Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: RYNRIE9czjbbtTPV8b0vk/FasR3XgCn7JJJ7oO6Zcm8=
Subject key identifier: 70:8D:22:A5:49:EC:CB:6D:CB:6F:B4:A6:9C:84:B8:3D:81:F2:97:A7
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 0194BC3CA9B319473C422F4B547734E2D681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 0EA4
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: 09oBsQ6Tlp+VJF4769cNBMMvKt+IMZUMCvizBYWMF6Y=)
2: EIPXP4SEmPbV8aQA2-5L0Ta_OhQ.roa (hash: YwImDgJjuNmka436Jqvx4IjnyNxYmhqYhI9Yd1gMUo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a9:b3:19:47:3c:42:2f:4b:54:77:34:e2:d6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=708d22a549eccb6dcb6fb4a69c84b83d81f297a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:b0:80:b6:1b:a0:93:66:d9:15:0e:52:5e:
02:bf:ae:2b:6b:1c:49:9f:dc:09:cd:a8:fa:e8:5b:
d5:cf:3e:b0:e4:9f:c8:d8:ab:d5:0c:3f:0b:29:d2:
3e:1c:29:25:11:4d:b6:88:0a:b4:19:c5:d3:6a:73:
d3:82:d4:31:c7:84:ee:cc:7f:13:d0:f6:2f:aa:59:
b9:a1:c7:36:0c:aa:79:d7:e2:31:24:86:d6:7c:a2:
4c:b0:25:b9:b1:93:d4:f6:8d:a6:9e:f1:d5:8a:44:
eb:56:12:55:0e:17:e8:78:5a:bd:95:67:87:5b:b5:
41:28:67:7b:9c:4f:d6:6d:0a:f0:22:3f:be:f7:f6:
7b:9e:4b:98:f5:81:8b:bd:31:5c:e6:3b:d4:73:7d:
56:92:3d:1a:86:7c:2f:ec:61:d9:bc:82:b1:05:50:
85:a5:e3:34:0d:d3:57:bc:7a:32:e4:fe:45:fa:47:
d0:37:eb:c7:56:31:3e:c1:26:cf:bf:ce:1f:7e:f0:
5f:4a:c2:a7:1f:72:9c:34:a4:c0:02:e1:f4:f7:0a:
3d:d7:9b:52:59:43:b5:38:fa:0b:cb:6a:33:2d:a0:
d6:e6:17:fe:00:bb:c2:6a:30:70:50:8b:53:27:c3:
52:96:b7:03:1c:1a:01:df:f5:5e:06:58:d5:da:47:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:22:A5:49:EC:CB:6D:CB:6F:B4:A6:9C:84:B8:3D:81:F2:97:A7
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:71:a5:d5:71:01:31:3e:89:06:35:95:e2:7c:8f:15:e1:c7:
de:76:6e:e5:1e:ef:d8:85:f7:8e:e8:a7:2e:1a:92:a8:d4:07:
ba:47:e1:b6:2f:a6:25:50:90:8c:3c:7b:60:06:69:96:0f:b5:
62:df:e6:ee:a0:fe:23:d2:b1:8d:9d:84:b5:e8:af:ae:04:d7:
7d:ba:df:2f:ef:2a:5b:cb:68:be:23:8f:f0:76:26:f7:8d:00:
74:c2:0a:ad:59:ba:dc:81:61:41:4a:07:22:e4:d7:72:ba:40:
70:a5:ec:82:e0:ae:4b:94:4a:22:fb:e9:a6:94:95:a3:b6:11:
20:7a:11:f1:a9:bf:d3:d5:21:d4:04:ce:fb:8d:f6:67:89:ee:
13:9e:67:ea:36:94:36:bd:03:d8:1a:ab:11:d3:ed:dc:3b:0c:
93:64:bc:b3:d4:e7:d5:be:38:cb:36:17:ca:74:06:ff:8b:23:
02:92:56:af:d8:df:9a:f0:35:4a:79:2a:60:f3:62:25:cd:0a:
74:dc:ee:72:83:1d:1a:18:d0:ce:af:6e:3e:24:71:f0:27:2b:
a1:aa:4d:73:63:31:ca:0c:2c:da:95:ef:bc:1b:0c:d8:79:52:
67:16:15:8d:01:c5:92:45:51:99:22:da:8b:7d:7d:2c:26:e6:
72:4b:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:48 2025 by rpki-client