3d:66:01:08:fe:f1:c5:d9:91:87:43:c8:fa:6c:74:c0:ec:1d:
65:3a:c2:2b:b0:71:51:61:22:b4:3e:ae:af:e3:e0:85:c5:78:
fa:a7:c3:54:f0:83:b9:42:6d:a9:14:38:38:b3:01:83:9f:a4:
a1:a8:46:9f:75:4b:a5:3a:95:ac:59:47:a6:77:a1:ee:b1:1e:
8a:86:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:36 2025 by rpki-client