Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json)
Hash identifier: 6R28Du+2wdlBomflXim/jkfeQJuo6Uscq7VRQ/ZBrpo=
Subject key identifier: 70:D1:90:3D:7B:D1:33:8A:0B:C8:6D:B2:BE:45:05:9B:AA:AA:C2:E0
Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Certificate serial: 0194BC72B8EAC57A66B4A78974C0B67ABB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
Manifest number: 0168
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: JAIfP329pP2wbQjDnKdYDKhIu4Kq8W8m1KQstkuOCKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:ea:c5:7a:66:b4:a7:89:74:c0:b6:7a:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=70d1903d7bd1338a0bc86db2be45059baaaac2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:41:9c:e9:55:51:be:5a:b0:8c:20:c7:41:
b1:92:ac:36:b7:fc:ba:f6:c6:70:89:f5:54:58:00:
e4:cd:db:71:22:22:c3:4e:fb:2f:5e:13:5d:1a:2b:
e5:6c:25:4d:37:8d:13:86:d1:c9:9c:32:fd:78:14:
3b:fd:f2:02:8e:52:82:0c:22:9c:66:c2:0b:cf:50:
68:04:d0:c7:80:2a:fc:34:a0:80:27:1f:bf:8c:a6:
77:2e:6a:9e:20:5f:a5:3f:c1:f8:cb:e1:ac:dd:51:
ae:3d:cc:3d:db:87:25:d1:bf:84:d5:64:ef:d2:a1:
05:b7:0d:14:ea:d0:e2:91:fc:97:23:c4:f5:14:45:
6e:70:08:6d:9c:2b:01:0d:6a:f2:6c:a3:cd:c7:6d:
db:f9:e0:34:ca:54:27:97:4a:71:d3:34:eb:cb:5e:
aa:e4:29:cb:05:49:e1:96:4f:54:c1:0b:d3:c1:f4:
14:3b:15:16:6d:a9:af:6d:4f:89:ad:a2:da:2e:8b:
5a:85:2c:7a:f0:ab:41:f9:e4:57:14:9b:30:38:34:
c7:cc:1a:9e:0e:50:3a:46:3c:00:59:78:42:ba:1f:
a8:a3:52:19:2f:67:42:73:17:6a:d7:98:f3:6d:91:
a6:75:f6:75:75:38:a4:90:f6:74:8b:b6:ad:67:20:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D1:90:3D:7B:D1:33:8A:0B:C8:6D:B2:BE:45:05:9B:AA:AA:C2:E0
X509v3 Authority Key Identifier:
keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:fa:de:ce:c2:39:98:2d:24:9f:fd:6a:65:82:03:c5:49:
79:13:4f:7f:c0:78:12:e2:94:a1:b2:75:3c:8b:77:36:d9:7b:
4e:44:06:33:63:1e:54:1e:f5:ab:71:26:09:72:ad:51:90:d7:
85:04:f5:34:58:03:28:c2:18:9e:0a:72:3a:1d:30:7f:59:a6:
50:ab:ca:76:0b:48:eb:17:d2:d4:32:4c:79:3e:86:e9:25:bf:
dc:3f:57:59:fd:9d:ad:bd:75:d5:16:25:ef:06:2e:5f:89:e6:
28:7d:6c:dd:4b:95:36:c4:7f:d2:c0:af:4e:c7:07:bc:89:42:
95:21:b8:28:e3:b2:4d:15:50:cf:52:00:7d:d8:bc:ab:32:ea:
a6:32:f0:21:68:ba:4b:f0:b2:6b:8e:c1:08:c3:0a:6a:f3:4e:
28:bb:77:8e:13:2e:03:16:be:4f:f4:c9:e1:13:98:65:12:0f:
87:8f:fc:08:41:49:2d:de:8d:21:0c:82:02:45:50:e9:8e:c6:
f2:fd:a7:47:f0:58:af:67:e3:58:f3:10:0a:f1:e8:68:c3:a9:
ff:ed:55:3d:78:d6:e9:b5:d7:26:80:8f:a2:7a:87:a3:e2:82:
87:b3:f0:8f:63:fc:d1:af:b9:77:9c:2f:3e:b7:93:d7:11:ce:
94:00:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:36 2025 by rpki-client