Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: 85BLBcvyf+n1+1Dlyi0Mef9TXCj9zG3nVCi88MD2plU=
Subject key identifier: EA:EF:9B:3C:33:BE:E7:9B:53:DD:FE:43:6E:45:6B:01:2D:C3:02:01
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 0194BC0521DA7DAEE88FDBC0AACBF4C9914A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: EYmvaIN4LmZdbf0LSvUjVOUG52cH3RffzRNHh4dRyEQ=)
2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:21:da:7d:ae:e8:8f:db:c0:aa:cb:f4:c9:91:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=eaef9b3c33bee79b53ddfe436e456b012dc30201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:55:91:12:51:d9:0b:74:fe:9b:18:9e:2c:
6f:8f:b2:de:1d:cc:f1:74:b1:0b:97:d8:b1:b0:6b:
11:70:8b:01:6e:37:af:81:32:dd:b4:bc:10:1e:c3:
c3:28:9b:f5:1a:c4:71:0b:98:b9:03:89:97:b3:09:
af:c7:1e:30:a1:a6:7c:d7:56:3d:2c:42:37:92:70:
a1:22:a5:f6:e7:b0:1c:c2:37:34:3b:9e:31:af:9b:
5c:4d:76:96:99:1f:a5:25:80:9c:20:79:d5:da:9e:
ad:99:cb:cf:cf:e1:12:87:95:63:44:99:4d:c2:28:
08:fe:bd:5c:21:9e:31:95:ec:3d:33:99:7b:2d:20:
b1:96:e4:dc:e2:aa:81:96:58:00:be:e5:a8:e1:20:
11:7d:24:87:1a:a0:27:3b:62:39:1a:f6:20:4b:f0:
93:a0:d3:b0:2e:8b:cc:be:b2:77:71:4b:f7:35:d0:
28:3d:d2:1d:4a:78:1d:96:9c:9a:23:65:8c:11:ba:
6d:c8:4b:1e:65:34:20:15:9c:26:3d:fe:1c:e8:ef:
f1:39:b1:e7:50:07:cb:cb:f1:20:1f:f4:ad:60:79:
42:98:a0:a3:de:5d:06:a2:e7:8a:d2:13:d2:8a:70:
b0:94:42:41:ac:fc:91:c2:04:b1:d9:5f:f7:35:cd:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EF:9B:3C:33:BE:E7:9B:53:DD:FE:43:6E:45:6B:01:2D:C3:02:01
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d1:bd:5c:cd:5f:db:ce:59:73:03:d6:0a:97:1c:a9:e8:b2:
a4:c7:33:b2:37:05:3c:3d:61:06:b9:59:c3:8d:b3:76:b5:c3:
eb:da:43:6e:b2:e6:ea:f8:77:54:0b:98:ba:a4:bd:0c:e9:13:
86:3b:07:c9:1f:73:9d:5c:46:02:58:90:c3:e2:94:f4:21:9e:
5c:ef:bf:6d:a1:d5:18:63:ba:ed:80:2d:71:6b:fc:89:0f:68:
98:64:c4:0e:98:d7:3f:54:87:c9:bf:68:24:ff:97:07:ef:ef:
1f:18:6d:48:6e:9b:d3:5f:8a:98:fc:3f:1e:70:22:e3:61:21:
cd:8c:66:00:0c:66:01:0d:31:f2:80:da:db:24:ee:aa:cb:73:
28:e9:44:3f:b0:ff:7a:06:ef:b9:f6:86:e5:68:dc:ab:47:82:
ae:ba:dc:90:43:87:9c:de:29:76:87:a4:5c:83:60:4f:25:7f:
13:57:1f:16:c5:2c:1d:40:a3:13:6f:54:93:92:2a:2d:80:5e:
e9:f8:4e:18:dc:28:18:df:2f:d5:21:ca:eb:6b:b2:b3:29:38:
01:ff:69:f2:95:c2:53:1a:31:de:2c:25:a8:8a:bb:0c:ea:ec:
a7:06:68:36:ff:35:e2:d0:7b:71:19:c7:c6:3e:bb:79:68:4c:
7e:68:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:56 2025 by rpki-client