Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: OnhGumySwfuyvZm5NdF257p3OKtDRxFRAjaEidJF0O8=
Subject key identifier: D8:DF:69:D4:FA:D7:96:29:EA:B1:3E:9C:25:CC:1B:DA:54:CD:50:B1
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 0194BD4EB869F2DC27391926AB5499FFA59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 0F29
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: Rr+Y5e0OZDg7oXwV9MsRl1G4HOvSxp08q9GpOoG+AdE=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b8:69:f2:dc:27:39:19:26:ab:54:99:ff:a5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=d8df69d4fad79629eab13e9c25cc1bda54cd50b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:7f:cd:93:72:85:1c:d6:2f:fa:0a:ec:60:
9b:cc:6b:ea:b7:8b:32:58:7d:90:68:7f:1c:ae:eb:
9e:63:f7:71:f1:a0:35:db:1f:b8:6f:12:8e:da:34:
30:66:19:72:18:16:1e:35:e2:b1:b2:33:b8:08:dc:
7f:9f:1e:24:1d:19:2b:e8:28:0a:e2:6c:e5:49:1c:
cf:27:16:29:64:38:2d:c6:a3:77:ba:5d:24:9d:2a:
95:76:4d:df:18:23:9b:88:e7:11:4b:7d:cb:5e:c3:
61:bb:32:f9:4e:d8:4f:ce:e0:0b:ec:8b:3d:56:a7:
1d:8b:0e:60:c1:a9:b3:6a:b8:d5:a7:ed:f6:50:32:
85:90:8e:22:12:39:84:f7:e7:e7:b2:f3:64:25:56:
15:fb:63:3f:0b:f4:23:59:9b:0f:00:c5:d0:2e:b3:
e9:35:b2:79:2e:2d:bc:64:a9:4a:4e:81:dd:30:80:
5d:c0:4d:d9:f2:25:5b:8f:56:64:d3:41:02:ee:c5:
c8:bd:64:56:54:b8:5c:81:cf:5a:60:40:da:1f:c7:
b6:90:5b:a9:35:72:4a:39:79:66:01:e1:05:91:fe:
17:ff:d8:bf:07:8c:f5:06:be:8f:68:81:86:8b:31:
54:fb:19:72:79:24:4c:7f:6e:16:58:b9:eb:e7:c6:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:69:D4:FA:D7:96:29:EA:B1:3E:9C:25:CC:1B:DA:54:CD:50:B1
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8e:a0:a0:1b:c2:31:ce:c6:74:d8:b1:f3:bc:d9:12:d6:13:
d8:2b:fc:cd:25:d8:69:98:66:d8:b0:4b:55:90:e9:b4:52:85:
0b:22:91:ca:79:8b:95:bd:e8:7b:67:4a:b9:c6:09:81:63:eb:
bf:64:78:92:d6:15:a5:0d:49:45:3e:3b:b8:b2:70:0e:e2:91:
02:68:1c:fd:9b:46:b4:50:a7:09:65:ec:13:c6:ae:49:a5:8d:
fa:c5:8f:a4:81:3a:51:21:1b:6b:da:4f:a4:07:03:7a:20:6e:
7b:b3:58:0f:92:29:ec:98:6a:c3:0d:b1:1f:ba:40:57:3b:69:
0b:4e:ec:8a:99:22:a2:20:41:0b:87:3f:b6:e1:83:d6:12:7f:
ba:d9:e0:0c:7a:15:1a:c4:a9:a8:33:39:57:2b:75:63:3d:e3:
3f:47:31:16:f5:25:48:b6:2c:5b:fe:25:9f:d1:d4:76:e9:b7:
b6:90:2a:f6:f0:0c:bb:14:15:1a:d6:43:19:42:88:af:f2:29:
35:0b:14:71:a0:72:04:79:73:e6:7b:0d:8f:40:3a:c0:e0:e6:
95:7d:1f:19:74:05:fa:30:7f:91:19:c2:1e:51:f1:65:36:76:
27:1f:28:90:c1:71:4f:c1:7a:b6:8b:35:bf:9b:dd:04:74:6e:
3f:41:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:25 2025 by rpki-client