Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: yeeNS1QzmCEah7OFj5HyI0ifpst0KwacHnQIltRDi2Q=
Subject key identifier: 66:9E:18:B3:D5:91:FD:B4:F0:88:89:C9:90:B8:77:87:4B:B8:51:CD
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 0194BC04C9008F5065FB07CBBC8DC99BB531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 117A
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: isaQTmtq4VYhh7YudxphCaXSuPb6LE44G4kwDKvo0Zs=)
2: BaBCeNg1tHPhyNt-NGKdmW_5tj4.roa (hash: 0DB+VS24EPxDdyG43/iiFi3jJXUjJ/EkB02bBWczNN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:00:8f:50:65:fb:07:cb:bc:8d:c9:9b:b5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=669e18b3d591fdb4f08889c990b877874bb851cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:b9:d5:14:af:f0:8d:76:5e:e9:8e:49:f3:
04:3f:d1:c5:30:c9:38:51:c7:30:5c:63:c9:52:03:
cd:08:d2:cd:a5:d8:88:5c:84:8b:d0:64:51:4e:01:
b9:a2:20:73:c5:0b:3d:70:cb:74:39:0c:22:e6:fb:
dd:e6:7b:eb:e3:a7:41:a4:a1:a1:79:ea:1c:63:96:
1d:36:c9:4e:d1:de:18:ca:d9:91:82:f6:7c:61:e2:
82:e4:1b:11:12:b4:a9:38:18:50:29:a3:95:1f:9f:
57:82:4d:39:70:ba:77:38:73:36:88:50:e5:74:f2:
b6:4e:83:d7:d0:a8:c9:e9:47:5c:47:0f:c2:a2:fc:
91:1e:0b:7c:b3:1c:72:58:55:17:9e:23:99:b3:5b:
97:f2:92:2f:25:28:bf:81:8c:a2:86:fd:91:1c:8d:
e3:ac:5f:1f:80:c7:c3:b7:41:32:8e:05:c2:17:e3:
76:36:5a:ef:79:84:74:d5:05:df:3f:07:25:ef:6b:
6a:2b:0e:fe:e1:0c:c6:d8:d0:21:91:35:d4:72:7f:
a3:39:d0:f3:98:41:4a:3f:49:1f:c9:6f:b9:37:d3:
7d:a9:47:20:3b:6e:ec:45:e3:09:5b:de:0a:10:70:
ce:32:26:24:9d:5b:f2:e4:21:0c:42:72:25:b7:48:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:18:B3:D5:91:FD:B4:F0:88:89:C9:90:B8:77:87:4B:B8:51:CD
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ef:9f:c8:51:90:e4:0d:f5:38:66:a3:0e:a6:e8:cc:ed:fa:
03:bb:fc:f4:1d:6f:da:8b:04:ba:98:7f:fc:66:0e:4a:03:60:
47:e2:d4:c3:02:df:04:cd:cf:c9:db:03:ec:d4:cc:c6:e5:03:
c0:36:50:cf:ab:70:d4:50:4c:09:b8:7b:35:f9:c4:ab:0e:36:
36:0c:2d:50:02:60:f2:ec:75:ba:2b:2f:f3:04:63:67:6d:35:
0b:d7:94:b5:f7:b1:cf:3e:ff:79:55:64:18:92:85:1b:c2:85:
fe:9c:24:3b:f8:3b:8b:7b:b9:9d:80:7e:cd:d8:94:61:bd:f9:
1c:19:6e:eb:99:54:51:bc:8e:70:d8:84:c3:d5:98:f7:e7:4e:
a2:43:78:2c:9b:fc:60:58:cc:21:cd:29:c5:13:01:f4:45:0f:
b8:45:d0:c1:14:52:e7:6d:4f:95:b7:9b:31:f5:bd:12:f5:cd:
6e:a5:0f:08:a6:3a:3a:4b:96:cf:4d:fd:4e:10:f1:84:42:91:
95:7d:6f:5b:68:ce:65:41:b6:72:16:40:6a:94:4e:b2:53:3d:
2b:e7:9a:2a:a6:cb:32:d6:02:eb:2e:f9:51:6b:61:29:08:7f:
d4:3e:f5:a4:2f:60:07:d2:48:79:65:f4:c4:14:ff:73:89:61:
d1:ab:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:47 2025 by rpki-client