Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: U5BGndEUmEnX8egY+Ne3tgY64DBY27X9fYotSJqm4eQ=
Subject key identifier: C4:41:2E:28:48:01:E4:D1:2A:0B:07:15:D4:FB:62:E8:AF:73:B2:9C
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 0194BD17F202200EC93A22E1E3BB59BF4B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0745
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: kSUWqFQVR/efmrfQWykL2wvkqq71oaQqTXzFJkiV5cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f2:02:20:0e:c9:3a:22:e1:e3:bb:59:bf:4b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=c4412e284801e4d12a0b0715d4fb62e8af73b29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:a1:e4:af:0c:f2:9b:40:6e:fc:4f:be:da:
16:95:ca:f6:ed:a0:e5:87:ab:c4:12:76:c2:3a:94:
19:fd:90:eb:4e:dc:13:27:67:d9:aa:03:bf:88:e1:
7e:81:b5:80:c8:2f:ea:0d:6a:b1:05:8c:1e:34:c6:
2f:03:78:86:7e:5a:e9:21:f7:c0:50:0c:ed:07:e5:
ec:8b:50:23:45:ed:5d:48:65:e4:43:27:5d:65:a9:
42:0a:bd:90:48:11:1b:94:82:fc:a0:ff:cd:a9:42:
7d:69:71:f1:54:2b:3f:44:10:b6:d9:44:2f:e9:36:
61:02:56:63:c6:89:c5:87:7e:7c:70:56:a3:b6:a8:
35:3f:a5:86:c8:9c:5b:41:28:9d:e2:0d:26:bf:e8:
fa:79:cc:a4:a2:c7:26:1d:c9:f3:e7:58:e8:5b:5a:
d7:a0:68:28:b9:41:ea:a0:46:fd:e0:28:92:a9:14:
ca:1f:43:fd:44:66:06:e1:5a:7b:47:3d:8f:a5:b2:
86:6f:db:75:aa:ce:71:cd:6e:90:4c:da:22:c2:5d:
1e:fa:61:3c:e4:b8:94:bf:53:29:b1:74:6b:78:2e:
42:37:81:b5:75:68:86:62:74:65:22:9c:34:96:96:
19:3d:92:ea:fc:6a:93:47:9d:24:be:48:67:b5:b1:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:2E:28:48:01:E4:D1:2A:0B:07:15:D4:FB:62:E8:AF:73:B2:9C
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:b6:ff:a3:df:34:6e:80:67:70:7f:b1:fe:b4:38:6c:dd:
ed:a0:b9:80:db:37:26:ef:71:22:c3:95:c4:36:91:8d:b1:9a:
20:9b:6b:58:76:14:e4:20:09:74:75:6b:bc:83:4f:3c:93:38:
11:c6:e7:f9:e7:67:97:65:f2:cd:d9:fd:85:e8:a8:e2:dc:b5:
b4:3f:bc:6c:7d:77:ec:e7:cd:b4:df:b5:1a:18:45:9b:4c:d2:
be:6e:45:fe:69:13:71:e2:eb:d0:fe:8b:ef:24:81:08:f8:8f:
6d:49:5b:9a:2b:67:7a:42:75:a4:4f:3e:87:7f:48:24:4a:5a:
3d:96:9e:19:c9:60:a3:ab:25:15:cb:4a:38:02:03:75:27:0a:
4e:25:d1:cb:11:cf:7b:c7:94:5f:5f:31:fc:5b:44:ef:bf:3b:
19:80:68:0d:a1:29:d8:a3:34:3f:47:33:b7:b8:66:d6:9a:59:
77:c8:79:56:dd:cc:b3:37:dc:7d:8f:35:ac:3a:7e:fa:ee:17:
ae:15:39:3e:ad:12:80:67:8a:c0:f3:68:2f:46:a8:87:38:74:
9a:74:10:5a:89:ae:61:eb:42:ef:38:82:d5:7f:5d:83:a4:46:
f6:2c:79:51:fe:d5:92:a3:32:05:cb:16:6a:71:c0:c3:30:0f:
bf:bd:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:56 2025 by rpki-client