Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File: RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier: wCbhud4UKhKhxNXtW+dd6SGTU8pqPJlNPnvJVWDh5d4=
Subject key identifier: 8C:20:84:6C:90:11:3D:E8:8B:EC:59:1F:ED:08:F9:04:FE:CC:F0:64
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer: /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial: 0194BD17C9F0FA2B098E8F251E6B204B957B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number: 0854
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: Lr4ClRTl5KAy8aCqeiU2Qo3Mkya3oYNVchZ0xDcLCm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c9:f0:fa:2b:09:8e:8f:25:1e:6b:20:4b:95:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=8c20846c90113de88bec591fed08f904feccf064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:d8:ec:5f:08:4e:d2:d1:f9:67:c0:bc:87:
c9:73:c8:26:f0:4a:08:b5:08:8f:3f:5e:43:25:ce:
2f:0a:bc:ff:9b:94:52:b1:bc:99:35:0a:fe:64:d0:
bb:87:72:94:71:05:d9:85:a6:5c:33:52:61:19:f7:
1c:11:1d:18:1b:29:f1:30:f6:58:56:17:d3:19:bf:
0c:cd:5b:37:cc:25:40:2b:94:e9:1f:7f:07:4c:01:
97:2d:4c:41:41:14:35:a2:ce:a2:13:07:41:b6:53:
db:09:17:79:b6:d9:55:5b:89:95:4a:cf:01:09:22:
d8:85:46:fc:ee:c2:5c:31:f3:a1:d1:dc:53:43:ff:
cb:66:e4:29:35:aa:f4:cf:1a:1f:41:af:16:35:41:
96:38:7e:21:dc:0e:a7:86:47:d6:cd:dd:43:47:f4:
60:56:7c:9e:8d:53:bb:ec:ec:e9:be:83:da:0b:71:
6c:12:a9:6e:e6:4a:a4:80:3a:9c:2f:a9:1b:fe:0e:
1f:25:64:fd:57:c8:db:d2:5e:ce:56:60:a8:a3:c4:
fc:95:4a:ba:49:56:65:85:f5:86:0a:df:48:2c:07:
78:c4:71:bf:6d:be:e2:37:5b:b0:7e:27:dd:78:09:
a9:72:d3:8d:95:39:e7:cc:4e:11:9d:08:40:52:ca:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:84:6C:90:11:3D:E8:8B:EC:59:1F:ED:08:F9:04:FE:CC:F0:64
X509v3 Authority Key Identifier:
keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:73:0d:11:8c:c2:c0:fc:54:30:31:c8:c6:b4:91:17:1b:23:
0a:75:25:b1:b5:fa:6b:71:95:2f:0c:01:77:4b:65:0f:47:22:
dd:d1:c5:f7:e0:60:31:03:a9:97:f1:5e:3c:54:78:b5:ee:d8:
7e:85:af:b6:39:a1:5d:f2:b2:29:ba:e7:77:65:44:5e:23:78:
48:27:b7:8a:64:85:94:54:03:bf:5b:aa:28:e0:65:df:75:aa:
33:ff:e8:52:27:06:6f:25:b9:43:b6:1d:d3:44:a8:a7:c8:cc:
73:75:bd:12:4a:5b:7b:48:4d:bb:8d:35:4e:d6:ef:b1:fc:d9:
d6:22:7e:22:24:64:3d:e9:bc:3a:a2:23:c1:16:da:10:9e:94:
20:a0:43:05:d4:d0:90:22:d6:cb:97:fb:1a:0c:39:3c:da:0c:
97:68:98:48:42:8c:27:a6:03:54:e6:32:36:27:2e:5a:45:90:
0b:76:99:ae:fa:a7:3c:74:08:7d:8a:4a:92:b0:b7:5c:1b:46:
74:0e:b0:38:47:e5:e5:ea:74:c9:55:16:10:73:90:fd:29:15:
58:f5:44:76:fa:94:16:f1:2a:d4:06:1c:b7:95:70:2f:a2:9e:
ce:da:15:b9:08:d5:4c:8b:fa:12:ad:b8:e2:23:83:b2:ec:8d:
45:77:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:18 2025 by rpki-client