Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
File: 4H6guRTmNDEcyfDvoUSPy3l9OJw.mft (raw, json)
Hash identifier: cupKxm1SDBlYFYk/EzOyxziLp3me16TDbsgZUkJZw9k=
Subject key identifier: 7C:2E:55:18:C2:B2:DA:7A:8C:E4:E2:A6:24:0A:3B:C2:EC:E6:C1:9A
Authority key identifier: E0:7E:A0:B9:14:E6:34:31:1C:C9:F0:EF:A1:44:8F:CB:79:7D:38:9C
Certificate issuer: /CN=e07ea0b914e634311cc9f0efa1448fcb797d389c
Certificate serial: 0194BBCE327E180BE4446FB5D71DB5D45583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H6guRTmNDEcyfDvoUSPy3l9OJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
Manifest number: 0AF7
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: 4H6guRTmNDEcyfDvoUSPy3l9OJw.crl (hash: CI8p9IDO4V9LS/Yak0CjZdbJ67afTfWuTocJ1cXw10s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:7e:18:0b:e4:44:6f:b5:d7:1d:b5:d4:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07ea0b914e634311cc9f0efa1448fcb797d389c
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=7c2e5518c2b2da7a8ce4e2a6240a3bc2ece6c19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:a8:9a:52:4f:ee:76:a6:59:e6:e5:0d:63:
36:14:4b:ce:2e:fd:98:4e:43:74:6a:9f:5f:e4:25:
e1:24:05:07:2b:85:62:44:bb:4b:3e:e8:68:82:32:
21:5b:1c:74:67:b3:46:df:f3:c5:e7:fd:1d:91:22:
35:50:f9:10:84:41:1a:50:8b:c9:f7:c3:a6:05:3b:
d8:4a:06:3a:68:9f:ac:c6:6a:f0:01:4d:d6:80:cf:
08:a8:c1:54:84:62:c7:b2:a4:d9:e7:29:b7:1f:9c:
bc:27:81:4e:0c:ff:ae:ce:c7:b4:66:e8:e7:24:94:
39:03:10:06:e3:41:02:dc:da:d5:55:de:9e:0d:f4:
15:0b:4f:6b:47:30:b9:60:35:6b:aa:33:0a:b7:23:
e6:54:13:3f:88:9b:00:c4:4e:86:33:fd:7b:41:d1:
0f:31:dc:39:79:c3:f4:a8:ed:a9:05:81:57:cc:96:
e4:0a:d6:e4:67:e7:18:db:3d:ca:63:7a:2e:e6:9b:
44:6c:05:bd:4f:c0:84:f4:5e:7c:0e:2c:90:4d:c5:
03:c2:53:4b:18:99:d7:70:13:28:07:7c:17:ba:f4:
71:48:2b:9c:25:bf:b9:7e:90:25:dd:20:a1:e0:67:
28:75:55:8f:6c:39:32:80:9c:b9:56:b1:29:a7:fc:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:55:18:C2:B2:DA:7A:8C:E4:E2:A6:24:0A:3B:C2:EC:E6:C1:9A
X509v3 Authority Key Identifier:
keyid:E0:7E:A0:B9:14:E6:34:31:1C:C9:F0:EF:A1:44:8F:CB:79:7D:38:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H6guRTmNDEcyfDvoUSPy3l9OJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:31:23:99:6f:cf:c5:00:ad:50:6d:84:6c:89:ae:4e:bb:
53:45:48:a1:5d:ac:4c:21:d2:fb:c0:bd:9f:16:57:ec:fd:35:
a7:f1:e1:8d:db:b0:e8:27:f2:8a:60:ed:0a:d7:87:95:4f:a0:
b2:7a:5d:80:3a:23:e9:9c:35:c2:c8:be:6b:45:d1:8a:29:37:
61:c5:29:60:d9:2a:7b:3d:61:24:23:bf:8b:fc:c3:56:e6:8e:
da:8f:3b:75:62:cf:2d:0b:24:22:18:8d:65:22:47:fd:0c:e5:
3a:f8:3a:82:78:56:dc:64:bb:36:21:6f:1b:c7:cd:17:d0:ff:
a5:1f:6d:54:eb:b9:09:58:40:15:dd:d4:e4:a8:46:be:9c:03:
92:d1:44:e5:80:4f:f3:39:4a:de:22:39:77:b9:8e:c8:a9:10:
20:d5:c8:69:a9:a0:5b:e7:4d:8d:86:79:15:c7:ec:a3:01:e5:
4e:db:29:bb:3d:8f:f3:6b:ae:fb:13:81:17:6f:d6:34:be:1a:
e0:38:23:d7:b0:81:b1:01:60:34:20:40:ae:d0:83:a8:33:e5:
a8:08:37:59:a2:f9:c5:65:5a:55:3a:34:87:a6:06:3b:5e:a0:
c6:b4:c1:67:b8:8f:c3:a8:1a:25:8f:8e:80:7b:47:10:00:fe:
99:60:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:33 2025 by rpki-client