Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: Bntfw4H2L8WCTZ7mG89+LDuA/MEiGrHT7k9QQJ0QaTU=
Subject key identifier: A4:D0:CD:29:5C:B9:00:EE:9D:D0:88:90:B7:80:05:CA:E7:DF:D0:3F
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 0194BBCE17BAD310C9201D0A39B5C278EC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 0B5B
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (hash: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: 16JRXdXOZUMjjlmgrh7SZ6nm4u51Mdmyi7QaSLd6lgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:17:ba:d3:10:c9:20:1d:0a:39:b5:c2:78:ec:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=a4d0cd295cb900ee9dd08890b78005cae7dfd03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:bf:2f:c3:31:ae:4c:70:34:eb:f1:9f:9a:
dc:3e:cc:bd:d2:88:31:15:15:e0:05:98:48:89:46:
89:84:66:b2:69:1e:3a:07:78:9b:50:8e:9f:4c:44:
90:d9:43:bd:1c:e4:43:a0:2f:30:9c:4a:05:d1:7b:
f1:53:88:36:5d:9c:d3:c2:83:61:aa:6a:c2:c7:e9:
10:aa:7d:64:40:67:d4:47:e9:0e:a1:64:89:24:3f:
70:de:5e:fb:11:2f:ec:61:9c:49:90:4f:17:d1:8c:
d4:a8:fa:bd:82:5a:84:0e:d0:c6:44:5b:e8:fd:1f:
d3:03:9c:86:ef:95:2e:e7:f5:cf:b5:bb:e1:e0:4b:
32:3f:a1:bd:d7:76:71:2c:a5:c5:99:11:4b:7b:d1:
44:50:a0:de:08:cb:95:f2:e5:a9:c7:9a:af:69:43:
51:cb:52:f6:6d:12:89:48:eb:28:99:9e:52:5a:1a:
8d:0e:03:52:2e:b4:c2:3a:a5:cc:5f:1f:96:77:96:
64:de:33:e0:a9:6a:61:46:df:55:cd:69:af:03:59:
b8:28:69:3a:7c:a6:cc:74:08:bc:e6:88:d1:8b:17:
75:9f:ec:6c:db:60:26:0e:96:22:78:74:df:be:73:
98:99:87:df:90:89:b7:8f:c9:68:71:f9:c4:73:27:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D0:CD:29:5C:B9:00:EE:9D:D0:88:90:B7:80:05:CA:E7:DF:D0:3F
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f2:dd:ab:b6:d0:35:83:e1:47:5d:e6:89:82:bd:d9:7a:f6:
c0:1b:c5:a6:95:28:92:59:72:97:e7:d7:34:bf:c8:ee:3f:99:
2c:88:db:47:ce:04:8f:14:a4:77:80:ec:13:44:53:00:14:ee:
10:c9:0c:40:33:67:45:46:bb:98:a2:b3:71:41:80:13:b8:79:
c2:59:e8:4c:68:83:98:f5:ce:53:67:0f:96:63:11:19:4f:82:
ab:cf:36:a2:63:ed:e3:eb:3b:ad:8c:40:c2:97:91:b6:1b:9c:
a4:de:5a:f1:25:7e:03:87:18:8f:96:fc:1e:d1:59:d1:33:6a:
f6:28:c9:e5:97:a2:41:8f:41:8b:d2:e3:7e:5f:43:68:e5:8a:
ce:93:1a:5f:4f:bd:0f:3c:4a:92:c7:e3:44:0a:4c:ba:24:98:
1c:2f:b6:f1:bd:23:57:d1:d6:45:75:62:18:04:09:f4:13:0e:
8d:c5:b8:2a:39:43:26:ef:0f:93:0e:6c:d4:7f:4a:ac:bc:79:
fb:38:58:12:02:03:2d:14:db:a7:a2:3f:b6:4f:57:7f:de:80:
e8:38:ad:93:8b:ee:76:43:e8:e5:42:ae:85:72:a8:07:ea:00:
91:bf:6a:9d:60:67:a4:b7:b4:fe:c4:ce:51:21:04:0b:39:c7:
61:37:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client