Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: CRaKVIk3gOsUGxNo6XcCJgbXsv7heIlKteXOSCYzoJc=
Subject key identifier: EB:D2:D7:21:43:7F:A4:85:F4:65:53:85:14:F8:08:2B:AA:36:A0:32
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 0194BBCE784E799FC9C70ADA003B06160495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 8D
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: 58wniCA8puGuCEXBeUX90mw8q1y7wbIO7+/NqNndUaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:78:4e:79:9f:c9:c7:0a:da:00:3b:06:16:04:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=ebd2d721437fa485f465538514f8082baa36a032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:cd:f3:e6:45:6d:53:4c:ff:b9:fe:fe:74:
9a:c3:41:2d:d6:50:3b:21:16:a1:5f:c0:a6:4b:32:
df:53:a3:c4:74:e0:39:7b:33:f0:69:91:a0:04:9e:
9a:93:98:c0:36:59:c1:9e:71:b2:b2:66:44:be:83:
13:0c:d9:d6:13:ba:b1:66:26:d4:3e:24:0a:6b:d6:
20:28:4c:6b:7e:72:e0:20:ca:e8:58:ad:b2:69:a8:
3e:d0:c1:d0:85:f8:08:dc:ad:0e:07:cb:f7:e0:e4:
74:ef:e3:1d:f0:09:40:e4:1e:33:28:f3:6a:ff:6e:
52:66:f5:8c:ec:4c:84:2b:e9:4b:c5:7a:8c:59:46:
94:b4:e5:34:6d:a3:62:66:42:e1:4c:31:1f:50:9b:
85:c5:af:a8:35:46:6c:fe:85:0b:1c:85:81:69:e8:
17:fb:24:ed:b8:62:49:5f:2d:90:25:13:84:36:9f:
d2:a9:dc:c3:fa:08:4b:61:65:71:fa:4b:36:27:59:
9e:2e:81:60:64:b3:6d:02:72:d5:1a:4e:03:7c:c2:
59:08:1f:94:6d:3c:dc:2d:70:2f:ec:34:84:08:0a:
92:93:05:04:0e:2a:c5:0c:c4:5e:5c:f7:0f:cf:2e:
cc:99:12:f5:ea:4d:9d:89:94:4d:6b:f3:ef:f1:07:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D2:D7:21:43:7F:A4:85:F4:65:53:85:14:F8:08:2B:AA:36:A0:32
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6c:28:f7:d6:77:5b:2f:f7:75:9b:08:d6:89:42:bc:1f:c7:
81:40:88:38:7f:93:ef:ea:53:4c:f0:09:66:d7:93:28:c5:ec:
3a:49:ab:ea:20:a1:fd:80:ac:f3:fb:af:ce:64:49:6d:b8:29:
53:e0:75:41:ae:da:4f:e8:77:ae:bd:58:c2:6a:55:97:9a:b7:
1f:64:f5:1d:2b:b0:c2:9c:5f:5d:dc:af:5b:28:64:ac:b2:98:
ad:6a:ba:9d:71:f3:dc:6b:16:88:26:a2:17:d8:58:57:58:f3:
c7:46:bf:bc:99:e1:f9:0f:21:39:d3:93:92:3f:e0:f1:03:19:
ec:7b:96:41:80:08:e7:0e:b4:39:1c:ec:a2:c9:9f:7c:96:24:
4b:d1:6f:e9:d7:c6:dd:9b:cf:45:dd:9d:14:71:a3:c1:8f:60:
e3:8a:5a:88:60:0a:b6:63:47:20:26:02:a8:a2:08:b1:2d:fd:
6d:ff:26:9d:77:ea:92:ec:11:4c:98:52:3a:74:9d:5d:43:2c:
68:a3:39:3c:72:83:db:21:da:93:c2:69:92:91:2d:d5:ce:39:
90:a2:00:55:fb:ab:f0:ae:c9:50:cd:7f:27:08:d0:f9:e8:46:
7b:04:c1:3c:17:41:95:75:a6:be:ca:b5:4c:0c:be:45:eb:1b:
1a:98:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:47 2025 by rpki-client