Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier: 5b+uAGtKzCCb8kt9i+gfLCQH7fd316XtcH31JlcEqOI=
Subject key identifier: FC:D7:F2:29:DE:96:D3:D4:B3:14:1D:4F:F0:E6:2B:76:32:A5:E6:48
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 0194BCA9AC839F4EC8BDCAD38F0FB6523F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number: 113C
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: QNHiVkfQls+Em5urzt8SP1A2IhJyQpTbKSvjw0btSFA=)
2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ac:83:9f:4e:c8:bd:ca:d3:8f:0f:b6:52:3f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=fcd7f229de96d3d4b3141d4ff0e62b7632a5e648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:f0:fe:df:5e:d7:eb:dd:88:40:f5:8d:b5:
43:4e:f9:b7:78:21:fa:26:aa:f5:81:3d:8e:a7:62:
17:f2:09:9f:69:2f:8f:47:a2:a8:dd:6f:2a:0c:ec:
c3:7b:f9:ae:b0:3c:41:da:51:62:58:f7:fe:d3:dc:
54:36:5d:b8:d3:0a:80:1d:18:30:c8:4c:a5:02:c0:
bf:d3:97:03:be:73:3e:ab:d7:3c:66:9b:7c:d1:de:
56:2d:17:9b:33:7a:6d:d5:f3:ab:98:55:71:b3:e6:
a8:a0:11:68:bb:0f:f6:5e:15:40:32:74:41:48:67:
fd:a5:86:d4:a1:04:87:34:27:c7:a8:57:ff:15:e5:
ff:03:f8:05:34:90:77:a7:08:c5:29:74:1b:b1:11:
78:de:93:b2:e4:98:ab:d1:30:98:e9:df:6f:01:02:
c8:78:2a:ef:81:0d:4c:9e:19:b3:69:24:2a:92:52:
60:65:2c:3c:cf:c9:3a:52:98:b5:d4:a3:17:ee:a8:
6a:8d:4a:17:95:28:e5:5e:b3:3f:80:0d:9f:20:41:
88:79:92:5b:2f:78:de:b6:84:56:1c:7b:5a:bb:8e:
31:41:d1:37:7b:31:94:55:1b:1f:34:b6:dc:65:8b:
57:7e:1c:72:ca:32:da:6d:52:01:1e:2c:19:92:ca:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:F2:29:DE:96:D3:D4:B3:14:1D:4F:F0:E6:2B:76:32:A5:E6:48
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8c:6b:78:a8:a2:59:4d:95:76:fe:fc:b2:09:a1:3e:da:87:
d1:9c:78:0e:54:f0:de:26:c5:ef:d8:1c:c2:11:ca:86:10:93:
a1:b5:71:bb:e3:b1:c5:bc:c4:c7:f8:e9:35:f4:79:a9:95:f8:
56:1f:34:a5:32:c2:15:c1:03:cf:a9:12:87:04:2c:ae:70:0f:
58:8d:79:81:5d:1e:42:47:09:05:01:94:31:ae:48:cc:28:5c:
de:14:13:be:5f:df:35:fc:27:27:d5:4b:5b:89:91:0b:f7:e5:
4f:36:26:4d:fd:3b:70:fd:6f:b4:70:fa:bd:d6:2a:7d:3e:89:
dc:4d:69:fb:5f:6a:24:31:99:50:d3:24:af:75:49:04:11:b4:
ae:54:41:57:de:f2:c7:08:7a:ae:d3:21:86:a4:58:a7:d0:a0:
3a:f7:cd:d6:81:6c:99:5f:62:ec:9b:22:e8:d0:b0:93:40:5f:
b7:df:7c:e6:62:39:e3:a1:5c:f6:1c:99:75:0b:04:54:e8:76:
01:04:46:81:8a:be:41:7c:0f:9d:97:80:94:74:6b:1b:4b:23:
63:3d:f0:f9:aa:d6:00:d9:04:11:fb:98:f6:66:0d:26:d4:c3:
0f:5c:1c:cf:47:ed:be:d6:72:b4:53:93:10:55:4a:eb:ca:2d:
0d:5b:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:43 2025 by rpki-client